This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/7jgvwOfbTS9EcboNY_mci-_zFzQ.roa
File:                     7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (raw, json)
Hash identifier:          SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=
Subject key identifier:   EE:38:2F:C0:E7:DB:4D:2F:44:71:BA:0D:63:F9:9C:8B:EF:F3:17:34
Certificate issuer:       /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial:       019B7CED6CCF8CB8578D7A601C35EDEEAFF3
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/7jgvwOfbTS9EcboNY_mci-_zFzQ.roa
Signing time:             Fri 02 Jan 2026 04:18:13 +0000
ROA not before:           Fri 02 Jan 2026 04:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34970
IP address blocks:        91.195.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:6c:cf:8c:b8:57:8d:7a:60:1c:35:ed:ee:af:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
        Validity
            Not Before: Jan  2 04:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee382fc0e7db4d2f4471ba0d63f99c8beff31734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:c0:6d:91:8a:7f:4f:78:7f:2f:38:4b:2b:
                    47:a1:34:0e:6f:29:ef:5a:f5:03:b3:ad:28:07:8f:
                    13:94:c5:a5:60:db:85:f5:08:45:71:dd:4a:b9:a7:
                    26:31:ea:00:a8:ae:06:54:16:c0:89:06:12:e4:19:
                    df:6a:37:59:b9:df:ad:5d:6a:6f:d3:1c:07:1c:ef:
                    c0:50:c7:e9:e0:18:f2:55:ab:e0:c8:14:f0:67:de:
                    21:36:bb:35:ad:44:37:3d:74:e6:76:26:f1:fe:cf:
                    8f:9e:af:cd:3c:dc:a9:62:6a:45:bb:e9:0f:d9:1b:
                    9b:f4:d9:ab:73:3c:93:0c:6f:77:4c:f4:3c:bc:62:
                    d4:a8:9a:58:85:b0:b6:e6:bd:1b:f1:b5:af:fd:df:
                    9a:2f:b1:9d:4c:a8:36:a3:17:b3:f1:ca:be:2e:27:
                    8a:31:f6:47:0d:83:ea:1e:53:27:ef:46:0a:ce:73:
                    93:23:15:1e:d7:f0:88:53:28:2f:a2:b4:da:d8:af:
                    50:e8:c0:f2:62:45:6a:ea:8a:07:b5:39:91:71:e8:
                    5c:db:c4:38:97:01:cf:e4:d1:bf:2a:48:7e:a0:62:
                    b5:fb:2e:40:fb:27:07:13:99:37:c8:92:0b:a9:df:
                    c8:2d:eb:88:67:f0:b8:97:00:60:93:e4:8b:80:84:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:38:2F:C0:E7:DB:4D:2F:44:71:BA:0D:63:F9:9C:8B:EF:F3:17:34
            X509v3 Authority Key Identifier:
                keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/7jgvwOfbTS9EcboNY_mci-_zFzQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:c4:65:5a:07:7c:b6:7c:cb:39:a8:4b:b5:b1:f3:f9:c8:
         1e:97:24:8f:62:73:28:83:41:a6:e5:e0:0b:bb:51:1f:f7:58:
         5a:82:61:4e:50:9b:fb:3f:f7:82:d6:4a:bf:46:cc:f8:f1:a8:
         60:4a:24:f2:aa:a4:8b:e2:0a:3c:d1:ba:da:c5:c7:e1:23:87:
         22:b7:2e:8c:32:a4:ad:11:91:71:f7:22:06:16:d7:6f:ac:15:
         11:f3:d6:67:61:ae:d3:22:43:53:71:f0:2e:cb:4b:e8:1e:1f:
         0f:d6:fd:4f:32:61:2a:82:6e:9f:86:15:00:f0:ad:e5:b3:93:
         74:58:b9:ca:84:7c:03:3e:eb:42:37:ab:7b:81:6c:26:1f:77:
         36:33:65:a2:c9:72:ce:df:13:5a:fb:59:f1:4d:b6:ad:8c:20:
         bf:57:38:9f:17:f8:86:2f:1b:0e:42:f7:73:8f:be:0a:8a:44:
         37:e7:5e:f5:2e:8c:dd:7b:d9:0d:dc:f8:cc:90:a3:1e:8e:86:
         a0:5a:18:15:bf:7b:c7:be:7f:a2:45:cf:03:7c:f9:fb:6d:02:
         b1:5b:da:79:ed:5b:64:bd:18:7a:20:8d:bc:ba:8f:4f:17:de:
         a8:63:72:da:64:93:74:a7:14:91:40:a2:b1:98:6a:b5:10:26:
         08:07:8f:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87WzPjLhXjXpgHDXt7q/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl
NThhOTIwHhcNMjYwMTAyMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTM4MmZjMGU3ZGI0ZDJmNDQ3MWJhMGQ2M2Y5OWM4YmVmZjMxNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwczAbZGKf094fy84SytHoTQObynv
WvUDs60oB48TlMWlYNuF9QhFcd1KuacmMeoAqK4GVBbAiQYS5BnfajdZud+tXWpv
0xwHHO/AUMfp4BjyVavgyBTwZ94hNrs1rUQ3PXTmdibx/s+Pnq/NPNypYmpFu+kP
2Rub9NmrczyTDG93TPQ8vGLUqJpYhbC25r0b8bWv/d+aL7GdTKg2oxez8cq+LieK
MfZHDYPqHlMn70YKznOTIxUe1/CIUygvorTa2K9Q6MDyYkVq6ooHtTmRcehc28Q4
lwHP5NG/Kkh+oGK1+y5A+ycHE5k3yJILqd/ILeuIZ/C4lwBgk+SLgITH6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO44L8Dn200vRHG6DWP5nIvv8xc0MB8GA1UdIwQY
MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt
OTMyMGExYzczYjFkLzEvN2pndndPZmJUUzlFY2JvTllfbWNpLV96RnpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk
LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8POMA0G
CSqGSIb3DQEBCwUAA4IBAQCcrsRlWgd8tnzLOahLtbHz+cgelySPYnMog0Gm5eAL
u1Ef91hagmFOUJv7P/eC1kq/Rsz48ahgSiTyqqSL4go80braxcfhI4city6MMqSt
EZFx9yIGFtdvrBUR89ZnYa7TIkNTcfAuy0voHh8P1v1PMmEqgm6fhhUA8K3ls5N0
WLnKhHwDPutCN6t7gWwmH3c2M2WiyXLO3xNa+1nxTbatjCC/VzifF/iGLxsOQvdz
j74KikQ35171Lozde9kN3PjMkKMejoagWhgVv3vHvn+iRc8DfPn7bQKxW9p57Vtk
vRh6II28uo9PF96oY3LaZJN0pxSRQKKxmGq1ECYIB4+P
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:52 2026 by rpki-client