This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-7E0xsAsQS2JuTxvMq2S8RU1anc.roa
File:                     1-7E0xsAsQS2JuTxvMq2S8RU1anc.roa (raw, json)
Hash identifier:          LG3XK/kfiGqTHVWE/nBHGIaESrFvYEyn/kc+GibxckQ=
Subject key identifier:   FB:B1:34:C6:C0:2C:41:2D:89:B9:3C:6F:32:AD:92:F1:15:35:6A:77
Certificate issuer:       /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial:       019BC7FE7078F63E3D53D8B94715011084A6
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-7E0xsAsQS2JuTxvMq2S8RU1anc.roa
Signing time:             Fri 16 Jan 2026 18:08:19 +0000
ROA not before:           Fri 16 Jan 2026 18:08:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202226
IP address blocks:        150.241.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c7:fe:70:78:f6:3e:3d:53:d8:b9:47:15:01:10:84:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
        Validity
            Not Before: Jan 16 18:08:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fbb134c6c02c412d89b93c6f32ad92f115356a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:78:27:bf:ce:ef:6e:43:29:6b:0d:51:6e:
                    5e:51:f3:9b:54:01:60:74:86:47:84:25:59:c5:e0:
                    47:70:48:71:33:3f:ba:f9:5b:d4:55:3a:13:46:1b:
                    b4:90:cb:4e:e7:b6:79:ab:50:1e:56:5c:96:6a:7e:
                    0f:75:42:24:9b:6a:50:60:71:28:35:28:a2:a0:91:
                    66:df:de:59:39:f9:f9:e0:5b:a7:cb:22:cc:84:f9:
                    6d:af:17:f5:ff:c2:e4:be:04:e4:a2:6b:f4:02:70:
                    65:46:44:f3:5f:4a:5a:81:dc:3f:09:ac:23:53:41:
                    31:cf:72:4c:58:3b:57:0c:91:f9:2b:d0:56:f2:6e:
                    6a:aa:8f:be:30:2b:44:3b:f3:e5:4b:96:fa:5d:43:
                    5f:2a:54:8c:45:d6:08:4b:8d:8e:41:d5:54:b2:7a:
                    5c:da:44:d5:e0:1b:a1:30:b9:31:38:9e:38:b7:c1:
                    01:cf:d4:c7:4f:e8:b1:28:94:b0:8a:70:53:79:da:
                    62:c4:25:b1:9a:86:ac:76:07:b2:e2:69:63:64:c2:
                    bb:db:31:37:f6:5e:cc:be:a1:97:31:06:f3:6b:5d:
                    ec:76:90:b1:35:b6:d6:90:77:a6:b5:01:af:9d:27:
                    82:0a:59:b5:09:51:9d:c5:2b:b5:e1:fb:59:f1:5b:
                    1f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B1:34:C6:C0:2C:41:2D:89:B9:3C:6F:32:AD:92:F1:15:35:6A:77
            X509v3 Authority Key Identifier:
                keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-7E0xsAsQS2JuTxvMq2S8RU1anc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.241.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:90:df:e5:72:cb:a0:ac:ff:42:ed:2a:3a:2e:ee:ac:98:04:
         4d:63:9d:d4:a6:77:c2:17:52:0e:2a:8c:42:d7:00:a0:26:38:
         0c:82:19:e2:40:32:cd:24:30:ae:e0:02:d0:a7:5b:1f:6a:99:
         34:a3:ef:fa:ec:dc:d0:3d:01:3f:c3:dc:f8:4a:89:24:17:b7:
         1c:46:bf:9a:a6:fc:fd:0b:1f:cc:b3:28:be:88:44:fb:1c:5d:
         a8:22:63:2d:08:da:b6:7a:83:b0:4e:10:52:06:9a:19:d6:41:
         da:9a:5d:ee:f4:d1:fb:93:a2:2a:06:73:66:cd:56:3d:00:ef:
         d5:91:a7:37:d2:00:bd:4c:f5:7c:b3:de:23:91:58:fd:ab:71:
         67:0e:04:49:2e:3c:3b:04:af:39:82:23:21:76:46:b8:c1:79:
         e0:04:5a:8f:c7:e1:b7:c7:a5:0c:89:d1:6a:d0:0f:4c:30:18:
         ad:87:c3:86:48:1c:1e:6d:e0:e1:fd:50:4b:f1:8d:15:b9:4f:
         f1:eb:b5:97:03:09:de:91:1f:b8:af:8c:27:c0:c7:82:94:1c:
         5a:25:e0:66:c1:5e:52:ef:f1:7a:13:e9:84:4c:96:10:6a:54:
         1a:26:06:38:df:b6:19:ec:ae:a0:1d:ed:14:4d:dc:0b:3c:17:
         78:83:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:40:10 2026 by rpki-client