This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/7F404ndf6WlAawVxH8uEqbUfNqg.roa
File:                     7F404ndf6WlAawVxH8uEqbUfNqg.roa (raw, json)
Hash identifier:          0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=
Subject key identifier:   EC:5E:34:E2:77:5F:E9:69:40:6B:05:71:1F:CB:84:A9:B5:1F:36:A8
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       019B7FF2707C9AE24396E4D88F0D5311942F
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/7F404ndf6WlAawVxH8uEqbUfNqg.roa
Signing time:             Fri 02 Jan 2026 18:22:33 +0000
ROA not before:           Fri 02 Jan 2026 18:22:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39483
IP address blocks:        82.119.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:70:7c:9a:e2:43:96:e4:d8:8f:0d:53:11:94:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Jan  2 18:22:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec5e34e2775fe969406b05711fcb84a9b51f36a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:6b:b8:ce:21:06:cd:3d:99:07:18:85:36:
                    63:92:6c:71:a4:d4:3c:18:2c:92:94:8d:16:cb:ab:
                    95:da:72:bb:5d:4b:16:7e:a2:fb:af:9b:f1:9c:ff:
                    b4:d6:08:d5:d3:18:41:57:8d:5e:5c:82:e2:af:be:
                    16:ad:08:a9:cf:ce:22:01:50:10:b1:4a:f0:54:5c:
                    59:f7:c6:ba:3d:f5:61:aa:c2:c4:c3:17:50:f7:6d:
                    9e:0c:0f:7a:7f:70:e3:fb:cb:ad:65:50:68:40:7c:
                    e7:f4:61:18:e4:12:6a:4f:b5:e4:14:06:84:28:0d:
                    cc:ad:28:17:e4:b2:b4:bd:91:47:ef:19:a2:86:f5:
                    a5:23:e4:4e:90:42:ed:88:23:ba:46:ec:37:cc:8b:
                    bd:cf:4c:a7:1b:a5:ed:fb:dd:18:f2:0e:e7:38:be:
                    6a:e3:18:c8:95:7a:c5:63:55:3b:d5:89:4c:e8:98:
                    c2:98:0a:c7:a3:84:ed:bb:2a:8d:ac:dd:0d:dc:8a:
                    5d:bb:a5:49:ea:5f:0d:14:95:ee:4e:de:6c:0a:18:
                    44:6a:78:73:44:d4:52:34:47:0c:64:9c:54:da:ac:
                    c8:0a:8b:ed:f3:78:37:2e:22:9c:9d:0b:45:5d:ef:
                    96:54:c6:e2:5b:84:8c:18:d4:4f:5d:30:cd:6a:f0:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5E:34:E2:77:5F:E9:69:40:6B:05:71:1F:CB:84:A9:B5:1F:36:A8
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/7F404ndf6WlAawVxH8uEqbUfNqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.119.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:38:0d:a2:51:6c:a0:33:25:9e:72:21:4d:09:23:bc:57:97:
         15:29:65:35:08:81:92:02:e5:a7:bd:5c:76:06:98:da:02:bc:
         be:ed:bb:6b:c2:83:c2:d5:89:44:e0:3e:b2:db:f2:0d:1f:55:
         03:f9:84:f6:b7:b0:c5:fd:da:b8:36:5c:34:4b:19:50:00:57:
         42:30:04:48:99:29:5c:d6:83:d0:15:5b:05:d7:54:9b:bb:e2:
         66:b2:8e:80:3e:ea:4c:03:3e:bb:1d:e2:bc:e6:db:1c:ae:2e:
         61:0e:43:f8:56:9a:d2:0f:1a:c4:6a:fa:fd:f6:79:4e:94:b1:
         d0:57:3c:1c:2f:b4:d9:ed:dc:0b:6c:63:1d:81:ab:94:f1:f5:
         2d:04:44:a5:7a:6a:6f:84:fd:54:71:64:03:76:12:62:6a:a3:
         d5:2e:e0:d8:01:5d:2c:9a:02:2f:d2:c1:07:54:59:4c:d6:58:
         d5:11:06:eb:32:e1:1b:08:3d:5b:18:07:f2:25:31:8a:cd:ad:
         cd:ce:6d:82:1b:a8:7b:fa:f1:47:02:1e:55:da:50:ed:b7:b6:
         84:2f:16:28:e1:41:46:0e:ad:51:b6:84:ec:d5:40:b0:e8:d6:
         5e:db:f6:ff:77:50:5f:1b:33:0e:19:99:97:5f:e1:d0:00:5c:
         6c:d6:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:16:30 2026 by rpki-client