This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa
File:                     7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (raw, json)
Hash identifier:          J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=
Subject key identifier:   EE:91:24:44:24:53:75:92:15:33:D0:BA:42:B9:D1:17:FE:01:03:6C
Certificate issuer:       /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial:       019B797DFC1DABEB831F8B8F583A18B41E1F
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa
Signing time:             Thu 01 Jan 2026 12:17:38 +0000
ROA not before:           Thu 01 Jan 2026 12:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211373
IP address blocks:        185.217.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:fc:1d:ab:eb:83:1f:8b:8f:58:3a:18:b4:1e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
        Validity
            Not Before: Jan  1 12:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee912444245375921533d0ba42b9d117fe01036c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:39:26:25:4f:02:08:76:c1:eb:e7:a7:96:
                    af:ef:b2:fa:ac:9b:ba:1d:a6:9a:32:01:0e:8f:52:
                    5e:51:7d:a8:da:7b:75:b1:6f:65:be:a6:bd:e5:72:
                    53:4c:8c:6e:fa:39:dc:61:11:64:70:e7:54:24:96:
                    3c:df:36:e8:7d:2b:02:90:df:5b:a2:b9:a7:d6:d2:
                    9c:13:90:2f:67:e5:c6:c8:c1:04:82:14:19:00:07:
                    da:a2:83:aa:63:63:9a:bb:f2:10:9b:c7:4b:b6:da:
                    60:d3:c2:f1:a2:ea:36:28:da:10:75:2a:8b:00:fd:
                    fe:a1:9e:6d:ee:93:2f:34:fe:74:29:bb:d0:02:77:
                    b5:d3:d3:a4:a3:10:20:d1:a5:d4:b8:43:27:70:3e:
                    e7:68:42:91:e2:fa:a1:f1:b5:dd:c3:71:4f:b2:d3:
                    15:31:1b:0c:ec:8b:dd:6e:b4:0e:1f:b7:8d:e4:3e:
                    2c:48:3f:39:d9:70:34:fe:80:78:25:05:8e:c1:7c:
                    43:73:88:0f:6c:1c:b4:36:00:d5:78:4f:51:cd:33:
                    44:ed:cd:64:73:6e:e3:73:5c:14:8b:1d:ff:53:55:
                    ba:59:70:43:d3:ba:23:b6:f1:b4:d2:9c:a9:cc:44:
                    dd:42:3b:7d:ce:ae:ac:57:7f:a3:08:65:5e:28:75:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:91:24:44:24:53:75:92:15:33:D0:BA:42:B9:D1:17:FE:01:03:6C
            X509v3 Authority Key Identifier:
                keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:de:35:ba:a1:dc:4e:30:e2:dc:16:64:2c:56:34:4f:d8:cb:
         c9:3f:1b:5d:db:96:87:2f:22:fe:b3:e8:18:1c:fb:62:23:2e:
         d1:5b:99:47:71:b4:75:f1:bd:af:52:95:68:a0:1c:5c:f9:ff:
         db:43:04:73:7b:cf:c7:94:0d:d5:41:b5:9f:04:cb:b2:4f:a3:
         3d:06:cf:8e:e3:45:f3:9f:1e:50:50:cd:15:bd:cd:fe:75:c4:
         96:c9:8c:bd:81:70:08:35:3c:ed:5e:01:bb:72:5e:50:19:bb:
         79:4f:3e:98:e5:20:1b:3b:d3:42:eb:78:db:5f:12:c8:bb:f0:
         8f:6a:da:3a:82:ea:35:c5:14:93:25:6c:29:b2:ad:64:62:40:
         7e:d5:6b:d8:fd:92:f9:81:e2:53:d6:0f:bb:6d:cc:ec:73:a8:
         a4:92:68:20:06:de:5a:eb:84:5b:1b:21:86:08:b9:01:bc:2b:
         96:b4:5f:e0:f9:04:32:12:05:cc:8f:b9:d4:cc:86:82:82:1c:
         9d:71:f7:3b:b9:a6:0a:b4:bf:ec:c4:7b:50:6a:d9:6f:b2:23:
         8c:79:37:97:fd:fe:09:0d:51:75:0c:68:2c:f8:5e:99:79:4d:
         ba:c8:47:ab:87:c4:3f:c2:14:72:0a:ee:e7:4c:ea:9b:e4:41:
         ae:50:0f:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ffwdq+uDH4uPWDoYtB4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0
MjliZGIwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTkxMjQ0NDI0NTM3NTkyMTUzM2QwYmE0MmI5ZDExN2ZlMDEwMzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5g5JiVPAgh2wevnp5av77L6rJu6
HaaaMgEOj1JeUX2o2nt1sW9lvqa95XJTTIxu+jncYRFkcOdUJJY83zbofSsCkN9b
ormn1tKcE5AvZ+XGyMEEghQZAAfaooOqY2Oau/IQm8dLttpg08Lxouo2KNoQdSqL
AP3+oZ5t7pMvNP50KbvQAne109OkoxAg0aXUuEMncD7naEKR4vqh8bXdw3FPstMV
MRsM7IvdbrQOH7eN5D4sSD852XA0/oB4JQWOwXxDc4gPbBy0NgDVeE9RzTNE7c1k
c27jc1wUix3/U1W6WXBD07ojtvG00pypzETdQjt9zq6sV3+jCGVeKHX4BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO6RJEQkU3WSFTPQukK50Rf+AQNsMB8GA1UdIwQY
MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt
M2U0Yjc0ZGQwNThkLzEvN3BFa1JDUlRkWklWTTlDNlFyblJGXzRCQTJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk
LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudmMMA0G
CSqGSIb3DQEBCwUAA4IBAQAh3jW6odxOMOLcFmQsVjRP2MvJPxtd25aHLyL+s+gY
HPtiIy7RW5lHcbR18b2vUpVooBxc+f/bQwRze8/HlA3VQbWfBMuyT6M9Bs+O40Xz
nx5QUM0Vvc3+dcSWyYy9gXAINTztXgG7cl5QGbt5Tz6Y5SAbO9NC63jbXxLIu/CP
ato6guo1xRSTJWwpsq1kYkB+1WvY/ZL5geJT1g+7bczsc6ikkmggBt5a64RbGyGG
CLkBvCuWtF/g+QQyEgXMj7nUzIaCghydcfc7uaYKtL/sxHtQatlvsiOMeTeX/f4J
DVF1DGgs+F6ZeU26yEerh8Q/whRyCu7nTOqb5EGuUA+a
-----END CERTIFICATE-----
Generated at Mon Jan 19 10:55:57 2026 by rpki-client