This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/7uRg_T_oiggw4J55UfjOrhQbRRk.roa
File:                     7uRg_T_oiggw4J55UfjOrhQbRRk.roa (raw, json)
Hash identifier:          Zvntcukjv/uv2VGWPB49suxGMeRDIq3Yqb/Srhl+YdA=
Subject key identifier:   EE:E4:60:FD:3F:E8:8A:08:30:E0:9E:79:51:F8:CE:AE:14:1B:45:19
Certificate issuer:       /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial:       019B7E3856EEC1C3FC01C8E2A99E2A6599C9
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/7uRg_T_oiggw4J55UfjOrhQbRRk.roa
Signing time:             Fri 02 Jan 2026 10:19:40 +0000
ROA not before:           Fri 02 Jan 2026 10:19:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207540
IP address blocks:        185.216.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:56:ee:c1:c3:fc:01:c8:e2:a9:9e:2a:65:99:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
        Validity
            Not Before: Jan  2 10:19:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eee460fd3fe88a0830e09e7951f8ceae141b4519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:ef:bc:8a:62:fd:ef:4a:28:ad:8a:df:a4:
                    71:da:24:a9:39:cf:45:d4:c3:03:25:ff:21:e9:4a:
                    12:b3:8a:78:0c:af:95:27:9a:3a:e4:56:2f:cf:db:
                    64:7c:a1:17:3d:19:7b:39:92:ef:06:2c:f2:ff:0e:
                    57:c1:8a:1b:d2:17:05:22:b5:41:9a:e9:db:29:c5:
                    cf:d5:89:3d:b5:82:71:69:ab:39:37:93:5b:66:97:
                    b8:f6:46:f4:f6:a0:54:73:ef:1f:b3:0b:3f:56:61:
                    87:fb:dc:60:23:ea:d9:25:c3:26:62:f5:28:07:75:
                    32:d7:b9:31:28:f8:62:ff:99:51:30:ea:5c:d9:91:
                    20:6f:4d:93:3f:2c:5a:5a:f5:02:18:76:21:b8:96:
                    cf:3a:b7:45:e0:42:6c:6b:55:87:8b:8e:d0:e5:ad:
                    be:22:b8:f4:83:cb:df:45:29:ae:80:60:e5:6b:d8:
                    56:68:8c:8d:8e:f9:20:c0:14:4a:75:82:62:4a:a4:
                    5b:33:18:d4:cc:40:02:56:55:0b:6b:a5:bd:e3:e2:
                    4a:b5:ca:15:8f:c5:14:69:31:70:f7:91:31:74:98:
                    13:b3:35:ff:42:58:2b:f3:42:d9:29:48:e0:6c:85:
                    23:52:1a:23:53:63:7d:2d:21:7c:32:6e:84:c1:9e:
                    f6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E4:60:FD:3F:E8:8A:08:30:E0:9E:79:51:F8:CE:AE:14:1B:45:19
            X509v3 Authority Key Identifier:
                keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/7uRg_T_oiggw4J55UfjOrhQbRRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:f0:02:34:9a:09:bf:c7:47:1d:8a:6c:67:b5:da:50:78:
         98:a1:48:0f:32:3b:ef:38:1c:ef:a4:59:6f:eb:5d:95:44:ab:
         5e:93:0f:48:5b:3b:7a:4a:be:c1:84:2b:ba:58:73:ac:7a:8e:
         e1:cc:59:95:e4:35:70:3e:fa:8a:a6:0b:fe:c4:63:bd:47:21:
         d9:11:0f:85:8c:71:d6:ff:fd:13:8b:77:8b:c1:96:0f:e0:ce:
         e8:cb:f2:a0:ac:35:8b:48:06:0b:1d:88:a9:79:07:17:5c:4b:
         62:0b:d7:74:f3:2f:4f:1a:52:3c:ac:22:da:79:bf:44:a5:cf:
         f7:54:55:a9:56:ce:71:6a:ae:00:fa:6e:53:41:d7:42:a6:00:
         3a:16:bb:75:1d:e9:fd:7c:58:61:2b:a9:df:6a:56:0e:d1:c8:
         c0:d8:e3:90:69:8d:e8:14:3d:d4:37:d2:8d:c7:d3:dd:eb:30:
         ce:9f:7d:3e:e3:a9:3b:3e:53:22:a0:cf:75:45:10:12:4c:ff:
         c3:53:92:0c:21:b9:18:57:47:2c:1f:88:6d:fc:43:d9:21:cf:
         e4:06:2f:7d:3e:19:a7:56:6e:82:98:97:05:60:46:77:b7:1e:
         cb:ec:6c:d4:d5:a4:d5:be:36:04:78:48:a1:f2:ef:33:46:8b:
         68:be:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:46 2026 by rpki-client