This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/e7AhsDGyXnglWGP4F2vWjFKoYe0.roa
File:                     e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (raw, json)
Hash identifier:          e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=
Subject key identifier:   7B:B0:21:B0:31:B2:5E:78:25:58:63:F8:17:6B:D6:8C:52:A8:61:ED
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       019B79108A6B9D820903BD6D983999E33477
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/e7AhsDGyXnglWGP4F2vWjFKoYe0.roa
Signing time:             Thu 01 Jan 2026 10:18:05 +0000
ROA not before:           Thu 01 Jan 2026 10:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211677
IP address blocks:        195.35.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:8a:6b:9d:82:09:03:bd:6d:98:39:99:e3:34:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Jan  1 10:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7bb021b031b25e78255863f8176bd68c52a861ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:2d:c9:4c:26:84:aa:32:cf:c1:fe:65:ba:
                    f8:b0:79:33:43:8b:bc:8e:b5:c0:8a:f1:e8:3e:76:
                    8f:3d:28:f7:f6:fd:61:38:f9:c2:74:10:a9:2c:7a:
                    39:b1:1c:88:3e:7c:a1:16:4a:18:07:ad:33:3f:b2:
                    10:8f:e6:ae:c6:47:d2:c5:e7:fc:ff:9f:98:49:1b:
                    80:af:6b:46:39:f6:0a:c0:82:e9:b1:22:f6:44:48:
                    52:ab:05:aa:7e:e8:41:87:7c:f2:b5:fb:f7:3e:9d:
                    79:82:f2:15:55:74:f6:c0:4f:77:43:b6:6b:ad:5d:
                    d2:45:d2:f5:bd:78:e8:ca:a9:9b:a6:02:a0:d1:56:
                    cd:38:c6:32:30:62:5f:50:8f:c6:93:14:a4:73:bb:
                    29:52:b7:ef:de:3f:ae:56:17:37:3a:70:d2:b9:eb:
                    8e:47:f6:2f:a0:18:d3:d3:1f:a4:5a:05:5d:59:a1:
                    95:fe:3d:0d:37:34:6a:00:ab:18:21:42:64:b0:fc:
                    8f:8e:45:09:08:39:88:ec:8e:e5:cc:a6:69:d5:65:
                    0e:3c:bb:54:03:5d:11:09:dd:9e:eb:37:5d:0c:28:
                    78:46:6a:2e:9f:a7:a0:72:c8:7b:47:ed:66:3c:b6:
                    50:9b:f4:d3:26:81:75:e6:23:a6:4e:e3:8b:8f:c8:
                    3e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B0:21:B0:31:B2:5E:78:25:58:63:F8:17:6B:D6:8C:52:A8:61:ED
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/e7AhsDGyXnglWGP4F2vWjFKoYe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.35.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:1b:61:4b:be:ff:58:e4:cf:ef:52:09:07:1e:a6:e6:d0:
         32:d0:a5:78:47:bf:c2:00:3b:36:7b:53:cb:c6:64:65:7d:e4:
         e5:c4:77:dd:74:44:5f:f1:97:60:5c:77:62:d4:41:61:32:37:
         7a:36:ab:51:2e:17:c3:ff:09:0f:3f:0b:cf:a7:b5:92:d3:bf:
         f2:5a:56:eb:dd:e9:cf:06:57:4d:3b:a2:1e:d0:8e:87:0a:4c:
         db:d6:54:85:8f:71:01:5b:42:ca:54:f4:84:e4:19:72:d4:d1:
         b9:8f:ab:04:d7:bd:2d:27:5e:56:69:01:53:0a:0e:db:58:d8:
         86:cf:71:2a:b6:66:a6:76:3a:c6:90:06:ee:f7:30:dd:fc:e0:
         15:e5:24:7f:3b:30:f6:22:33:95:bc:ba:3e:89:c2:50:0b:d3:
         1d:f6:58:97:5b:68:c7:f7:4e:83:f8:f4:4c:a2:4c:ea:61:3a:
         68:2a:81:e5:48:d5:b5:1c:b0:b6:d6:1f:1a:6e:c8:c2:19:11:
         42:61:0e:bf:ef:e8:41:ff:93:34:1c:de:b5:1a:00:91:57:0b:
         e9:7c:0d:5f:bf:2b:0d:d0:bc:69:5a:f6:55:4b:e9:84:72:1a:
         3b:24:ab:c4:94:97:fb:a0:fa:a9:c6:33:a8:65:a8:a6:fa:42:
         84:00:3e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:18 2026 by rpki-client