This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa
File:                     1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa (raw, json)
Hash identifier:          MZz9ZW2Zi0k4HU9dqfp0ig+8Gbo1pNfmpBwGUkNoQpg=
Subject key identifier:   FA:E5:7B:B9:7B:9F:D0:0F:51:AC:4E:80:01:E8:8A:8D:0E:12:6E:90
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       019B7AC80402A449CF019EE7A80902F3E961
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa
Signing time:             Thu 01 Jan 2026 18:18:07 +0000
ROA not before:           Thu 01 Jan 2026 18:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49223
IP address blocks:        62.122.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:04:02:a4:49:cf:01:9e:e7:a8:09:02:f3:e9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Jan  1 18:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fae57bb97b9fd00f51ac4e8001e88a8d0e126e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:40:da:bb:57:1e:bc:0f:11:06:77:14:95:
                    96:c8:55:58:af:b5:46:54:b6:21:c4:c8:39:d9:4c:
                    b0:fe:c3:64:b4:b7:cd:5d:7f:df:17:b8:df:14:2f:
                    b9:88:7a:6c:ef:e5:88:eb:3f:9d:48:d6:24:a5:b8:
                    70:39:85:5c:59:eb:bc:2f:65:bb:65:d9:66:8c:e5:
                    c9:27:9f:8c:bd:5a:c2:78:d6:48:ae:61:33:38:26:
                    e8:e7:96:2d:39:fd:e8:f9:4a:62:89:37:d3:ea:17:
                    4c:bc:91:9d:be:83:c6:f5:9a:68:91:98:e7:e5:67:
                    b4:73:91:2d:df:74:64:61:7b:64:12:4c:75:dd:76:
                    fb:d8:f3:b9:ef:52:5a:5c:6e:be:c0:92:3f:15:5e:
                    db:fb:12:d3:07:f2:a6:6d:6f:e2:39:05:9e:47:34:
                    a2:d4:62:fc:d7:46:50:c3:45:7b:85:26:81:dd:2d:
                    ba:fc:cb:91:04:ad:c0:c6:6c:62:c3:18:45:bf:dd:
                    25:52:f2:5f:1d:94:b8:05:0c:c0:37:88:4e:14:05:
                    d1:6d:cd:5e:df:c9:0b:c4:15:5a:18:b5:14:11:41:
                    b7:45:db:21:34:8f:60:c1:0c:b0:28:8f:07:96:e4:
                    fc:28:7f:3f:9c:d0:50:97:8d:bb:a9:1a:28:bb:a0:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E5:7B:B9:7B:9F:D0:0F:51:AC:4E:80:01:E8:8A:8D:0E:12:6E:90
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:9e:44:e0:3f:f9:dd:ae:08:18:f2:b8:fe:f4:75:b7:f8:f4:
         e8:70:ac:85:2c:fe:a3:39:d4:39:ce:47:c9:4b:d7:56:33:19:
         0b:1f:7e:1f:19:a9:55:86:75:7b:4c:e5:74:e3:4a:eb:20:57:
         be:3b:2e:46:11:3b:03:e7:28:a8:a9:17:2e:9c:15:09:20:e1:
         00:99:a0:3c:72:c4:5b:2c:be:3a:6a:e7:9c:ac:58:59:df:d9:
         cb:88:81:b0:f9:93:eb:c2:af:9d:d3:d4:87:d3:0e:5f:98:6f:
         05:16:9b:ac:48:6f:c6:94:98:2e:5d:71:8d:1e:38:1a:c8:ca:
         f9:43:ac:02:ed:05:a7:ed:53:41:d0:6f:d5:39:22:04:83:8a:
         ce:ea:56:c0:3b:8d:84:14:bd:38:60:be:76:f0:87:cb:78:23:
         c7:3b:2c:cc:07:33:88:8c:1a:6b:71:f0:6a:91:9a:3a:c0:d1:
         f1:8e:6a:bb:64:a4:a9:36:f1:63:35:43:12:8d:03:15:90:bc:
         7d:eb:ed:18:30:c1:2e:23:4e:97:de:72:94:04:8f:93:d0:9e:
         08:d5:36:b4:ea:fa:02:92:b7:0b:0f:c4:a2:2f:18:2e:b1:67:
         8e:a4:27:57:0a:86:23:22:50:65:3b:a4:82:6e:58:ee:5c:57:
         1d:d4:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:11 2026 by rpki-client