This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/75HOIa64fDxinyOIx01Blej1elM.roa
File:                     75HOIa64fDxinyOIx01Blej1elM.roa (raw, json)
Hash identifier:          EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=
Subject key identifier:   EF:91:CE:21:AE:B8:7C:3C:62:9F:23:88:C7:4D:41:95:E8:F5:7A:53
Certificate issuer:       /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial:       019B77C74FE525269A77F86EF44B982B4D27
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/75HOIa64fDxinyOIx01Blej1elM.roa
Signing time:             Thu 01 Jan 2026 04:18:29 +0000
ROA not before:           Thu 01 Jan 2026 04:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200339
IP address blocks:        194.147.153.0/24 maxlen: 24
                          194.147.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:4f:e5:25:26:9a:77:f8:6e:f4:4b:98:2b:4d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
        Validity
            Not Before: Jan  1 04:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef91ce21aeb87c3c629f2388c74d4195e8f57a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:b5:06:b8:47:d2:b5:63:76:41:eb:ac:67:
                    5b:97:cb:6d:d9:3f:6f:69:a4:d7:49:ac:7c:d7:53:
                    6f:6f:1d:7b:03:a9:6e:5e:d9:92:75:9f:84:8c:9e:
                    47:74:03:7f:5b:1e:1d:14:5d:fd:70:3e:a8:1f:80:
                    a6:7f:1e:5c:60:7c:a3:c8:0e:08:55:79:32:78:ec:
                    25:6e:52:a7:a8:a2:a6:52:fe:3d:b2:7c:c6:1b:af:
                    0d:2b:ff:e1:96:16:aa:84:8b:2e:61:55:d5:cf:13:
                    4f:52:07:cc:a3:0d:d5:e0:4d:f8:fd:9f:ea:b2:dc:
                    9c:09:b9:91:a7:d5:c2:cc:27:08:61:e8:54:54:1b:
                    e4:68:1c:9c:0b:2f:c5:e7:c6:ec:3c:3e:65:94:d4:
                    fc:41:c8:40:60:48:09:94:18:34:43:e6:e9:6f:8f:
                    87:80:a9:ee:48:ee:7a:72:0c:2d:d0:27:1b:cf:0b:
                    e9:20:12:a9:45:40:a2:fe:46:74:bf:a7:bb:01:ed:
                    38:16:6b:b5:41:e9:76:37:9a:a0:50:95:a6:09:b6:
                    2a:27:e9:cc:75:d2:98:c8:b7:31:fd:6c:34:27:fb:
                    02:ca:de:39:d0:5c:5d:ca:31:93:07:f5:a7:44:54:
                    03:e0:a3:57:91:64:49:df:c6:eb:79:55:82:76:1e:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:91:CE:21:AE:B8:7C:3C:62:9F:23:88:C7:4D:41:95:E8:F5:7A:53
            X509v3 Authority Key Identifier:
                keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/75HOIa64fDxinyOIx01Blej1elM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.153.0-194.147.155.255

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:da:3f:0c:e5:9c:ad:82:00:7f:64:8c:47:0c:3a:0b:f3:
         ed:97:6c:8e:0e:22:46:c7:f0:e3:7e:f1:1f:01:15:f9:2f:8b:
         18:d7:25:e4:a9:f6:64:9e:7f:60:b0:0e:e9:0b:85:c5:89:23:
         3c:76:2a:83:d1:d3:ac:ed:66:0a:8d:da:89:6b:98:62:48:59:
         78:83:4e:9c:a0:7b:87:3f:a5:71:1d:ab:0d:51:04:0b:3d:cf:
         6b:d7:88:0f:8e:a2:d5:fc:60:9e:1d:9b:3a:95:6d:bb:61:7f:
         39:a2:cd:ad:1a:dc:6d:22:f7:83:de:d6:79:85:2d:d6:fb:c3:
         1d:b8:e1:c7:a0:e0:91:51:9a:38:76:c8:c8:11:43:00:c7:fb:
         ca:d4:79:30:a6:36:57:67:46:eb:3d:30:18:bb:bf:84:59:98:
         11:87:55:bd:51:c5:99:9d:29:98:89:e8:e4:e9:32:01:a5:01:
         06:df:3e:76:f4:1e:d1:6b:5b:e6:c6:5c:d1:22:d8:e2:d9:d8:
         3d:6f:03:13:38:cf:67:1d:2c:27:03:95:f1:b3:bc:fa:b6:0d:
         3a:74:ff:38:21:c5:90:c1:79:aa:0f:5b:bf:a0:62:c1:75:86:
         e2:79:37:81:f2:89:93:2d:fc:b6:4f:56:68:ed:12:19:14:2a:
         63:96:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:32 2026 by rpki-client