This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa
File:                     7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa (raw, json)
Hash identifier:          v9zlg7kFGnsHSQNcetbSYedV3Coh51JEiDo9qlPpjd0=
Subject key identifier:   ED:38:CA:9E:15:F9:0F:97:5E:40:7A:17:2D:4A:22:48:C0:F2:F5:8D
Certificate issuer:       /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial:       019B7F83E9108BCFBBE0F95249652249D9F6
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa
Signing time:             Fri 02 Jan 2026 16:21:49 +0000
ROA not before:           Fri 02 Jan 2026 16:21:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210019
IP address blocks:        93.105.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:e9:10:8b:cf:bb:e0:f9:52:49:65:22:49:d9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
        Validity
            Not Before: Jan  2 16:21:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed38ca9e15f90f975e407a172d4a2248c0f2f58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:e6:9e:68:9a:8f:3a:08:90:12:0c:e6:58:
                    86:35:f6:c5:f6:38:1b:f3:f9:ab:0f:17:df:e6:49:
                    7f:26:cb:97:39:8c:37:23:6e:e6:d1:35:9e:41:c2:
                    87:70:92:15:ec:77:ef:ad:f3:89:58:56:a1:8c:26:
                    7e:a3:a3:c8:a7:5e:ab:50:d4:7a:ff:3d:4b:b3:1b:
                    9a:fa:4e:c8:52:58:7c:b2:55:81:f0:19:c5:24:40:
                    35:f4:e7:8e:76:db:b4:01:5f:51:0d:19:02:5a:4c:
                    c4:0c:fa:c7:3d:e8:46:b8:c9:60:17:0c:bd:68:19:
                    6c:1a:94:a7:92:46:4a:a7:58:49:8a:91:02:3c:88:
                    d8:5b:30:aa:00:6e:8f:e9:d8:c5:8b:f2:d0:e5:7c:
                    42:f5:ce:a5:25:19:d2:2b:79:3a:8a:e9:74:7d:e1:
                    56:34:40:81:1e:49:b9:60:ac:5a:7a:b4:83:9a:28:
                    03:7e:47:43:fe:cb:48:8b:06:9a:65:cf:59:03:f3:
                    59:02:74:39:31:3e:be:17:b3:09:f6:60:ac:49:b6:
                    7b:a2:07:4d:13:2c:19:fc:d5:d6:aa:a7:23:51:36:
                    35:b6:06:5c:2d:ae:b6:ad:21:b6:74:06:10:a1:f0:
                    78:35:38:e6:38:08:d3:68:70:5c:5e:5f:bd:69:14:
                    d1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:38:CA:9E:15:F9:0F:97:5E:40:7A:17:2D:4A:22:48:C0:F2:F5:8D
            X509v3 Authority Key Identifier:
                keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/7TjKnhX5D5deQHoXLUoiSMDy9Y0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.105.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:66:07:71:31:ef:44:ae:56:f9:6b:d9:64:95:e2:96:1d:7f:
         c1:0b:eb:63:a3:b9:42:c7:d5:1e:9e:52:6a:e1:ce:65:7c:10:
         47:e3:e8:be:ec:fc:09:9b:c2:93:a9:40:f1:2f:70:14:2d:ef:
         6d:87:00:a0:8a:65:8d:bb:17:40:13:36:be:03:cc:e1:41:5d:
         b7:b4:71:4f:9e:46:cc:3b:b5:61:bc:fc:bc:c3:59:bd:1f:f3:
         95:6c:71:d9:e4:4f:5e:70:a8:d5:fe:8d:3b:8e:f7:c9:bd:27:
         fc:1c:e1:0e:6f:ec:8b:8b:9c:df:fa:3f:5e:d2:1b:8b:37:d6:
         11:11:b5:74:f4:7c:75:22:1f:44:0c:eb:ec:c4:b4:16:6e:f3:
         b4:6a:e8:f3:0a:31:3e:e0:fa:51:85:8f:12:75:59:1e:da:5f:
         78:1e:dd:29:50:7e:ff:58:ad:cb:bf:c5:52:f2:ab:57:fd:81:
         5c:7c:d0:34:6c:64:62:08:c6:4e:0b:a4:08:ec:c6:b3:bb:ad:
         1b:24:cb:64:a4:84:bf:0d:01:3b:fe:ac:f7:4d:93:81:16:60:
         e2:80:c1:62:c9:65:c2:f7:e6:95:d4:97:e6:8a:67:5c:35:c1:
         3e:01:dc:b7:34:ff:ed:4e:7a:83:fa:63:2f:84:ba:60:62:a2:
         d0:0c:b6:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/g+kQi8+74PlSSWUiSdn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZjFiMTYzY2FiMGM0NWE4NGVlYjEzMjYxYjY1ZjFh
MjI5NjIwHhcNMjYwMTAyMTYyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDM4Y2E5ZTE1ZjkwZjk3NWU0MDdhMTcyZDRhMjI0OGMwZjJmNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfDmnmiajzoIkBIM5liGNfbF9jgb
8/mrDxff5kl/JsuXOYw3I27m0TWeQcKHcJIV7HfvrfOJWFahjCZ+o6PIp16rUNR6
/z1Lsxua+k7IUlh8slWB8BnFJEA19OeOdtu0AV9RDRkCWkzEDPrHPehGuMlgFwy9
aBlsGpSnkkZKp1hJipECPIjYWzCqAG6P6djFi/LQ5XxC9c6lJRnSK3k6iul0feFW
NECBHkm5YKxaerSDmigDfkdD/stIiwaaZc9ZA/NZAnQ5MT6+F7MJ9mCsSbZ7ogdN
EywZ/NXWqqcjUTY1tgZcLa62rSG2dAYQofB4NTjmOAjTaHBcXl+9aRTROQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO04yp4V+Q+XXkB6Fy1KIkjA8vWNMB8GA1UdIwQY
MBaAFOZZbxsWPKsMRahO6xMmG2XxoiliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMt
ZTA1MzRlMjM4NTliLzEvN1RqS25oWDVENWRlUUhvWExVb2lTTUR5OVkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lZGU5NGUtYmEyYS00MWVlLWIxMmMtZTA1MzRlMjM4NTli
LzEvNWxsdkd4WThxd3hGcUU3ckV5WWJaZkdpS1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXWlLMA0G
CSqGSIb3DQEBCwUAA4IBAQA1ZgdxMe9Erlb5a9lkleKWHX/BC+tjo7lCx9UenlJq
4c5lfBBH4+i+7PwJm8KTqUDxL3AULe9thwCgimWNuxdAEza+A8zhQV23tHFPnkbM
O7VhvPy8w1m9H/OVbHHZ5E9ecKjV/o07jvfJvSf8HOEOb+yLi5zf+j9e0huLN9YR
EbV09Hx1Ih9EDOvsxLQWbvO0aujzCjE+4PpRhY8SdVke2l94Ht0pUH7/WK3Lv8VS
8qtX/YFcfNA0bGRiCMZOC6QI7Mazu60bJMtkpIS/DQE7/qz3TZOBFmDigMFiyWXC
9+aV1JfmimdcNcE+Ady3NP/tTnqD+mMvhLpgYqLQDLal
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:38:37 2026 by rpki-client