This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/fJC9vmdZueXz61wAYAD-WUsaH2A.roa
File:                     fJC9vmdZueXz61wAYAD-WUsaH2A.roa (raw, json)
Hash identifier:          k5sJI4drxp1+QGPOMqgRV5VUY5GowjbKkDKbGnRh3VE=
Subject key identifier:   7C:90:BD:BE:67:59:B9:E5:F3:EB:5C:00:60:00:FE:59:4B:1A:1F:60
Certificate issuer:       /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial:       019B7CEE5AAC6CAF211D3CF675AAEDBFE95C
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/fJC9vmdZueXz61wAYAD-WUsaH2A.roa
Signing time:             Fri 02 Jan 2026 04:19:14 +0000
ROA not before:           Fri 02 Jan 2026 04:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215261
IP address blocks:        94.156.37.0/24 maxlen: 24
                          2001:67c:fac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:5a:ac:6c:af:21:1d:3c:f6:75:aa:ed:bf:e9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
        Validity
            Not Before: Jan  2 04:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c90bdbe6759b9e5f3eb5c006000fe594b1a1f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:47:77:ec:21:df:59:23:5a:f7:a8:46:25:
                    30:65:48:fb:5f:30:15:76:ad:4d:fe:c5:b8:fd:26:
                    79:71:7e:87:08:5b:2d:2b:65:43:9c:96:25:c1:7b:
                    25:6a:0e:fb:a1:5c:19:97:80:7f:4f:05:ce:12:47:
                    3a:f0:19:bc:64:0d:dd:21:fc:5a:8d:69:49:fc:54:
                    1d:21:40:ce:a4:41:32:f6:5a:27:92:74:4d:f6:06:
                    ea:c7:1b:02:09:a5:d7:e1:ba:de:61:a0:34:6b:24:
                    6e:98:65:8a:6a:8e:e8:5b:40:6f:90:11:d7:a5:40:
                    59:d0:c8:61:ab:f5:1a:cd:26:2a:bd:43:a2:0b:78:
                    08:21:46:54:b6:0d:52:87:01:f6:87:e1:a6:04:22:
                    03:9f:39:29:37:a7:c9:b3:63:ca:24:43:40:56:45:
                    a3:ce:a4:05:9d:ba:cf:ac:06:7a:ef:8e:ff:c3:15:
                    87:27:ca:0c:cf:a4:c8:f0:fb:f7:01:c3:16:33:fa:
                    ae:8e:73:46:08:a1:cc:21:e8:77:bc:3d:68:07:26:
                    1b:65:4f:31:56:fb:98:c3:20:41:88:76:8a:9b:be:
                    86:a7:c3:4e:fe:6d:65:9d:b7:6a:47:8a:7a:4f:c6:
                    e7:69:82:a0:01:6c:b9:05:32:f0:9e:36:24:c9:d9:
                    68:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:90:BD:BE:67:59:B9:E5:F3:EB:5C:00:60:00:FE:59:4B:1A:1F:60
            X509v3 Authority Key Identifier:
                keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/fJC9vmdZueXz61wAYAD-WUsaH2A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.156.37.0/24
                IPv6:
                  2001:67c:fac::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:79:4b:ea:8a:ac:c9:3b:3e:e5:8d:62:1f:9a:9e:c4:08:
         72:48:75:10:5b:37:6f:79:46:93:c4:6d:2a:e9:df:4b:2b:b1:
         97:a9:d2:ae:74:a1:4b:a2:5e:1c:c1:17:02:5d:03:06:29:1b:
         48:d9:36:e2:b8:ee:bb:ea:f4:63:cf:ed:17:63:72:ba:c4:b7:
         9f:e1:c1:b4:6d:e3:9f:7c:e1:39:05:64:83:1f:7e:19:33:12:
         2d:25:79:3a:7c:b1:c3:e2:4a:d5:df:73:3a:7e:88:82:81:28:
         db:d0:ce:60:d7:58:15:02:f0:4d:32:55:76:56:09:75:fe:a6:
         7a:f0:ac:9f:42:fe:f6:29:40:9d:48:81:37:5e:60:00:34:e3:
         9a:66:43:8f:7d:07:3a:ce:2a:80:9c:01:d2:36:53:7b:fc:31:
         b4:f8:e5:dd:59:56:92:fc:f5:08:2c:75:5f:63:70:6c:a9:c9:
         be:ca:11:cf:37:06:da:57:b8:ca:7c:e7:75:3e:2e:a2:66:51:
         0c:92:ee:4a:69:a7:f2:eb:a0:69:7a:67:de:36:68:e3:c0:59:
         6b:e9:6b:5c:9f:b2:c8:c1:8a:11:5e:7e:da:b7:ad:c8:0e:9c:
         d4:62:82:61:d9:46:bb:67:59:da:21:6c:4a:6a:28:b7:7a:36:
         c2:5c:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:44 2026 by rpki-client