This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7K9QmiKsZ8SGDx2qN3soxLhXpKw.roa
File:                     7K9QmiKsZ8SGDx2qN3soxLhXpKw.roa (raw, json)
Hash identifier:          yvqmetRmMdc11k8HTqn+SyjBeT1pS2HhIqus6eV035I=
Subject key identifier:   EC:AF:50:9A:22:AC:67:C4:86:0F:1D:AA:37:7B:28:C4:B8:57:A4:AC
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019AE2F4DB8C3673FA301F0B82EED6A22FCD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7K9QmiKsZ8SGDx2qN3soxLhXpKw.roa
Signing time:             Wed 03 Dec 2025 06:44:49 +0000
ROA not before:           Wed 03 Dec 2025 06:44:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198154
IP address blocks:        94.183.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e2:f4:db:8c:36:73:fa:30:1f:0b:82:ee:d6:a2:2f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Dec  3 06:44:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ecaf509a22ac67c4860f1daa377b28c4b857a4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:ca:74:56:d3:44:bf:60:5d:2e:c3:fd:13:
                    d8:bd:4a:f3:6d:14:47:1a:2d:d0:ff:54:05:f6:9b:
                    de:ac:d4:ac:c6:1a:ec:92:b6:0d:a1:9a:ff:5e:b3:
                    0d:af:9f:3b:bd:78:fe:ab:ae:f9:86:40:bd:55:e6:
                    1c:74:2c:7e:3f:71:69:b1:0a:f7:6e:a0:e2:21:a3:
                    a1:ba:ac:98:e9:8b:66:b1:5e:40:73:43:05:c3:76:
                    ce:1f:bf:07:76:a2:6d:3c:d1:9a:92:66:4a:c3:03:
                    71:e6:4e:4f:d4:b9:7e:d1:d2:51:ec:3d:8f:b4:27:
                    5d:8a:a8:0a:99:23:50:62:2a:86:77:18:d5:43:f4:
                    57:8f:1c:71:97:11:68:d7:4f:cb:a0:b0:20:29:aa:
                    d0:66:bd:5d:fa:0e:9e:ae:74:b7:85:fe:fe:0f:c0:
                    08:a9:69:c7:94:51:e0:f4:dd:29:67:0d:54:59:f3:
                    a1:a4:07:bd:de:4c:05:41:42:ad:da:40:dc:01:b8:
                    f2:62:02:d4:11:17:08:aa:ad:25:cc:12:62:c1:d2:
                    c1:4d:08:a3:79:4a:7b:1e:fe:3d:da:ce:76:9b:ad:
                    96:ca:f7:b2:ad:dc:c2:71:85:14:16:9a:de:d3:0e:
                    d7:69:0a:2d:f6:e3:da:1a:45:c0:20:b7:a4:1e:99:
                    1b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AF:50:9A:22:AC:67:C4:86:0F:1D:AA:37:7B:28:C4:B8:57:A4:AC
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7K9QmiKsZ8SGDx2qN3soxLhXpKw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.183.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8b:2e:25:d1:22:6c:f1:2b:7e:74:48:13:3a:63:c7:48:ba:
         a7:bc:13:d7:33:d5:bd:7a:26:b8:bd:cd:24:cc:33:96:72:37:
         a2:96:d3:f9:82:a5:90:bc:cd:0c:fe:73:e1:1d:ca:df:d3:b8:
         fe:88:e3:89:88:e5:26:fa:67:cc:ac:56:4d:58:a9:7c:ca:3e:
         35:9d:18:1f:f3:ed:5a:7a:ea:fd:7a:80:e2:07:d6:b6:22:58:
         6e:7d:39:53:33:2a:78:79:c5:d9:ec:6e:7b:9a:37:70:c1:9f:
         93:cb:ea:ee:d5:c8:de:48:66:17:53:ba:cb:67:d1:09:f6:a7:
         98:4d:29:3b:72:e2:ac:c9:bf:7a:36:d9:d9:62:e4:74:50:5e:
         55:26:54:f0:c1:4a:e8:29:05:d6:5d:4c:2e:c9:9c:98:62:d0:
         02:70:82:05:eb:a2:32:1f:7c:44:7f:ce:db:6c:08:45:fd:b4:
         fe:e8:ad:84:2a:53:9d:dd:c3:82:b9:88:03:35:64:88:33:ba:
         ee:f9:b9:85:eb:2c:be:c9:87:b3:50:d2:fa:b1:68:e6:02:6c:
         fc:08:dd:5b:81:50:41:e7:68:8f:0a:9d:67:f4:f9:bc:bc:24:
         d1:6d:2b:2c:1c:02:87:d9:75:52:7c:d0:a9:f7:86:fd:20:44:
         04:3e:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:43:34 2025 by rpki-client