This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/7kADj_Exqnkd_NooXivCTNgHMTw.roa
File:                     7kADj_Exqnkd_NooXivCTNgHMTw.roa (raw, json)
Hash identifier:          xbxLEV7EBAsCMdM5vvQNxcgu+GmkqM8Q10yUTCA4kNA=
Subject key identifier:   EE:40:03:8F:F1:31:AA:79:1D:FC:DA:28:5E:2B:C2:4C:D8:07:31:3C
Certificate issuer:       /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial:       019B783552C598C21E53687D0980CED3DB75
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/7kADj_Exqnkd_NooXivCTNgHMTw.roa
Signing time:             Thu 01 Jan 2026 06:18:39 +0000
ROA not before:           Thu 01 Jan 2026 06:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38963
IP address blocks:        46.236.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:52:c5:98:c2:1e:53:68:7d:09:80:ce:d3:db:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
        Validity
            Not Before: Jan  1 06:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee40038ff131aa791dfcda285e2bc24cd807313c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e9:d9:1e:39:12:e1:3a:67:c1:37:00:69:cd:
                    c7:a5:ac:dc:02:1a:c1:3b:ef:26:19:02:ed:ea:12:
                    5f:80:f4:c9:b2:ed:70:19:63:77:2d:c7:0e:5c:15:
                    17:af:b8:69:83:66:09:b4:9e:4c:d1:13:c7:50:25:
                    64:1d:c1:95:c8:ab:0c:67:58:53:18:8f:b1:98:04:
                    ee:15:15:82:d4:00:ec:32:a8:dd:e6:31:ef:cc:63:
                    f7:07:9d:84:f6:21:99:ae:1e:e3:e2:0e:b6:c1:03:
                    ac:5e:b1:fd:e0:b7:7b:03:55:60:01:fd:02:ac:6a:
                    1c:7d:7f:11:12:cc:d5:af:1c:ca:6b:cc:0c:48:46:
                    48:67:17:86:5d:a4:9b:45:b8:d3:50:92:dc:43:5e:
                    e4:09:06:3f:c4:db:5a:a3:fa:e0:cc:d7:0f:c7:3b:
                    ad:03:63:c9:9b:fb:d2:fa:2a:9b:de:f0:ec:16:5f:
                    7c:83:d6:e3:60:b5:67:d9:29:cd:37:16:17:6a:fd:
                    75:48:e7:ff:03:43:0a:e2:da:ec:24:f4:59:37:fe:
                    58:a7:52:b5:c7:fe:8e:21:4f:e0:f5:88:a9:e3:81:
                    5f:49:be:c6:d6:36:e4:69:32:44:2e:78:9c:b9:50:
                    31:56:20:67:96:51:05:44:20:b9:13:4e:0c:11:49:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:40:03:8F:F1:31:AA:79:1D:FC:DA:28:5E:2B:C2:4C:D8:07:31:3C
            X509v3 Authority Key Identifier:
                keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/7kADj_Exqnkd_NooXivCTNgHMTw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.236.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:01:be:fd:09:8f:36:6a:5e:cd:1d:dc:51:46:b0:85:f4:7c:
         00:35:9f:d2:db:dc:a1:99:32:07:d7:aa:32:02:17:c8:bc:06:
         3b:0e:ec:45:cd:71:ed:c9:5e:03:8d:09:08:46:52:39:28:a2:
         31:b9:5c:a5:d8:af:f9:f1:32:b7:a3:6f:8d:f9:02:ea:28:80:
         d4:77:23:64:cf:27:7b:23:7a:70:0f:ee:1a:8d:31:ce:df:4c:
         f0:d9:04:01:0d:ea:c4:59:7a:77:5c:16:17:dc:36:23:0b:33:
         93:63:80:49:c4:32:4f:f1:68:c7:36:a4:5f:d5:5f:9b:17:80:
         00:15:33:a5:ba:b9:b2:57:35:22:b2:d7:fd:3d:5e:55:2a:75:
         6b:20:36:a4:69:03:85:b7:4d:a5:2e:ac:70:67:23:fa:97:e1:
         dc:af:04:1d:7b:64:28:ac:9e:05:b8:20:2f:04:5b:8a:1f:62:
         fb:35:a3:37:dd:7a:46:6b:9a:89:9d:d2:50:e4:f7:47:f3:82:
         bf:c0:24:32:0f:88:51:84:18:cc:a7:f4:c7:ff:b4:9c:21:31:
         38:f5:df:cc:a9:ca:19:79:14:24:8d:ea:e6:ca:b3:b2:d9:ce:
         9e:0c:bd:99:1e:34:d1:d3:00:f8:28:2c:51:a8:bc:56:c0:86:
         89:1f:22:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NVLFmMIeU2h9CYDO09t1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4
MWFkMTkwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTQwMDM4ZmYxMzFhYTc5MWRmY2RhMjg1ZTJiYzI0Y2Q4MDczMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OnZHjkS4TpnwTcAac3HpazcAhrB
O+8mGQLt6hJfgPTJsu1wGWN3LccOXBUXr7hpg2YJtJ5M0RPHUCVkHcGVyKsMZ1hT
GI+xmATuFRWC1ADsMqjd5jHvzGP3B52E9iGZrh7j4g62wQOsXrH94Ld7A1VgAf0C
rGocfX8REszVrxzKa8wMSEZIZxeGXaSbRbjTUJLcQ17kCQY/xNtao/rgzNcPxzut
A2PJm/vS+iqb3vDsFl98g9bjYLVn2SnNNxYXav11SOf/A0MK4trsJPRZN/5Yp1K1
x/6OIU/g9Yip44FfSb7G1jbkaTJELnicuVAxViBnllEFRCC5E04MEUkVJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5AA4/xMap5HfzaKF4rwkzYBzE8MB8GA1UdIwQY
MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt
NzRmMGMzZTY2M2NiLzEvN2tBRGpfRXhxbmtkX05vb1hpdkNUTmdITVR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni
LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuw/MA0G
CSqGSIb3DQEBCwUAA4IBAQBKAb79CY82al7NHdxRRrCF9HwANZ/S29yhmTIH16oy
AhfIvAY7DuxFzXHtyV4DjQkIRlI5KKIxuVyl2K/58TK3o2+N+QLqKIDUdyNkzyd7
I3pwD+4ajTHO30zw2QQBDerEWXp3XBYX3DYjCzOTY4BJxDJP8WjHNqRf1V+bF4AA
FTOlurmyVzUistf9PV5VKnVrIDakaQOFt02lLqxwZyP6l+HcrwQde2QorJ4FuCAv
BFuKH2L7NaM33XpGa5qJndJQ5PdH84K/wCQyD4hRhBjMp/TH/7ScITE49d/MqcoZ
eRQkjermyrOy2c6eDL2ZHjTR0wD4KCxRqLxWwIaJHyLU
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:31:51 2026 by rpki-client