This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa
File:                     f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa (raw, json)
Hash identifier:          NQ/xxQW3U9GvugxkG2jNW4TodVkdfN7Ntdsb5/uc4tM=
Subject key identifier:   7F:FB:44:7C:A7:79:85:5D:BF:4E:77:C2:4D:1C:89:3F:51:ED:9B:80
Certificate issuer:       /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial:       019B7758AD369D8B412FF55A33961E9DA1B7
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa
Signing time:             Thu 01 Jan 2026 02:17:38 +0000
ROA not before:           Thu 01 Jan 2026 02:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8812
IP address blocks:        51.18.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:ad:36:9d:8b:41:2f:f5:5a:33:96:1e:9d:a1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
        Validity
            Not Before: Jan  1 02:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ffb447ca779855dbf4e77c24d1c893f51ed9b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:5e:94:08:9e:70:17:47:f7:3e:22:53:f2:
                    3a:f0:6c:fe:aa:c9:f1:43:b6:c1:d8:2a:2a:5d:e4:
                    7e:36:b6:2f:32:40:57:8c:00:2b:cc:b3:dd:ad:1a:
                    1b:6d:0f:17:81:5d:96:6f:ad:07:25:39:03:e1:c4:
                    63:7a:2d:9e:41:bf:2c:1c:ee:8b:47:6d:08:cb:71:
                    5d:7b:dc:e6:27:5e:a0:8c:d0:38:de:67:06:15:28:
                    76:64:11:fc:15:e8:ad:18:7e:b2:3f:a1:db:95:6c:
                    40:58:5d:d5:97:c6:da:46:8f:f1:d4:d9:05:20:2e:
                    82:65:2d:29:5c:82:c0:47:ec:cf:f6:9f:1c:51:75:
                    a6:66:a7:87:28:51:9d:ee:b7:b4:c4:36:0d:f4:86:
                    a4:94:d5:81:3b:4e:4e:e9:ab:e0:cf:59:0b:ef:45:
                    25:c5:64:f4:d3:7b:17:d6:7e:0e:cf:be:cd:fd:bf:
                    90:c6:d8:56:cd:a2:f1:3d:21:06:01:ea:a5:30:55:
                    fb:af:99:ed:96:90:6b:ad:44:66:ab:8f:c5:9f:81:
                    46:1c:a1:2b:3d:a8:ef:1a:61:70:fc:25:36:85:9b:
                    dc:65:3d:5f:6b:68:cf:42:5a:e0:df:5a:96:b8:c2:
                    a8:e8:66:66:06:53:e2:6d:eb:97:4b:cf:09:29:3f:
                    6a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FB:44:7C:A7:79:85:5D:BF:4E:77:C2:4D:1C:89:3F:51:ED:9B:80
            X509v3 Authority Key Identifier:
                keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/f_tEfKd5hV2_TnfCTRyJP1Htm4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:e0:07:c7:94:06:85:b3:a8:18:6c:e9:84:30:53:59:0d:4f:
         2b:6e:4e:cd:ac:7b:48:63:3c:cc:0f:87:56:7a:20:cc:be:41:
         31:10:1d:d1:3e:79:ae:61:54:9d:9c:19:48:89:48:cc:5b:d7:
         05:5c:48:d0:c9:e8:c6:e4:9e:54:1d:40:c2:31:e0:a7:bb:2f:
         56:b7:b6:65:86:6e:bc:85:1d:93:71:31:df:db:30:d2:53:5d:
         b8:88:ea:db:42:52:27:fe:27:09:1b:0d:44:da:88:94:ae:ed:
         13:8e:d0:b7:8a:19:21:ad:93:d9:b0:6c:fe:4a:20:cc:4e:e6:
         0c:d6:56:0f:74:ec:ed:e4:4c:e9:b7:3f:35:e9:4a:3f:07:c8:
         8e:d8:30:0e:c8:63:65:b1:78:c6:57:9e:15:8d:69:07:c5:28:
         0d:c3:90:e8:6f:91:0b:f1:c5:96:37:f2:0c:c8:79:d5:6a:b4:
         45:96:b4:67:db:d1:60:6d:12:57:f7:09:34:f5:94:71:8a:13:
         0b:f9:9f:78:ff:1f:c3:6d:16:23:30:f0:98:6b:47:4c:0d:16:
         a0:fb:b0:d0:c9:db:e4:00:9f:84:06:69:45:4d:39:4f:79:d9:
         18:3f:a0:86:2d:af:87:52:c2:6c:9f:2b:46:24:06:6c:94:c3:
         37:47:87:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:11:28 2026 by rpki-client