This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/e7AS-h8UVzO25ySDY88gNZMJcDc.roa
File:                     e7AS-h8UVzO25ySDY88gNZMJcDc.roa (raw, json)
Hash identifier:          nbzFORwCh+VhrVrfEhpvS2wccja5BBY0hNY1kpvLUoM=
Subject key identifier:   7B:B0:12:FA:1F:14:57:33:B6:E7:24:83:63:CF:20:35:93:09:70:37
Certificate issuer:       /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial:       019B7EA56767DA08F563CF1282F3F90958FE
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/e7AS-h8UVzO25ySDY88gNZMJcDc.roa
Signing time:             Fri 02 Jan 2026 12:18:47 +0000
ROA not before:           Fri 02 Jan 2026 12:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        185.222.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 02:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:67:67:da:08:f5:63:cf:12:82:f3:f9:09:58:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
        Validity
            Not Before: Jan  2 12:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7bb012fa1f145733b6e7248363cf203593097037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e3:04:de:01:f8:b1:b6:c3:a5:ef:7c:0f:29:
                    49:7c:0e:8d:3b:4b:bf:cb:41:d0:26:84:9f:5e:ef:
                    b0:44:c9:b3:75:f0:10:a8:7b:54:62:3f:ed:09:f3:
                    b4:6c:05:d8:d3:11:02:02:3c:b6:0c:51:45:93:09:
                    07:4a:43:b3:38:81:54:41:fe:cb:36:c8:1d:49:66:
                    79:de:8b:fb:e9:52:2d:f0:3e:6a:20:32:a8:55:61:
                    96:f3:11:51:dd:2c:43:25:8f:2b:f7:0d:66:75:d3:
                    b1:d4:80:d7:8c:e0:d8:cc:21:4c:92:43:87:ae:b1:
                    67:6b:f7:57:06:da:a9:25:98:e1:2a:8a:e2:9d:c9:
                    44:3a:5e:bc:de:34:54:fe:5b:1f:67:56:43:59:fc:
                    a4:54:e1:a9:1e:5a:52:ce:b0:7f:ee:41:3f:89:99:
                    60:f6:37:18:a7:88:06:4a:f2:8d:cf:c1:4c:27:5b:
                    a2:b6:a8:64:43:f5:df:5a:85:b6:6d:01:5d:65:89:
                    82:9c:37:5c:8c:1d:55:8a:b3:1a:7d:d6:15:26:63:
                    7e:b7:0d:9b:a1:2a:16:97:b8:7a:a9:9a:c7:2c:9b:
                    39:a1:1c:24:3b:08:5c:2a:07:90:66:38:fa:4c:ba:
                    d5:08:71:c8:bb:99:90:8c:4b:2d:5d:2a:40:ac:0b:
                    79:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B0:12:FA:1F:14:57:33:B6:E7:24:83:63:CF:20:35:93:09:70:37
            X509v3 Authority Key Identifier:
                keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/e7AS-h8UVzO25ySDY88gNZMJcDc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:5b:65:cd:af:4d:84:39:b9:33:f9:c5:1e:27:a3:2b:53:
         d4:a4:f4:86:bf:d2:da:7b:cd:9a:7f:22:f3:7d:dd:ea:62:23:
         32:f3:f0:1f:e5:58:a3:31:a1:09:d0:83:2a:e8:86:bb:bc:f4:
         53:dc:6b:ea:03:b4:e1:a6:53:d1:db:da:84:81:bb:68:2a:81:
         ef:04:95:8c:67:6d:50:8f:7f:bf:45:b2:de:c1:8c:ca:c1:42:
         17:c8:7c:2d:7a:38:eb:0a:66:1f:df:ae:09:14:f9:81:0d:d6:
         b3:e6:89:76:17:bc:b3:18:9c:89:13:d4:e8:77:54:e6:4f:5d:
         16:bf:48:7d:82:0f:a9:0c:8a:cc:c5:c4:4e:97:17:35:cb:20:
         7f:e9:3b:2b:43:d1:82:f7:ab:6d:eb:71:85:d9:1c:f9:da:75:
         b0:83:74:42:f1:e0:ef:2f:6b:ed:de:81:7b:15:7d:04:f7:8b:
         a5:45:55:b0:d3:44:41:ec:38:b3:ea:92:41:1c:07:a2:d1:da:
         4c:22:76:d6:d7:0c:e6:db:6b:73:9f:8f:2c:d7:f9:e0:53:a7:
         56:bd:74:eb:5e:d9:02:d6:6b:12:3f:2a:f9:b4:0b:59:38:2a:
         b7:37:31:f6:38:19:b3:48:7f:ed:68:68:ab:36:f6:78:fc:a2:
         79:3e:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:22 2026 by rpki-client