This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa
File:                     7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa (raw, json)
Hash identifier:          hG4yO49oHj9b8DfZFiphyKQ8y3qDFd1bbzb1jH4CrQU=
Subject key identifier:   EF:FE:92:15:77:D9:32:BC:C5:49:DB:6E:DF:10:CE:C3:48:09:F0:96
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       019B7CEDBCFBC46AE5A208F244576688F837
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa
Signing time:             Fri 02 Jan 2026 04:18:33 +0000
ROA not before:           Fri 02 Jan 2026 04:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35123
IP address blocks:        195.225.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:bc:fb:c4:6a:e5:a2:08:f2:44:57:66:88:f8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Jan  2 04:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=effe921577d932bcc549db6edf10cec34809f096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:f2:ab:8f:6d:bd:94:c2:cf:16:5c:96:b1:
                    c6:5d:df:8a:b7:ab:dc:79:03:46:57:ae:43:94:57:
                    85:84:a4:e8:1f:d9:7c:86:62:4d:fd:51:0f:3c:05:
                    bb:08:5b:bb:6b:dd:46:95:90:63:83:4f:ae:74:d8:
                    30:a3:37:2d:88:89:5a:ed:57:ad:d2:f2:c4:b3:40:
                    d9:c7:49:79:19:73:61:51:e7:53:9f:d9:ec:71:bf:
                    6f:b2:50:63:50:c6:bf:1e:2c:7b:08:a1:46:a6:01:
                    d3:da:52:b1:d4:0e:5d:ee:46:9f:2a:21:04:20:bd:
                    20:35:4c:c3:47:b8:25:35:65:d4:9c:ca:8a:99:b4:
                    e2:b3:aa:43:9a:47:82:cd:99:8b:f6:c4:43:e3:15:
                    32:2d:be:83:f8:12:fd:df:11:38:3b:2f:21:77:dc:
                    97:b9:e7:01:e3:c3:f0:e5:c0:d2:2c:23:f9:a2:2a:
                    02:34:7e:28:70:22:b0:2f:a3:e5:90:60:fc:c6:61:
                    55:8c:b8:eb:36:a4:6a:a8:76:47:2a:31:9e:5a:b7:
                    b7:c3:31:99:72:37:08:5f:7e:4f:44:8d:55:f1:f9:
                    c5:7a:bd:a0:59:e8:0e:ea:68:a6:cf:92:8f:91:28:
                    38:84:88:f0:4b:e7:2c:de:f6:1b:5a:db:ad:22:06:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FE:92:15:77:D9:32:BC:C5:49:DB:6E:DF:10:CE:C3:48:09:F0:96
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.225.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:4d:ab:04:9e:94:19:04:4a:eb:e3:59:8b:ec:fc:3f:bd:88:
         6e:6d:b6:a9:ad:58:ed:82:4c:61:04:60:c1:21:b9:e4:d5:e9:
         c1:4c:78:c0:2f:af:92:4f:28:e5:dd:6c:50:3f:b6:08:8a:1e:
         b0:16:05:ed:cd:82:8c:0f:ec:99:29:42:2d:7a:28:d3:8f:e9:
         b2:01:dc:f8:1b:5a:55:48:5c:f3:9a:1a:03:02:76:eb:cb:3c:
         64:97:32:d9:da:76:7c:58:d9:15:49:7b:df:73:50:83:be:81:
         b7:8c:4e:b6:a1:dd:d4:13:65:fe:77:30:9d:65:b4:9b:46:22:
         e6:ee:e7:da:18:a7:08:dc:85:c7:f3:f6:02:10:44:bb:63:c9:
         df:9a:26:2f:0e:20:cc:28:6a:f9:2c:94:85:76:a7:e7:6f:bd:
         6e:f2:6f:34:5f:de:19:68:84:18:44:97:16:15:d9:b0:65:76:
         b0:90:a3:02:92:33:94:42:50:49:78:71:b8:3a:c8:76:52:3d:
         8f:2b:3b:29:29:8a:32:c3:cb:16:81:09:ee:79:bd:c3:55:cc:
         55:0f:c5:20:09:18:ab:52:7d:64:ce:f3:be:45:1c:98:42:e8:
         c4:cd:9d:6a:34:ac:56:93:06:5e:82:f1:1e:65:30:c6:b7:b9:
         df:28:47:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:10 2026 by rpki-client