This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa
File:                     t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa (raw, json)
Hash identifier:          UElx7JeEKjaWAbLSYGiotOqsYT+oYdMJgbKOha4XBtc=
Subject key identifier:   B7:B9:51:B3:EF:46:34:41:14:57:23:DD:88:37:E3:E9:22:63:E4:79
Certificate issuer:       /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial:       019A9D58DC29C94430515E5BDA1A91E4F62E
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa
Signing time:             Wed 19 Nov 2025 18:20:37 +0000
ROA not before:           Wed 19 Nov 2025 18:20:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41171
IP address blocks:        146.19.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:9d:58:dc:29:c9:44:30:51:5e:5b:da:1a:91:e4:f6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
        Validity
            Not Before: Nov 19 18:20:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b7b951b3ef463441145723dd8837e3e92263e479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:15:8b:19:c1:52:54:95:8f:b7:40:48:9e:32:
                    40:c1:cb:b4:0f:fd:02:6e:a3:e2:64:9c:08:7a:b6:
                    90:71:94:ff:91:3d:56:c2:d6:12:ed:6e:4c:22:03:
                    7d:7c:5d:11:60:3a:93:36:1f:f8:53:f6:78:24:bc:
                    9e:cc:48:f4:b1:bf:36:6e:00:b1:5d:5e:7d:a9:2f:
                    65:5e:6b:69:3a:53:ad:00:31:86:3a:6a:5b:fa:a3:
                    46:73:67:6d:20:03:6a:32:df:ed:fb:81:a9:ee:2c:
                    5b:0c:02:74:09:ca:e3:40:fb:41:0f:a9:e2:e5:5b:
                    4b:88:80:c0:63:0c:e0:2b:fe:10:05:fd:aa:7d:72:
                    db:23:7c:9c:61:51:ce:e3:08:59:68:40:01:37:08:
                    95:b6:28:d4:71:cf:67:37:93:cb:7a:4f:ac:25:4e:
                    44:d0:fc:b0:40:9b:27:c5:ff:8b:92:1e:7b:c6:ce:
                    1f:7a:ec:3a:19:34:e3:d5:f6:58:fd:15:3d:9e:79:
                    4f:78:1a:e6:57:9a:a4:28:79:ce:80:69:14:a0:e1:
                    8a:af:41:81:03:c1:d4:f0:c1:ab:15:69:9b:7a:01:
                    6e:f3:14:6f:b2:7d:36:f3:9f:46:be:d5:fb:87:f4:
                    dd:d3:68:d8:29:f0:32:eb:c2:52:00:77:9b:b5:3f:
                    26:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B9:51:B3:EF:46:34:41:14:57:23:DD:88:37:E3:E9:22:63:E4:79
            X509v3 Authority Key Identifier:
                keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:7a:83:2a:b6:11:5a:55:b9:85:f8:da:0f:ab:9c:2d:9d:bc:
         5c:9d:30:ca:71:e4:66:48:1e:ae:3a:55:e5:c5:25:2d:71:cc:
         e3:4b:c8:72:76:95:1b:bd:f2:2f:9e:66:2b:9e:ef:c3:30:d7:
         ba:dd:fb:98:da:95:c7:26:81:fc:22:6d:fa:ef:fc:6a:30:68:
         c4:a4:cd:c0:52:f4:65:3e:74:ee:15:0e:68:89:e1:79:5d:b9:
         ea:dd:94:69:da:34:63:c0:88:20:12:99:ee:17:99:35:bc:c8:
         20:e9:43:60:44:2d:5b:44:7f:9c:0a:93:ab:c9:6f:11:20:05:
         e5:5e:69:51:76:79:d7:55:a4:d5:1d:77:7e:b7:d4:13:6e:93:
         65:9b:e4:c0:97:10:69:5d:4f:2d:39:99:87:36:8e:a8:58:01:
         b3:a6:00:8c:84:61:d3:52:f6:fd:a9:ff:da:83:b5:5f:f8:56:
         1a:9e:9a:a9:23:42:61:06:03:75:de:bf:bb:5f:08:96:1a:35:
         20:d5:5e:2d:d7:d9:7a:03:ea:ae:d9:e4:18:91:29:de:2b:df:
         fc:4d:a1:0b:be:89:d8:e1:56:cb:21:19:e8:c6:ee:5a:60:90:
         f9:38:1d:ff:ef:d7:a6:3e:95:aa:11:52:1e:5b:5d:28:88:d6:
         a1:d2:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:34:20 2025 by rpki-client