This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/7r4ZXKz9RUnPmqvrGpcL4c9s6uE.roa
File:                     7r4ZXKz9RUnPmqvrGpcL4c9s6uE.roa (raw, json)
Hash identifier:          TjqR9pBqeAaKXzawGJajC/5EzIOxqUpNkIWNRPKzQiY=
Subject key identifier:   EE:BE:19:5C:AC:FD:45:49:CF:9A:AB:EB:1A:97:0B:E1:CF:6C:EA:E1
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       019B7BA3C3EA2B450418EDD431E8871A079E
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/7r4ZXKz9RUnPmqvrGpcL4c9s6uE.roa
Signing time:             Thu 01 Jan 2026 22:18:08 +0000
ROA not before:           Thu 01 Jan 2026 22:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206854
IP address blocks:        93.126.16.0/24 maxlen: 24
                          93.126.30.0/24 maxlen: 24
                          93.126.52.0/24 maxlen: 24
                          93.126.53.0/24 maxlen: 24
                          93.126.55.0/24 maxlen: 24
                          93.126.57.0/24 maxlen: 24
                          93.126.58.0/24 maxlen: 24
                          193.178.201.0/24 maxlen: 24
                          193.178.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:c3:ea:2b:45:04:18:ed:d4:31:e8:87:1a:07:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jan  1 22:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eebe195cacfd4549cf9aabeb1a970be1cf6ceae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:37:66:98:f5:4e:00:2a:29:2a:82:d8:d3:
                    86:ec:1e:ae:a8:d8:d3:bf:b5:65:1d:63:95:63:12:
                    4b:d4:71:23:53:97:2c:c5:08:7b:35:49:54:0a:c7:
                    ab:d4:8b:d1:a7:5b:3e:97:3e:d8:7d:ec:59:9e:e0:
                    bd:57:74:24:4d:e5:0c:49:d6:88:92:42:97:15:ac:
                    6d:af:67:3a:47:ff:3a:d4:6e:63:df:ff:c6:e3:97:
                    fb:77:47:0e:04:ba:aa:59:d2:f1:75:16:0d:1f:3a:
                    83:f7:20:61:c9:1a:60:04:4f:d8:5b:6b:2b:77:cd:
                    42:aa:85:6b:ef:e6:49:9a:1c:5a:04:d4:a7:de:87:
                    ff:84:b1:87:99:35:2e:f8:af:b1:62:1b:1f:bd:df:
                    22:56:3c:16:72:f8:54:ba:c5:a0:ff:ba:36:68:6b:
                    5f:67:a3:08:e2:fd:96:30:be:af:be:4e:e3:14:15:
                    55:0b:25:59:99:52:78:45:73:dc:35:fc:15:ba:0d:
                    1c:c5:6f:c5:85:1d:dd:7d:14:49:0f:60:57:54:08:
                    3c:e9:8a:ce:31:72:b2:af:ff:dc:5b:58:df:17:9f:
                    38:0e:86:72:6b:f0:64:79:67:be:62:16:87:9d:c9:
                    b0:64:0e:76:ff:04:9a:46:09:76:1f:9b:7b:0c:d2:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:19:5C:AC:FD:45:49:CF:9A:AB:EB:1A:97:0B:E1:CF:6C:EA:E1
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/7r4ZXKz9RUnPmqvrGpcL4c9s6uE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.16.0/24
                  93.126.30.0/24
                  93.126.52.0/23
                  93.126.55.0/24
                  93.126.57.0-93.126.58.255
                  193.178.201.0-193.178.202.255

    Signature Algorithm: sha256WithRSAEncryption
         ab:ec:f6:9c:28:38:da:f3:81:43:c4:fd:a3:53:f8:be:a7:0b:
         54:3d:93:d2:0b:58:ea:f1:13:f7:34:68:ed:7b:ad:71:e1:02:
         3e:8d:60:66:11:70:59:b9:95:73:82:6a:d1:12:97:16:10:fc:
         1d:34:e1:2e:e3:35:de:5c:e7:b3:4a:4c:8c:81:45:31:81:66:
         b2:62:85:55:25:d5:06:03:fa:28:ee:ff:67:12:ee:b5:3d:c0:
         58:4c:49:e7:83:d2:e7:43:a0:1e:42:52:03:06:55:9b:e3:4a:
         09:1d:77:2c:ed:63:ba:1e:10:59:8a:eb:3c:4b:1f:97:a5:93:
         c4:83:a4:c1:d9:4b:71:0d:79:1d:54:cc:dc:e2:a1:98:a7:35:
         32:88:bb:5c:a3:d7:29:c2:df:2c:f4:59:d4:e5:d0:41:fa:f0:
         c0:f3:23:90:b4:c8:00:4d:d8:97:56:55:ec:ed:73:9e:32:98:
         6a:a2:a6:11:36:bd:f5:41:52:e6:53:48:ee:d9:53:7a:9c:df:
         99:1c:06:1f:a4:3f:63:95:9e:05:b1:04:cd:82:bf:0d:57:52:
         c2:c0:0c:2e:f3:bd:bd:f6:bf:be:1f:e5:8f:15:fb:79:b8:b1:
         6f:88:c2:41:ba:07:31:00:7d:a4:9a:4a:b3:9a:10:1a:16:d2:
         be:12:8a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:57:43 2026 by rpki-client