This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/8azUINAdDrKjSOMgy-JPOT73XRM.roa
File:                     8azUINAdDrKjSOMgy-JPOT73XRM.roa (raw, json)
Hash identifier:          ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=
Subject key identifier:   F1:AC:D4:20:D0:1D:0E:B2:A3:48:E3:20:CB:E2:4F:39:3E:F7:5D:13
Certificate issuer:       /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial:       019B79EBF8051D143C4BCFC63B9155D6D5CC
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/8azUINAdDrKjSOMgy-JPOT73XRM.roa
Signing time:             Thu 01 Jan 2026 14:17:46 +0000
ROA not before:           Thu 01 Jan 2026 14:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60337
IP address blocks:        87.252.240.0/24 maxlen: 24
                          93.125.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:f8:05:1d:14:3c:4b:cf:c6:3b:91:55:d6:d5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
        Validity
            Not Before: Jan  1 14:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f1acd420d01d0eb2a348e320cbe24f393ef75d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dd:a9:2f:c9:f9:15:2e:15:07:58:39:38:94:
                    9b:25:66:2e:60:1c:73:1b:02:c9:36:cc:9f:65:85:
                    45:c2:a8:1f:cd:ef:45:09:b4:17:b1:a1:2f:90:74:
                    21:b8:e0:0d:c7:fd:09:ce:67:33:da:9e:80:3e:0a:
                    8e:9c:ac:79:e1:b6:6d:25:f9:f2:f2:15:2b:e8:3a:
                    7d:16:ec:4d:3e:25:db:9e:26:31:36:f2:61:57:e5:
                    7a:9a:9e:66:ea:ae:08:f6:23:02:2a:f0:a0:af:17:
                    d1:14:99:54:5b:e1:8f:c7:e2:f6:0a:4c:3d:86:08:
                    d9:f9:4b:09:19:9c:e3:a7:ef:72:98:33:89:3a:82:
                    1d:70:cb:80:37:18:db:33:12:fa:8a:8c:27:d9:f8:
                    40:6d:22:fb:f2:18:d8:aa:7c:16:97:f4:72:da:0e:
                    31:8e:93:a9:5b:b0:26:53:1f:2a:06:68:d9:3c:4e:
                    95:03:9c:80:52:6d:d4:db:b6:41:ab:80:79:d6:38:
                    e6:0d:4e:08:af:5a:ef:c3:5a:0d:b6:a6:ab:70:a1:
                    0e:12:d4:e1:86:f4:d5:fe:f2:4b:e6:17:82:e1:26:
                    ce:f8:c2:1f:05:88:73:a9:04:59:da:ea:d6:37:29:
                    7d:64:95:88:2f:7c:81:2c:c1:1e:3d:96:64:d1:00:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AC:D4:20:D0:1D:0E:B2:A3:48:E3:20:CB:E2:4F:39:3E:F7:5D:13
            X509v3 Authority Key Identifier:
                keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/8azUINAdDrKjSOMgy-JPOT73XRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.252.240.0/24
                  93.125.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:5b:37:2b:67:b6:06:1c:5f:05:52:53:2b:82:aa:5b:dc:c2:
         6f:f3:12:04:d7:2f:75:6b:01:c9:a8:c0:69:75:6d:f5:a9:07:
         23:0b:03:35:a2:76:03:fc:07:16:49:a7:c3:ef:96:bd:75:d0:
         b6:7e:84:0d:69:78:b8:8d:cc:11:88:c0:2f:d4:5f:8f:fe:95:
         bc:0f:35:29:32:e7:69:ef:e8:f1:05:f3:d2:53:f6:e7:ec:a8:
         a6:34:26:cc:32:93:2d:64:5c:fb:37:c8:7b:43:fc:be:49:e1:
         73:a7:89:d9:0c:3d:29:5c:34:0a:19:03:3c:b7:d7:5e:68:67:
         91:35:79:46:28:5b:2c:d6:4f:15:94:e4:df:48:84:eb:d2:e9:
         77:a3:93:ed:59:f1:bd:12:6a:46:53:5f:92:ad:33:22:0d:9e:
         2d:c5:ac:ec:41:0c:f6:f2:8d:ac:d4:5c:5f:bc:bf:f8:bb:8b:
         51:57:9c:6c:fc:17:66:d9:20:8a:a9:9c:05:bc:fc:0f:cb:1a:
         db:e5:56:28:9d:b6:94:35:ee:f6:f1:b9:67:5d:44:2f:8f:e9:
         6c:0c:e3:74:b5:3d:8a:75:a9:6f:9f:b8:b6:4c:1a:95:80:07:
         ef:6d:ef:ca:2a:e9:39:99:90:70:a3:7a:26:d1:12:7a:aa:11:
         f6:61:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:27 2026 by rpki-client