This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/1pFLtL3u2Mj6D98HAx8GtYTeAwI.roa
File:                     1pFLtL3u2Mj6D98HAx8GtYTeAwI.roa (raw, json)
Hash identifier:          pmrWF+lDh+ECpFtkS0mznQOkoYJ7QI62/Hl2UZgNaYA=
Subject key identifier:   D6:91:4B:B4:BD:EE:D8:C8:FA:0F:DF:07:03:1F:06:B5:84:DE:03:02
Certificate issuer:       /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial:       019B78A219DDA579035873E53B06973B87CD
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/1pFLtL3u2Mj6D98HAx8GtYTeAwI.roa
Signing time:             Thu 01 Jan 2026 08:17:27 +0000
ROA not before:           Thu 01 Jan 2026 08:17:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212036
IP address blocks:        194.26.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:19:dd:a5:79:03:58:73:e5:3b:06:97:3b:87:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
        Validity
            Not Before: Jan  1 08:17:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d6914bb4bdeed8c8fa0fdf07031f06b584de0302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:e1:21:77:14:ca:da:ad:74:f2:62:34:c0:
                    c6:ae:e9:21:4d:78:4f:cc:de:77:32:95:7e:f8:3b:
                    3e:98:4b:55:1e:aa:6e:5e:a9:72:cb:ea:20:9f:f7:
                    b8:ea:99:63:55:2b:6f:31:bf:15:5c:21:d4:30:9a:
                    f1:5e:3c:70:76:12:48:56:60:ba:af:5c:15:aa:55:
                    fe:49:33:d7:43:24:c4:e2:b7:4c:e1:c1:d9:36:10:
                    f9:9e:21:4b:6f:cc:6e:61:f3:5c:2b:ee:35:cd:2c:
                    a8:6d:5b:7d:ad:88:fa:e1:9c:d7:86:82:36:74:35:
                    c3:42:85:75:91:40:53:53:38:6e:30:77:ba:53:4d:
                    0a:39:13:0c:d3:53:40:bc:9e:9e:e7:63:ef:76:87:
                    a7:65:89:14:5e:ea:ef:e1:95:62:a1:4d:9b:f0:df:
                    0c:88:6e:14:44:e9:da:04:b7:e1:c2:9f:3b:77:5b:
                    8c:54:17:c9:b0:39:b0:dc:b7:b0:13:4e:e0:6c:9b:
                    da:28:09:df:fa:65:63:a5:2e:f7:bd:b3:49:4c:62:
                    68:0e:13:4a:53:60:bd:65:13:77:3b:41:a5:c4:a1:
                    f2:b5:41:ec:d5:52:bd:ab:a8:e5:3d:e0:bb:44:68:
                    47:2a:88:06:ee:ff:f9:9a:93:5f:35:6b:5f:72:36:
                    7a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:91:4B:B4:BD:EE:D8:C8:FA:0F:DF:07:03:1F:06:B5:84:DE:03:02
            X509v3 Authority Key Identifier:
                keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/1pFLtL3u2Mj6D98HAx8GtYTeAwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:d5:c8:f9:79:78:bc:72:7b:ad:c5:1f:d8:cd:09:3a:6d:71:
         1d:27:46:43:a7:bc:a2:a2:7f:84:ef:35:33:7d:a7:ca:bb:3b:
         ee:c0:4b:6d:81:cf:a2:ee:88:6a:9b:5b:d3:4b:a3:82:79:59:
         7e:2d:43:7e:40:e7:42:d4:68:b5:a7:eb:bb:d9:f8:36:54:d7:
         35:03:a1:af:6f:b0:41:98:7a:ed:17:6c:4b:be:17:ab:51:a1:
         2b:1a:8b:d3:87:5c:4f:1e:b5:95:64:04:5a:57:6d:07:7d:a4:
         99:90:73:05:51:ab:ea:1f:22:c5:96:14:ed:37:b7:8f:bb:23:
         4e:84:bc:4e:9e:8d:d7:0c:bd:32:67:b2:df:04:4b:72:93:5e:
         03:21:bb:e3:3a:fd:38:eb:06:3f:d1:91:1d:61:69:ce:4d:53:
         1a:d7:1a:99:0a:f5:b6:c1:e0:5b:17:51:db:08:83:71:e0:ff:
         1a:5e:66:a4:cb:9d:94:82:64:71:71:72:5c:6b:bd:ad:62:c6:
         81:2e:b3:79:d3:81:e1:73:21:ff:97:eb:45:88:2d:64:1e:9c:
         8a:4d:7a:3a:9d:50:ae:22:8b:91:e9:1c:3b:26:11:4c:76:dc:
         ca:3b:10:9c:f2:ec:32:b3:68:78:6c:6d:80:0e:92:14:c4:69:
         48:a4:6f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:15 2026 by rpki-client