This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/0I7bHXG1us_BF2WDbHuO1Sl3o5E.roa
File:                     0I7bHXG1us_BF2WDbHuO1Sl3o5E.roa (raw, json)
Hash identifier:          2QghjkGVp7+CzTy3aASiPytbngkXnLZexMTPeNzQpME=
Subject key identifier:   D0:8E:DB:1D:71:B5:BA:CF:C1:17:65:83:6C:7B:8E:D5:29:77:A3:91
Certificate issuer:       /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
Certificate serial:       019B7F15EA0AF0BCC07DB3419CF5B805D0F0
Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/0I7bHXG1us_BF2WDbHuO1Sl3o5E.roa
Signing time:             Fri 02 Jan 2026 14:21:41 +0000
ROA not before:           Fri 02 Jan 2026 14:21:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42846
IP address blocks:        104.247.160.0/24 maxlen: 24
                          104.247.161.0/24 maxlen: 24
                          104.247.162.0/24 maxlen: 24
                          104.247.163.0/24 maxlen: 24
                          104.247.164.0/24 maxlen: 24
                          104.247.165.0/24 maxlen: 24
                          104.247.166.0/24 maxlen: 24
                          104.247.167.0/24 maxlen: 24
                          104.247.168.0/24 maxlen: 24
                          104.247.169.0/24 maxlen: 24
                          104.247.173.0/24 maxlen: 24
                          104.247.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:ea:0a:f0:bc:c0:7d:b3:41:9c:f5:b8:05:d0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7
        Validity
            Not Before: Jan  2 14:21:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d08edb1d71b5bacfc11765836c7b8ed52977a391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:95:cf:29:56:f9:54:c4:16:43:f2:e3:d0:
                    cf:fb:9d:e9:e0:7f:15:98:00:1a:a4:94:0a:44:07:
                    34:71:c2:3b:50:23:38:f6:7c:76:78:b1:0f:6a:6d:
                    4c:84:5c:60:dd:7d:23:8c:28:96:8d:6f:15:b1:ff:
                    dd:1b:25:58:56:4c:d6:ea:0a:65:97:85:a5:88:59:
                    61:f1:24:03:13:9c:87:8a:d0:8d:32:0e:f8:16:d0:
                    71:6b:e1:54:c8:4a:dd:65:36:c2:72:3e:95:c9:9d:
                    f4:5b:d9:6b:36:13:49:19:2a:7d:48:83:01:e0:08:
                    f5:44:00:d3:a7:2e:55:08:1f:ea:dc:50:e0:b8:35:
                    2f:5e:88:1e:ba:53:5b:33:70:54:de:fc:60:a3:f9:
                    aa:46:df:42:81:87:1b:1c:b8:7c:62:fa:5e:21:94:
                    a6:8c:3a:0c:69:8e:6a:50:4c:de:a1:ef:b4:be:e7:
                    13:8d:62:98:bc:dd:7d:50:27:2f:47:54:a1:37:53:
                    79:dd:f0:59:0e:d6:97:21:e1:81:bd:51:d5:d9:e7:
                    44:b2:f9:26:87:e5:95:5b:cd:78:e9:50:b3:ff:80:
                    65:b5:7a:da:31:28:3c:bd:55:6b:56:c8:3e:80:f5:
                    d0:1e:25:ab:c3:29:b0:81:a3:f4:b1:bb:b0:df:89:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8E:DB:1D:71:B5:BA:CF:C1:17:65:83:6C:7B:8E:D5:29:77:A3:91
            X509v3 Authority Key Identifier:
                keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/0I7bHXG1us_BF2WDbHuO1Sl3o5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.160.0-104.247.169.255
                  104.247.173.0/24
                  104.247.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:6a:99:91:17:f3:38:d3:7b:59:5d:58:04:70:49:7a:c2:
         3b:9f:df:23:50:84:86:bf:02:0e:e8:b5:3a:67:db:41:d5:d9:
         4e:13:4f:27:22:30:4b:77:d4:8d:f3:cb:cc:31:5f:6c:4c:24:
         55:12:34:2f:a3:ba:23:9f:b5:47:94:c5:a5:96:d4:da:a7:5a:
         94:04:68:32:cf:f4:70:25:33:51:74:0e:f2:71:43:bd:bc:54:
         99:32:55:38:f1:7d:b6:12:0d:56:c9:06:ea:0e:81:05:b5:eb:
         00:5b:f4:9f:89:2b:d5:82:06:e3:e3:1e:0e:e1:9b:1a:21:2d:
         cf:d7:6e:6e:29:09:72:14:41:53:85:89:cf:b9:5b:4f:35:af:
         68:28:2b:81:c5:d2:db:29:02:61:15:3d:8f:e0:52:bb:71:ae:
         dc:59:4c:dc:ed:44:a9:c0:54:64:d7:10:eb:8c:f9:09:9f:82:
         ba:7e:ca:28:13:4f:cb:b4:f3:c1:80:12:b0:92:0e:7d:bc:ee:
         4a:e9:9a:ab:c7:7a:4f:ca:b0:9c:0a:d0:e9:30:4e:90:d3:f4:
         7b:f4:c8:ec:94:75:20:72:09:4c:73:89:57:1f:9d:ce:60:c4:
         2a:6f:11:6c:88:e5:e2:74:aa:3a:1a:81:02:67:1b:e7:fd:0a:
         fc:f9:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:24:36 2026 by rpki-client