This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa
File:                     7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa (raw, json)
Hash identifier:          MHH4V/WoyGohF1n2EFtKGZHg+Qh7CQ9k4mUtJ9/Z04Q=
Subject key identifier:   EE:3E:C9:5C:15:CC:CA:BF:08:73:A5:E9:06:9A:61:39:40:D1:65:C2
Certificate issuer:       /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial:       019B7C12BF7FABA5F53B3DCEF9CAC96DF6C3
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa
Signing time:             Fri 02 Jan 2026 00:19:21 +0000
ROA not before:           Fri 02 Jan 2026 00:19:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43733
IP address blocks:        46.130.0.0/16 maxlen: 16
                          46.130.0.0/17 maxlen: 17
                          46.130.128.0/17 maxlen: 17
                          46.130.255.0/24 maxlen: 24
                          83.139.24.0/21 maxlen: 21
                          83.139.24.0/22 maxlen: 22
                          83.139.28.0/22 maxlen: 22
                          83.139.32.0/22 maxlen: 22
                          185.36.36.0/22 maxlen: 22
                          185.36.36.0/24 maxlen: 24
                          217.76.0.0/20 maxlen: 20
                          217.76.0.0/21 maxlen: 21
                          217.76.8.0/21 maxlen: 21
                          2a00:1f28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:bf:7f:ab:a5:f5:3b:3d:ce:f9:ca:c9:6d:f6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
        Validity
            Not Before: Jan  2 00:19:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee3ec95c15cccabf0873a5e9069a613940d165c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:2a:75:53:90:3f:30:40:5c:ce:46:94:83:
                    2f:11:32:fb:b7:c3:4b:bc:ed:90:bd:72:bd:6b:eb:
                    0b:c1:78:5d:59:fa:25:28:e8:ad:6b:10:3a:7d:e4:
                    50:bb:f3:6f:74:77:05:80:1c:45:c4:cd:f9:89:b6:
                    11:bb:ba:77:36:10:55:6a:d6:1b:a3:91:10:05:da:
                    72:47:97:36:0d:90:0c:67:1c:4b:44:b6:63:8c:0b:
                    95:66:1d:3b:97:ad:7c:ef:7d:c7:a6:12:ed:b7:27:
                    88:41:cf:87:c9:83:a2:7b:fa:10:c0:88:43:26:b2:
                    9b:af:71:2b:2b:6f:fe:e5:11:52:b7:6e:c9:85:e4:
                    d1:b6:a7:89:31:20:05:82:81:b0:30:4e:7d:67:2d:
                    3c:16:da:84:cf:ad:fe:e8:4b:c2:d2:b4:0f:47:28:
                    8b:22:c0:5d:0e:60:96:3d:a3:26:a8:e0:88:dc:29:
                    5b:a4:5a:7d:34:64:58:9e:76:0b:e4:f8:38:25:a2:
                    c1:7a:90:f8:22:09:92:59:78:40:f8:77:32:4b:aa:
                    d6:f1:44:38:da:d8:b2:06:10:ea:c1:7b:28:de:e6:
                    10:b6:d3:0a:ae:97:16:9c:5e:9a:7a:2d:8f:b0:75:
                    da:2f:e6:c7:43:92:fb:a9:61:39:fb:8f:a1:99:aa:
                    e3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3E:C9:5C:15:CC:CA:BF:08:73:A5:E9:06:9A:61:39:40:D1:65:C2
            X509v3 Authority Key Identifier:
                keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.130.0.0/16
                  83.139.24.0-83.139.35.255
                  185.36.36.0/22
                  217.76.0.0/20
                IPv6:
                  2a00:1f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:3f:74:96:39:c4:80:31:f6:4d:24:39:cb:61:50:87:b2:f9:
         dd:74:f1:e5:85:fa:06:fd:26:3f:88:c9:56:b8:80:d7:c0:61:
         2c:ba:c2:15:ba:4a:22:e1:45:29:8e:12:c2:b3:a7:c9:62:79:
         23:02:70:62:47:ed:e8:e0:ec:30:21:9a:22:b0:e9:0c:9d:d4:
         7e:63:69:b6:ca:7a:0e:2c:39:6e:d1:1c:4d:af:51:3f:1e:fa:
         04:42:d8:36:bc:dd:25:fb:fd:8a:54:e7:4c:dc:8d:26:dc:c8:
         11:45:77:1c:58:07:1f:ca:7c:d1:f8:84:1e:c5:b1:81:e9:82:
         9c:53:88:bb:a1:39:0c:c9:88:bb:e2:b3:26:93:32:b3:2d:e1:
         50:f2:62:26:d7:31:c4:a0:70:1f:35:df:cc:c9:2c:5b:48:0b:
         a6:89:69:29:83:7d:95:5a:e9:e2:a0:9a:be:6b:81:b1:69:94:
         fa:1f:dc:d5:6e:2d:d5:30:c4:7d:25:ad:ce:69:95:be:d4:cf:
         86:7a:d2:1e:a7:d2:60:ae:c7:ff:76:80:0c:51:47:1f:de:c2:
         d3:70:57:3c:6f:ea:b7:12:f7:df:0b:2a:c6:bb:02:0e:f2:14:
         a9:a7:27:f9:2a:29:20:dc:62:e9:8f:b9:cd:07:f2:32:a4:e7:
         c6:1b:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:40 2026 by rpki-client