This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa
File:                     e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa (raw, json)
Hash identifier:          uCVQMuNimm2kRxYums+7bm1dwpOCnLao+2OKBBHNm54=
Subject key identifier:   7B:B2:42:29:93:3B:4A:3E:E7:67:E8:E7:D1:CB:A5:C3:1C:67:99:16
Certificate issuer:       /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial:       019B78A21958CE2C89AD913D545540EEE99E
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa
Signing time:             Thu 01 Jan 2026 08:17:27 +0000
ROA not before:           Thu 01 Jan 2026 08:17:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210474
IP address blocks:        194.26.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:19:58:ce:2c:89:ad:91:3d:54:55:40:ee:e9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
        Validity
            Not Before: Jan  1 08:17:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7bb24229933b4a3ee767e8e7d1cba5c31c679916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:65:d9:59:a8:bf:f4:a8:0f:b8:c3:86:83:21:
                    5a:07:a0:54:0d:e8:6f:15:81:91:0f:e7:ff:28:91:
                    da:1a:48:52:79:f4:10:f7:4a:7f:14:f4:ab:93:2b:
                    a9:92:50:c4:2e:7a:9d:d4:de:58:2e:ca:24:28:0d:
                    c7:ac:c0:45:a8:78:07:56:fe:7d:ba:d5:62:6c:af:
                    9b:a6:56:61:46:58:14:c7:d0:35:ef:80:f1:5e:03:
                    2e:e6:de:5d:48:f2:36:62:09:00:8f:c8:6c:af:47:
                    88:d6:90:49:37:46:57:c3:53:9d:d7:d4:9e:d7:f7:
                    d7:72:8a:1e:d4:f4:7f:9f:58:76:c0:4e:73:33:72:
                    d5:c7:ab:b7:02:43:12:d4:49:8c:4c:e5:19:98:19:
                    7b:2d:d3:f8:88:d1:3f:4c:95:ea:af:9f:bd:a4:6f:
                    f1:e2:40:18:72:c7:0a:c3:f1:54:f7:39:12:54:f5:
                    1f:06:21:86:00:89:bc:fc:bd:ad:f4:15:24:df:15:
                    22:14:da:7f:3f:80:00:8a:24:37:03:b0:b3:fb:c0:
                    b9:e7:d4:dc:a2:d5:12:bb:39:0d:c2:92:27:e5:9e:
                    e6:3a:49:7a:7b:61:45:c2:c1:5f:16:3c:15:53:c6:
                    17:94:7f:7c:e0:36:00:bd:84:12:95:a2:f8:38:7d:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B2:42:29:93:3B:4A:3E:E7:67:E8:E7:D1:CB:A5:C3:1C:67:99:16
            X509v3 Authority Key Identifier:
                keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:39:ba:f9:57:52:e9:cc:e5:8b:62:20:11:60:3b:9c:4b:08:
         11:e9:8d:07:6e:61:22:5c:ef:19:52:c0:06:ab:62:da:bb:46:
         99:0f:f7:f1:63:16:b1:75:c3:cc:55:b3:1b:24:58:ab:86:eb:
         bd:5e:94:be:5b:f4:95:07:7b:b1:c0:ee:27:30:b9:32:1d:32:
         8e:ba:bf:4d:ce:2d:ad:64:97:e5:b2:82:1e:5e:89:24:05:08:
         8c:49:5d:ed:a5:27:a0:2e:85:cc:27:17:e0:4c:6f:d8:ae:c9:
         97:b2:db:44:53:94:5b:75:63:f4:d0:72:8f:6e:2f:c7:7f:62:
         af:9e:19:78:65:bc:66:20:d5:26:3c:5e:a4:0f:41:80:f1:e3:
         82:10:a1:7a:a7:e4:4c:27:6c:c4:77:74:f3:99:58:2d:46:1f:
         a6:47:f8:78:07:1f:eb:f7:cb:a9:2f:c7:30:89:00:aa:3e:2a:
         24:04:df:18:e8:07:c3:f6:b1:a5:5a:f6:d4:16:34:9c:79:52:
         db:8c:e3:f8:b2:0a:3e:8f:ef:b9:c4:96:3e:26:ab:38:97:37:
         12:97:3e:0b:ac:92:3a:8b:8d:90:8b:ae:b7:89:de:92:e6:d7:
         94:3e:60:3d:15:42:e3:6a:68:ee:89:be:8a:c3:e8:96:0e:6d:
         61:6f:f9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:05:10 2026 by rpki-client