This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/7eWcGeApexXCyJ5zpUATMUfIfjE.roa
File:                     7eWcGeApexXCyJ5zpUATMUfIfjE.roa (raw, json)
Hash identifier:          25j7Y9KcJOf9q796TODAMGOZw8uhZj4cuQLUqDrqWiw=
Subject key identifier:   ED:E5:9C:19:E0:29:7B:15:C2:C8:9E:73:A5:40:13:31:47:C8:7E:31
Certificate issuer:       /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial:       019B7F15EAE97660A073A804B676E46BB710
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/7eWcGeApexXCyJ5zpUATMUfIfjE.roa
Signing time:             Fri 02 Jan 2026 14:21:41 +0000
ROA not before:           Fri 02 Jan 2026 14:21:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203734
IP address blocks:        185.69.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:ea:e9:76:60:a0:73:a8:04:b6:76:e4:6b:b7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
        Validity
            Not Before: Jan  2 14:21:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ede59c19e0297b15c2c89e73a540133147c87e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:0a:95:f0:44:a1:6e:b1:11:0f:a4:a9:d4:
                    99:69:7a:27:ae:b0:8a:4e:7b:81:e8:1b:4d:35:38:
                    cf:de:1f:15:fe:a0:36:b9:5b:08:0f:98:d1:0d:50:
                    67:0a:46:e2:48:d6:50:ef:ff:64:63:df:e2:8f:b7:
                    65:7f:33:22:0d:97:28:87:94:80:c6:08:a2:9c:ac:
                    08:a3:27:5f:93:c7:a5:cd:61:e1:5c:c8:a7:50:ff:
                    6e:e4:ac:12:a2:6e:dc:83:2d:73:54:d5:7f:01:a7:
                    6b:42:29:0a:99:3d:85:3f:9f:80:c6:2e:2e:0e:a5:
                    27:1b:22:7b:cb:03:bb:b0:fd:55:e4:a5:8d:e5:41:
                    fe:95:09:c4:49:2b:fb:8c:ab:9d:2e:e1:15:f8:3a:
                    37:b8:c6:35:81:0f:4b:a0:4b:3a:8c:53:16:5b:83:
                    67:6d:54:5b:64:84:c6:76:c1:2f:6b:25:c8:45:d9:
                    bd:60:9b:0d:e3:88:09:8c:0c:40:78:03:67:be:f8:
                    ba:25:98:d0:53:d7:e3:a7:58:a8:eb:ad:08:5f:09:
                    e3:95:6b:91:a5:99:6f:bf:ee:c2:c2:8b:96:c5:8e:
                    87:e9:30:9f:c9:b0:a8:c5:de:85:68:6b:69:da:77:
                    96:ef:2a:0c:37:ba:e3:48:e8:94:e7:6f:82:4d:1b:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E5:9C:19:E0:29:7B:15:C2:C8:9E:73:A5:40:13:31:47:C8:7E:31
            X509v3 Authority Key Identifier:
                keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/7eWcGeApexXCyJ5zpUATMUfIfjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:8e:e9:1a:e4:fa:e1:72:fd:ef:a9:44:2d:6a:8e:af:b6:1a:
         4b:1e:6e:34:6f:91:85:83:29:b1:47:89:c1:98:93:93:d8:65:
         3c:7b:25:15:8f:f8:56:f5:af:fd:06:d1:1a:0c:90:91:10:e5:
         63:eb:c0:2e:b0:62:ba:2e:14:08:49:79:9a:fe:16:44:fc:cd:
         03:6e:07:bd:86:1e:54:66:c2:8b:6e:ad:92:2e:de:39:74:30:
         9a:fb:65:6c:1c:04:76:7d:4b:0a:3b:c0:dc:ea:ed:a0:30:18:
         72:e8:03:7d:7d:b5:1a:fe:d3:73:25:90:f2:6a:57:59:9a:07:
         df:2d:71:d7:bf:05:e2:7c:e9:ae:3e:3d:e1:eb:47:0a:11:75:
         11:0b:7b:e8:50:a3:a1:f1:52:2a:18:ad:44:32:85:17:13:3e:
         25:bb:e7:00:fd:55:11:de:9d:fd:59:1c:e3:e1:8f:27:72:8e:
         e9:c5:7e:51:f5:6f:8f:11:80:e6:55:82:2c:e2:df:08:ac:c0:
         65:22:11:25:9d:e4:f9:e9:57:09:35:24:3c:1f:2d:f2:13:2b:
         e2:ee:14:63:46:35:d2:1e:c5:db:73:4f:6e:05:18:e6:ff:97:
         04:55:1e:14:4c:cc:63:93:7d:6c:a9:75:1d:9c:22:8d:a6:23:
         02:82:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:51 2026 by rpki-client