This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/t9vvWYRPeToATeVWr4VSq8ee-Bg.roa
File:                     t9vvWYRPeToATeVWr4VSq8ee-Bg.roa (raw, json)
Hash identifier:          ykKWvPxw03+JwAzaQkW4enMVJbdZNrE/vLvG44Vy5as=
Subject key identifier:   B7:DB:EF:59:84:4F:79:3A:00:4D:E5:56:AF:85:52:AB:C7:9E:F8:18
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       019B7DCA911FCDF133E6764FFB4BB5CBA453
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/t9vvWYRPeToATeVWr4VSq8ee-Bg.roa
Signing time:             Fri 02 Jan 2026 08:19:46 +0000
ROA not before:           Fri 02 Jan 2026 08:19:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        193.207.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 02:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:91:1f:cd:f1:33:e6:76:4f:fb:4b:b5:cb:a4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: Jan  2 08:19:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7dbef59844f793a004de556af8552abc79ef818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:ac:e9:d3:4e:90:8c:1b:fc:a7:9d:b2:29:
                    e7:ba:f7:9b:ae:fe:ed:87:7d:26:96:f5:f7:bb:fb:
                    33:af:a7:b3:47:2d:f6:89:8f:f1:e7:73:d1:07:06:
                    6d:41:66:9a:b5:a0:7a:2c:94:49:f4:31:9e:2c:a2:
                    56:7a:d1:7b:2c:3e:84:a3:3d:af:a4:f5:37:32:af:
                    a9:bc:c5:3a:b8:13:8f:a0:e8:ac:f0:57:eb:38:6f:
                    9a:a8:06:16:34:43:05:db:06:18:17:49:35:ce:25:
                    87:1f:9b:2e:bc:f6:d4:e0:96:0d:89:e1:4c:7f:99:
                    e9:ad:63:05:aa:f5:43:08:e3:d6:96:6f:cc:1c:08:
                    75:93:54:6d:b1:89:25:a6:3c:6f:b1:48:5f:27:34:
                    9c:69:75:88:72:a3:25:8a:dc:f4:25:4c:d9:8b:49:
                    4a:78:8c:6a:a1:2b:23:f3:da:f2:09:8c:1f:13:68:
                    7f:d2:86:e2:d3:00:04:13:f8:10:df:7b:67:54:42:
                    6e:0b:e5:31:ce:c2:35:63:2a:ba:09:49:3a:7c:eb:
                    61:b4:29:61:c7:e1:8c:09:1e:b3:c3:3b:9a:45:77:
                    e0:85:4b:e7:1c:d0:2f:f8:2c:0b:4e:1b:fa:26:77:
                    60:2f:8f:99:2f:76:bb:f8:42:75:50:fa:19:81:d8:
                    4d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:EF:59:84:4F:79:3A:00:4D:E5:56:AF:85:52:AB:C7:9E:F8:18
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/t9vvWYRPeToATeVWr4VSq8ee-Bg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.207.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:7d:9e:54:63:ab:24:34:a7:4f:ee:fe:2a:2a:72:05:f9:
         82:6c:68:af:62:d7:db:e1:6f:bc:49:9f:6a:f7:24:2b:04:5d:
         22:25:40:b7:6f:76:3a:8a:02:08:fe:6b:36:89:e3:f4:b0:4b:
         75:15:98:77:b8:50:47:f0:e4:70:3c:af:38:e8:0b:0f:91:d7:
         bc:29:f4:05:94:e3:ff:64:de:57:1f:8c:e9:02:30:f9:00:44:
         29:34:8c:a7:bc:60:4d:61:5d:5c:d8:19:41:3a:7d:c5:19:a0:
         8e:22:14:33:d7:cf:ce:b4:f6:55:90:fc:17:38:f1:c0:80:3e:
         d7:24:ea:31:bd:31:b2:dd:4a:f5:f1:ab:b0:67:fc:f6:0e:c9:
         84:5a:e9:1d:ee:4f:96:6e:11:0a:fa:ed:00:2a:fb:51:b3:d5:
         a8:e2:74:7e:d4:13:50:e3:1d:4a:8a:d8:c0:76:53:55:3f:4b:
         0e:13:a9:b1:b6:ee:70:43:a4:f1:72:0f:01:ee:65:45:d7:f2:
         19:71:5f:1a:ad:66:57:c2:d0:8c:31:2a:69:9a:62:ad:61:d5:
         3f:e9:02:52:c2:8c:38:96:e2:8a:35:1f:fc:f6:31:4c:e8:f0:
         53:fb:e9:69:16:18:60:18:6f:47:4d:7c:4b:be:93:3d:3c:1a:
         46:d2:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:27 2026 by rpki-client