This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa
File:                     7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa (raw, json)
Hash identifier:          BeI1VtCjRkNwuAsQq6REw2kbuVRCtpMkqUU7iZWA1og=
Subject key identifier:   EE:59:DC:E3:44:1F:ED:C9:8A:04:A6:E3:65:F6:2A:C2:9C:26:1A:82
Certificate issuer:       /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial:       019B7C7EF292EA817E3BF78B1094D0B707F8
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa
Signing time:             Fri 02 Jan 2026 02:17:33 +0000
ROA not before:           Fri 02 Jan 2026 02:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34000
IP address blocks:        83.97.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7e:f2:92:ea:81:7e:3b:f7:8b:10:94:d0:b7:07:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
        Validity
            Not Before: Jan  2 02:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee59dce3441fedc98a04a6e365f62ac29c261a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:2e:87:c3:37:b7:39:28:48:38:b3:d5:a3:
                    ea:1f:26:35:14:df:30:44:64:80:43:97:1b:71:38:
                    a1:19:d8:eb:50:95:d2:ba:ca:82:21:d5:67:e8:3c:
                    55:0c:c0:13:00:51:68:2a:51:57:b6:1e:aa:f3:49:
                    07:59:7f:02:1f:89:77:bb:9a:49:63:a4:80:6b:e6:
                    2c:ba:b6:3f:5f:7b:a8:ff:c8:da:0d:79:88:c2:49:
                    45:95:8b:e0:ce:2a:22:ea:bf:62:dc:9b:ca:58:7f:
                    99:6e:6a:04:4c:2d:c6:c0:2e:0f:fb:b5:e1:c4:e8:
                    dd:0c:f7:10:6e:23:bb:32:46:5d:af:fc:39:02:50:
                    22:22:0a:b4:bd:3a:26:cc:1f:06:64:31:76:4a:e8:
                    27:ef:2c:22:ad:07:f8:09:46:a3:74:d5:94:95:40:
                    d8:1e:fb:73:0f:50:f4:60:f1:28:ee:6f:ad:07:21:
                    2e:34:6b:80:24:66:9a:15:1e:d4:bc:27:79:79:14:
                    9a:ad:eb:c5:0c:42:79:19:c1:9c:8d:e2:31:ca:69:
                    aa:f2:80:00:5c:0b:85:a5:6e:c3:11:37:27:3c:a6:
                    3a:8c:59:f8:73:d7:21:1d:04:f7:a3:ed:2d:6d:de:
                    ae:5c:aa:04:0b:35:a5:ba:71:69:e1:32:d0:42:b5:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:59:DC:E3:44:1F:ED:C9:8A:04:A6:E3:65:F6:2A:C2:9C:26:1A:82
            X509v3 Authority Key Identifier:
                keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/7lnc40Qf7cmKBKbjZfYqwpwmGoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.97.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:7c:36:47:2b:b0:98:66:4a:b8:ea:a1:ec:3f:81:e0:f0:b1:
         24:d6:3d:23:f9:d6:60:89:82:2e:ea:a3:fe:7d:37:1c:8f:a8:
         31:45:03:8d:40:1e:57:e8:fa:63:58:37:2b:25:0c:6e:f1:62:
         02:c6:99:55:9d:87:72:47:1d:7d:9e:58:23:7e:d6:fb:f8:b3:
         84:22:d1:f8:18:db:9e:ae:fd:95:c8:5e:6c:a9:4a:89:b4:56:
         1a:b9:3e:2c:12:09:78:3f:71:81:83:d3:41:a9:fd:b4:49:8c:
         09:8a:8d:42:b4:7c:d4:77:33:bc:57:ba:b7:6e:e8:22:8f:ce:
         90:cc:72:13:49:b9:01:cc:55:21:ed:cf:d8:61:f2:47:49:b4:
         71:1b:9f:b6:6b:85:84:a6:16:65:dd:74:81:67:1a:fa:b0:8a:
         55:ef:10:88:3f:10:70:54:24:cd:b6:56:b3:d8:87:24:b2:67:
         60:cd:c2:c0:7e:eb:9c:c5:c7:e9:b5:40:e9:fa:2a:9b:c6:2f:
         00:d8:39:80:f9:f2:ec:5f:c7:84:e9:5c:3f:23:b4:63:96:98:
         2a:c1:25:48:ee:d5:18:6c:35:fc:f7:4e:6d:f7:43:a3:f9:30:
         e7:79:03:06:8c:75:6b:1f:62:86:fa:9b:b1:9a:a2:c2:d1:cb:
         62:6e:9e:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8fvKS6oF+O/eLEJTQtwf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWJjNDNhZmNlZDcyZmI5Mjc3ODcyOGJlZTU3MWM2Nzhm
NTM4NTMwHhcNMjYwMTAyMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTU5ZGNlMzQ0MWZlZGM5OGEwNGE2ZTM2NWY2MmFjMjljMjYxYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSUuh8M3tzkoSDiz1aPqHyY1FN8w
RGSAQ5cbcTihGdjrUJXSusqCIdVn6DxVDMATAFFoKlFXth6q80kHWX8CH4l3u5pJ
Y6SAa+YsurY/X3uo/8jaDXmIwklFlYvgzioi6r9i3JvKWH+ZbmoETC3GwC4P+7Xh
xOjdDPcQbiO7MkZdr/w5AlAiIgq0vTomzB8GZDF2Sugn7ywirQf4CUajdNWUlUDY
HvtzD1D0YPEo7m+tByEuNGuAJGaaFR7UvCd5eRSarevFDEJ5GcGcjeIxymmq8oAA
XAuFpW7DETcnPKY6jFn4c9chHQT3o+0tbd6uXKoECzWlunFp4TLQQrUQ3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5Z3ONEH+3JigSm42X2KsKcJhqCMB8GA1UdIwQY
MBaAFKWrxDr87XL7kneHKL7lccZ49ThTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTct
YjVlOTFmYzY1MDUxLzEvN2xuYzQwUWY3Y21LQktialpmWXF3cHdtR29JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTctYjVlOTFmYzY1MDUx
LzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU2E4MA0G
CSqGSIb3DQEBCwUAA4IBAQC9fDZHK7CYZkq46qHsP4Hg8LEk1j0j+dZgiYIu6qP+
fTccj6gxRQONQB5X6PpjWDcrJQxu8WICxplVnYdyRx19nlgjftb7+LOEItH4GNue
rv2VyF5sqUqJtFYauT4sEgl4P3GBg9NBqf20SYwJio1CtHzUdzO8V7q3bugij86Q
zHITSbkBzFUh7c/YYfJHSbRxG5+2a4WEphZl3XSBZxr6sIpV7xCIPxBwVCTNtlaz
2IcksmdgzcLAfuucxcfptUDp+iqbxi8A2DmA+fLsX8eE6Vw/I7RjlpgqwSVI7tUY
bDX8905t90Oj+TDneQMGjHVrH2KG+puxmqLC0ctibp5v
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:39:34 2026 by rpki-client