This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/L7Fw_pE_uIVOAljpwcORB_TO0e0.roa
File:                     L7Fw_pE_uIVOAljpwcORB_TO0e0.roa (raw, json)
Hash identifier:          LwpLkkyhHw0/XGwf0EZyruGJGOTjHQ00KQiB9tXOF+k=
Subject key identifier:   2F:B1:70:FE:91:3F:B8:85:4E:02:58:E9:C1:C3:91:07:F4:CE:D1:ED
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       019B77C730EA9C2F116525B6AE94C3675F8E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/L7Fw_pE_uIVOAljpwcORB_TO0e0.roa
Signing time:             Thu 01 Jan 2026 04:18:21 +0000
ROA not before:           Thu 01 Jan 2026 04:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39337
IP address blocks:        195.208.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:30:ea:9c:2f:11:65:25:b6:ae:94:c3:67:5f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Jan  1 04:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2fb170fe913fb8854e0258e9c1c39107f4ced1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:d7:c9:3f:e9:07:9d:5a:92:80:1e:80:ee:
                    73:55:47:b3:f7:d5:bd:fb:21:dc:13:2c:44:bf:39:
                    6e:f0:85:04:cc:cb:55:f7:72:f8:9f:e4:cd:24:57:
                    4f:f7:d1:37:28:40:b7:72:12:c5:ff:a8:26:0c:0d:
                    ad:7d:db:2c:03:92:e5:f5:d2:00:18:7a:2b:94:3c:
                    f9:77:85:9c:0d:26:0d:b5:e4:00:c8:fd:82:ce:61:
                    5b:b1:51:03:7e:4a:53:c4:83:a6:8c:28:fa:c7:68:
                    ff:9a:16:dd:10:1c:8c:2a:ab:15:26:20:11:05:8b:
                    dd:52:05:db:5c:06:77:3d:17:bc:7d:34:a4:17:be:
                    70:d3:af:bf:99:fa:87:98:c5:25:52:f5:09:0e:40:
                    3b:6b:a2:3e:85:a9:4d:a5:9c:d5:37:4c:14:3c:4b:
                    e2:ad:71:4e:b5:69:a5:48:99:29:81:67:6c:6d:28:
                    c1:50:5c:0c:76:13:44:14:3a:69:8c:ff:51:c8:bb:
                    d1:c5:b1:39:a3:55:fc:a5:55:ba:12:2b:ee:79:86:
                    eb:e2:c2:fb:aa:08:11:43:53:bf:75:db:5c:24:02:
                    fb:08:b3:13:df:9f:59:50:a3:f8:8c:fe:c5:24:ba:
                    06:fb:fc:fa:a3:48:ce:0d:a3:b8:9a:ce:8e:6f:ce:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B1:70:FE:91:3F:B8:85:4E:02:58:E9:C1:C3:91:07:F4:CE:D1:ED
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/L7Fw_pE_uIVOAljpwcORB_TO0e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.208.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:9d:d6:0d:a1:3e:9a:5e:1a:38:03:e2:43:f5:08:d5:87:94:
         aa:f8:20:5c:91:d1:2a:dc:93:fe:67:e9:d6:b3:7a:38:3b:f1:
         d0:81:00:30:b9:45:c6:cb:e1:b7:62:f9:57:6a:41:a4:bd:d1:
         73:27:de:18:6a:14:52:1d:29:e4:c2:85:5f:f8:d7:06:8e:7f:
         ff:ff:eb:75:5f:d9:ea:cd:fd:80:2e:78:0e:33:c5:42:80:90:
         4a:80:ef:be:f5:15:9a:bf:23:65:68:32:f5:b4:1b:11:09:72:
         a5:63:58:41:b2:37:9e:a4:6d:09:d1:7c:51:7a:03:26:d6:39:
         97:6e:95:a6:92:a6:31:d6:77:15:c4:4e:c7:f7:07:8c:3e:b5:
         69:65:33:bf:b1:00:3c:45:bf:82:25:73:ca:91:20:f9:d1:30:
         2f:3a:0c:f9:ce:9b:c7:63:e1:1b:3b:e8:e5:d3:4e:84:c6:ff:
         22:39:22:56:9b:cc:14:61:4f:d3:1e:bf:db:7f:82:48:23:d8:
         7e:5a:cb:3e:79:be:d0:60:47:e3:14:8a:16:86:7b:7c:0f:40:
         3a:f3:42:45:40:33:60:e6:e3:4a:b0:c2:28:4c:b0:cb:74:8b:
         bb:8d:66:65:df:47:dd:da:b1:e7:95:87:c1:70:63:1b:52:b4:
         df:30:98:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:11:23 2026 by rpki-client