This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/7dmwGdPXkkuF3a-bwvXBxQCDrQs.roa
File:                     7dmwGdPXkkuF3a-bwvXBxQCDrQs.roa (raw, json)
Hash identifier:          fBJVwwKGkrIo09o7TZLNqyga1Hd6PltCsvzQmBK4N7E=
Subject key identifier:   ED:D9:B0:19:D3:D7:92:4B:85:DD:AF:9B:C2:F5:C1:C5:00:83:AD:0B
Certificate issuer:       /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial:       019B939064B4634123C3663C64239396C4D9
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/7dmwGdPXkkuF3a-bwvXBxQCDrQs.roa
Signing time:             Tue 06 Jan 2026 13:47:52 +0000
ROA not before:           Tue 06 Jan 2026 13:47:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209413
IP address blocks:        2a03:5840:137::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:93:90:64:b4:63:41:23:c3:66:3c:64:23:93:96:c4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
        Validity
            Not Before: Jan  6 13:47:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=edd9b019d3d7924b85ddaf9bc2f5c1c50083ad0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:7d:b7:0c:54:5f:71:bf:b4:79:54:62:7f:
                    45:04:50:4b:a4:ca:16:4d:db:27:24:df:57:1f:9e:
                    ee:e0:f9:88:20:ef:3d:00:24:7e:47:ad:ea:c2:2d:
                    46:5b:ec:01:0b:d5:bc:7a:d8:b8:0d:c5:40:16:7e:
                    5e:e3:19:b3:a6:dc:03:a7:4e:49:fb:cd:b2:22:6a:
                    81:9a:dd:e5:68:16:d8:de:3b:cb:df:67:4a:ac:c9:
                    6e:dd:0c:1f:af:6d:c8:12:e1:04:93:09:8a:f5:cb:
                    8c:9d:64:f6:06:7b:2e:5b:2d:08:cd:99:e1:f1:3d:
                    25:6f:9d:b1:4c:1a:b8:d7:22:82:6c:01:97:4f:4b:
                    04:8e:34:28:57:da:4b:ac:34:e3:fb:a6:86:5e:58:
                    27:77:73:5e:85:44:d6:bb:f0:53:5f:a0:3e:52:69:
                    fc:e3:88:69:90:f8:c8:99:6f:e7:4c:87:4a:b7:57:
                    d8:41:08:b3:d8:33:9c:1e:bc:d2:7e:ed:2a:16:93:
                    cc:61:54:c4:f0:a0:f6:28:f9:bd:b9:20:73:4c:dc:
                    e5:34:15:fe:96:a5:bb:5b:64:cf:8a:da:52:bc:97:
                    3e:1a:cd:a4:d4:ee:b5:aa:a7:94:0c:04:01:d5:b1:
                    51:e1:ac:3b:96:2c:44:19:24:06:94:0b:8d:f5:51:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D9:B0:19:D3:D7:92:4B:85:DD:AF:9B:C2:F5:C1:C5:00:83:AD:0B
            X509v3 Authority Key Identifier:
                keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/7dmwGdPXkkuF3a-bwvXBxQCDrQs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5840:137::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:20:90:7a:bb:8a:f9:63:d0:30:59:85:db:9c:c0:98:7f:
         ad:47:df:a1:44:90:be:1c:fd:65:b4:d0:a2:07:bd:1d:76:a9:
         b2:72:fd:50:69:c6:ee:14:c3:05:53:09:bb:41:be:4a:6f:b8:
         e3:37:e4:24:b6:a3:b2:a1:60:b4:07:25:d4:65:ca:57:e7:a4:
         e6:c9:1b:04:7c:c4:2b:68:82:d9:cc:b3:e7:df:70:e8:1e:3d:
         d3:7a:9d:20:ac:b8:8e:4b:05:99:40:56:73:3a:fd:fd:5a:df:
         9b:73:2c:06:ea:ce:18:fc:5a:12:68:5a:6b:aa:b1:b7:db:57:
         af:3b:2e:b3:76:07:1b:ce:bb:a4:33:cd:d8:07:ee:3e:9e:05:
         4a:6e:c5:a9:77:a5:4e:46:0b:be:bb:3f:fc:ec:4e:6f:0a:04:
         5e:dc:ac:0e:1a:33:cd:7c:4a:bb:a5:23:fe:eb:a2:be:0b:5c:
         f9:f4:08:2f:80:59:68:19:da:b2:ae:67:e3:4b:13:d4:c3:d0:
         eb:24:ce:6d:36:69:e0:5a:dd:27:64:03:84:71:b2:c7:d9:72:
         5a:78:de:23:23:03:47:9b:93:3a:9f:75:6f:ba:17:94:88:10:
         bf:fe:2b:57:b0:8c:9d:50:2c:f9:10:81:9b:75:87:ed:ca:1c:
         76:b5:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:22:42 2026 by rpki-client