This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/_Z7JEWza1bSPD-7PWbG0vX89s3o.roa
File:                     _Z7JEWza1bSPD-7PWbG0vX89s3o.roa (raw, json)
Hash identifier:          OZMVtPUDYR+RELQo2A6anCLj+47zVFIRgvSkDtlYuQw=
Subject key identifier:   FD:9E:C9:11:6C:DA:D5:B4:8F:0F:EE:CF:59:B1:B4:BD:7F:3D:B3:7A
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       019B7A5B77D986AE400841E2E3EA33444D56
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/_Z7JEWza1bSPD-7PWbG0vX89s3o.roa
Signing time:             Thu 01 Jan 2026 16:19:33 +0000
ROA not before:           Thu 01 Jan 2026 16:19:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49600
IP address blocks:        193.46.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:77:d9:86:ae:40:08:41:e2:e3:ea:33:44:4d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: Jan  1 16:19:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd9ec9116cdad5b48f0feecf59b1b4bd7f3db37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:46:7e:46:17:44:8a:62:03:74:a5:aa:8d:a9:
                    5f:f2:d0:15:c6:00:da:9c:2f:be:3d:00:f9:da:b6:
                    f8:d4:eb:21:1c:33:01:12:96:17:39:7e:19:fb:ee:
                    56:c2:f6:1a:1a:3f:84:b9:21:d7:66:15:c1:60:b8:
                    3c:f4:2e:da:bb:a4:05:a7:38:4d:7e:6a:7a:e6:a2:
                    69:22:4e:81:ff:f4:23:4c:e8:c3:18:06:2a:5f:df:
                    bc:47:7c:90:51:a4:5f:c1:8e:0a:ad:57:87:10:fa:
                    6c:05:cf:8b:e0:d0:21:0a:cb:ae:89:d9:fe:68:03:
                    b9:43:6d:1e:99:e6:aa:97:0f:cc:e9:ce:e5:9e:76:
                    74:2c:4d:cb:b8:44:1d:03:dc:bd:81:b1:a1:04:a1:
                    14:95:10:50:5f:9d:e5:e8:3f:a7:f0:34:e0:f1:c4:
                    d6:b4:84:6c:f9:92:b4:0c:c9:25:f1:26:f5:aa:e1:
                    c0:5d:c7:f6:7d:15:ca:df:9b:51:87:24:c4:0e:38:
                    1c:f7:97:4d:f3:b4:bb:cb:ef:d8:bd:fd:92:41:d0:
                    c7:26:d7:2b:12:ba:08:54:cc:e7:0c:f2:47:96:c6:
                    f4:ac:d5:a4:a8:f7:05:63:5f:fc:7a:18:36:d0:d0:
                    84:08:53:46:0a:99:5b:c2:09:05:d2:5e:35:6f:a6:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9E:C9:11:6C:DA:D5:B4:8F:0F:EE:CF:59:B1:B4:BD:7F:3D:B3:7A
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/_Z7JEWza1bSPD-7PWbG0vX89s3o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:6e:35:04:28:c5:21:57:c4:e3:b2:7c:5b:7e:81:d7:dd:
         9b:0f:fe:79:51:c0:29:82:31:ff:67:ed:db:7e:77:97:7c:70:
         e8:cf:9a:68:d2:89:26:ca:40:d1:de:1c:b1:54:c5:66:db:17:
         82:d9:96:b3:60:2c:49:8c:80:00:2d:b1:a5:56:36:c6:cf:c7:
         7f:49:e5:5d:6a:b5:bb:b1:86:03:37:4f:7b:47:45:35:5b:f5:
         2c:ee:ef:bf:95:98:fc:0d:30:40:56:76:c9:ee:3b:49:e3:a9:
         80:96:75:9e:06:05:40:db:cc:59:29:1f:f2:ae:3a:45:fc:9f:
         43:3c:57:1c:ae:a4:95:dc:e5:51:46:23:9d:92:53:29:f7:67:
         cd:b3:85:e3:bb:0f:2f:d5:48:74:f9:94:9c:c5:e9:37:f9:c6:
         a5:bd:8d:53:b3:88:a4:50:bc:39:7d:f8:4a:17:04:6a:64:89:
         5c:66:11:d0:d9:78:11:5e:c4:26:24:86:b3:99:a8:d5:e2:a3:
         49:3c:6a:85:25:70:2d:5a:2f:d2:1c:11:f5:06:d6:b4:a5:64:
         7e:aa:e0:19:30:61:fc:5e:b5:c1:92:c0:95:82:73:3d:e1:9e:
         c4:0d:29:d2:9f:15:b5:e3:72:ad:fd:a9:78:c2:56:1e:07:bb:
         23:64:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:40:34 2026 by rpki-client