This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/7xOGvUid5wgR_viXaJCs-_E41Dc.roa
File:                     7xOGvUid5wgR_viXaJCs-_E41Dc.roa (raw, json)
Hash identifier:          scuGxNCLA5L3YCe/NBi2qwEMiltJqBLZuIhGsoKzXm4=
Subject key identifier:   EF:13:86:BD:48:9D:E7:08:11:FE:F8:97:68:90:AC:FB:F1:38:D4:37
Certificate issuer:       /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial:       019B7CEE6E59F514E737830ED859C9D67891
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/7xOGvUid5wgR_viXaJCs-_E41Dc.roa
Signing time:             Fri 02 Jan 2026 04:19:18 +0000
ROA not before:           Fri 02 Jan 2026 04:19:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208063
IP address blocks:        2a14:ae00:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:6e:59:f5:14:e7:37:83:0e:d8:59:c9:d6:78:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
        Validity
            Not Before: Jan  2 04:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef1386bd489de70811fef8976890acfbf138d437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:98:2e:8d:99:ab:ef:ed:48:66:55:b1:df:
                    f6:c7:78:65:6f:c9:e1:6e:52:48:f4:97:1a:a5:3d:
                    6a:46:79:90:fb:f9:6a:cb:3e:bb:a9:58:86:ea:5e:
                    9a:7e:0d:04:b5:e3:05:32:4b:36:2f:f6:21:1f:10:
                    68:88:53:d6:e5:e5:36:92:92:84:b5:c6:6f:74:26:
                    d4:ad:7f:3c:72:19:e6:dd:37:4d:55:88:e7:6f:1c:
                    7f:41:37:66:11:69:52:47:f3:fd:8b:0e:98:3a:28:
                    2c:62:49:55:5e:29:d5:95:37:b2:b7:0f:37:88:f4:
                    e9:7b:f4:b5:ab:72:6a:9d:5b:3d:7d:6b:cd:dd:ca:
                    63:fd:c7:a3:18:7f:18:b5:31:c6:51:73:33:c4:82:
                    bb:45:94:02:5d:67:35:ee:15:44:14:a5:d9:d2:15:
                    39:1c:29:59:28:9d:71:1c:cb:89:68:63:2d:7e:1f:
                    6c:b1:fe:a1:43:9f:aa:29:de:71:6d:93:94:66:f2:
                    64:af:d9:17:b5:8d:31:47:d6:18:25:f8:fb:f6:c9:
                    9d:25:19:d2:b0:7b:05:a2:00:3c:47:4c:b1:4b:6a:
                    7d:e9:58:93:82:c8:cb:d1:14:64:87:f5:ba:bb:a9:
                    89:5e:cb:ca:fe:81:90:68:de:9e:fb:01:67:5e:7c:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:13:86:BD:48:9D:E7:08:11:FE:F8:97:68:90:AC:FB:F1:38:D4:37
            X509v3 Authority Key Identifier:
                keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/7xOGvUid5wgR_viXaJCs-_E41Dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:ae00:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:14:e0:94:d0:de:b8:84:db:c1:09:0a:bf:f4:97:d8:40:
         83:57:eb:09:54:9d:84:e5:62:a5:31:39:7a:f6:bb:8e:01:93:
         3f:51:74:99:de:39:c9:c3:f9:92:52:78:0a:d7:a6:e0:6f:ca:
         f8:94:9d:6c:fc:9a:4f:43:eb:d5:23:3c:83:ed:ad:10:8b:4a:
         d0:17:0b:fa:e2:25:a4:89:2f:3f:48:64:cc:74:cc:ec:03:32:
         64:3b:bd:79:2b:22:d3:2d:b5:29:87:be:6b:35:8e:80:59:db:
         8a:7e:78:6f:d2:d7:dc:c1:30:88:f6:f8:e9:70:cf:cf:ab:61:
         b8:5a:79:0d:e0:39:31:77:85:fb:45:6e:1e:28:93:33:42:fe:
         bc:85:18:7b:6e:ca:a1:de:49:b2:3f:15:5b:3e:10:16:c8:b3:
         e8:5f:16:85:18:84:62:40:ca:73:d5:a6:e5:c6:3c:4d:23:54:
         02:f6:7c:21:4a:8c:3d:75:fe:24:99:d5:10:dc:e0:8d:1d:11:
         97:cf:de:0f:a7:70:2e:57:7a:0c:70:a4:76:58:f8:67:da:b0:
         72:cd:9c:81:d1:15:7b:ef:35:09:6b:4b:cf:f6:c3:45:cb:0c:
         e0:85:de:6c:df:ed:61:9a:11:7e:1c:d4:f6:f4:68:59:44:77:
         61:4e:72:6c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt87m5Z9RTnN4MO2FnJ1niRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTRlMjM0ODIyNjg0NzVjMWI5MzU2MzdkMDAwMmMyZmQy
OTkzYjgwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjEzODZiZDQ4OWRlNzA4MTFmZWY4OTc2ODkwYWNmYmYxMzhkNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWuYLo2Zq+/tSGZVsd/2x3hlb8nh
blJI9JcapT1qRnmQ+/lqyz67qViG6l6afg0EteMFMks2L/YhHxBoiFPW5eU2kpKE
tcZvdCbUrX88chnm3TdNVYjnbxx/QTdmEWlSR/P9iw6YOigsYklVXinVlTeytw83
iPTpe/S1q3JqnVs9fWvN3cpj/cejGH8YtTHGUXMzxIK7RZQCXWc17hVEFKXZ0hU5
HClZKJ1xHMuJaGMtfh9ssf6hQ5+qKd5xbZOUZvJkr9kXtY0xR9YYJfj79smdJRnS
sHsFogA8R0yxS2p96ViTgsjL0RRkh/W6u6mJXsvK/oGQaN6e+wFnXnwQOwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO8Thr1InecIEf74l2iQrPvxONQ3MB8GA1UdIwQY
MBaAFKek4jSCJoR1wbk1Y30AAsL9KZO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYt
MjMzMzFiNjQ5MTZjLzEvN3hPR3ZVaWQ1d2dSX3ZpWGFKQ3MtX0U0MURjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wN2Y2MjMtMTRmYi00YTgwLTlmNDYtMjMzMzFiNjQ5MTZj
LzEvcDZUaU5JSW1oSFhCdVRWamZRQUN3djBwazdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhSuAAAC
MA0GCSqGSIb3DQEBCwUAA4IBAQA64hTglNDeuITbwQkKv/SX2ECDV+sJVJ2E5WKl
MTl69ruOAZM/UXSZ3jnJw/mSUngK16bgb8r4lJ1s/JpPQ+vVIzyD7a0Qi0rQFwv6
4iWkiS8/SGTMdMzsAzJkO715KyLTLbUph75rNY6AWduKfnhv0tfcwTCI9vjpcM/P
q2G4WnkN4Dkxd4X7RW4eKJMzQv68hRh7bsqh3kmyPxVbPhAWyLPoXxaFGIRiQMpz
1ablxjxNI1QC9nwhSow9df4kmdUQ3OCNHRGXz94Pp3AuV3oMcKR2WPhn2rByzZyB
0RV77zUJa0vP9sNFywzghd5s3+1hmhF+HNT29GhZRHdhTnJs
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:40:28 2026 by rpki-client