This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/R7QMGmuA2wDaBVvULaWvGaz5Evg.roa
File:                     R7QMGmuA2wDaBVvULaWvGaz5Evg.roa (raw, json)
Hash identifier:          fySPMSDcnymZQ851W9mCK2einppIFGfSXw6lDW7Rxuo=
Subject key identifier:   47:B4:0C:1A:6B:80:DB:00:DA:05:5B:D4:2D:A5:AF:19:AC:F9:12:F8
Certificate issuer:       /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial:       019B7A5B715B67E1C7ABD8B5F79A7B44EB77
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/R7QMGmuA2wDaBVvULaWvGaz5Evg.roa
Signing time:             Thu 01 Jan 2026 16:19:31 +0000
ROA not before:           Thu 01 Jan 2026 16:19:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8368
IP address blocks:        45.149.96.0/22 maxlen: 24
                          91.212.215.0/24 maxlen: 24
                          91.236.192.0/24 maxlen: 24
                          95.36.80.0/20 maxlen: 24
                          212.85.56.0/21 maxlen: 24
                          217.18.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:71:5b:67:e1:c7:ab:d8:b5:f7:9a:7b:44:eb:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
        Validity
            Not Before: Jan  1 16:19:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47b40c1a6b80db00da055bd42da5af19acf912f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:b2:87:ca:d1:65:21:64:99:c5:1a:dd:77:
                    55:00:c4:4d:69:83:8d:c3:55:92:3d:6b:36:f2:88:
                    0c:f6:07:ed:71:87:4e:69:cf:7d:bc:81:af:96:93:
                    d6:25:cf:2c:b8:0b:cf:ca:a2:75:32:7d:b6:89:81:
                    0c:6b:d7:11:e0:8c:2f:7c:4d:c1:2d:fe:6c:e6:9e:
                    af:ba:5b:97:a9:3a:61:6d:d6:3d:a6:de:0c:ff:cc:
                    1b:66:d7:85:aa:2c:08:59:35:d1:ae:6e:79:51:0e:
                    ba:f0:8a:1b:3e:a7:2b:e5:02:46:27:b5:20:ce:b6:
                    06:d3:d0:5b:30:4f:d7:6b:98:72:ed:8b:14:73:9f:
                    48:50:c3:da:08:82:eb:2f:a8:62:4e:d7:47:44:3c:
                    1e:f1:94:4e:26:47:74:9a:52:88:dc:cd:12:e9:6a:
                    8c:ce:0d:3f:9a:01:b9:09:20:ff:d3:9e:59:b3:79:
                    4c:dd:22:8a:e6:9c:0c:c7:e8:f9:d7:84:a2:6f:a2:
                    f4:6e:e9:28:db:08:0f:d8:53:91:93:9a:ce:91:4e:
                    4a:ee:bb:d6:64:07:37:8f:07:22:d7:b9:e0:29:0e:
                    db:ae:b5:95:23:1b:3f:f8:f4:71:13:57:eb:08:45:
                    ce:e3:5a:01:3c:4d:15:66:52:3b:d8:68:8f:c6:df:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B4:0C:1A:6B:80:DB:00:DA:05:5B:D4:2D:A5:AF:19:AC:F9:12:F8
            X509v3 Authority Key Identifier:
                keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/R7QMGmuA2wDaBVvULaWvGaz5Evg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.96.0/22
                  91.212.215.0/24
                  91.236.192.0/24
                  95.36.80.0/20
                  212.85.56.0/21
                  217.18.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:eb:1b:18:e3:8b:a3:3c:71:80:73:ab:7f:8d:48:0b:2c:78:
         05:41:57:ed:97:91:35:34:17:92:12:3d:50:c0:2a:0d:15:6c:
         f6:86:40:71:d8:7f:17:ee:f1:0f:2c:d2:9f:46:e8:0f:9a:74:
         ce:05:34:fe:0d:86:50:d5:bf:f4:c5:0f:42:a2:bf:cb:fd:4a:
         5f:8e:74:ef:ca:49:a4:1d:74:01:8c:19:f5:25:26:85:98:45:
         72:89:97:bb:43:ec:c1:71:ee:18:f6:82:b9:7f:60:1c:64:d2:
         dc:17:3c:2c:bb:1b:63:58:da:7f:4c:ee:93:fd:71:0e:cb:cf:
         30:e5:3d:6b:25:d2:fc:69:3c:7a:0c:e2:bd:9b:71:7a:64:23:
         9c:b6:a8:ab:53:10:a3:6a:d3:39:94:34:88:f0:8d:f2:1d:78:
         22:31:00:91:35:7e:48:d4:d7:96:06:2e:f1:1f:99:e0:45:35:
         39:bd:f8:12:53:ac:c4:c0:4e:52:b4:d6:95:00:89:58:31:61:
         de:36:2b:3e:49:6a:85:08:82:23:f7:89:83:37:27:ac:28:53:
         6e:62:4e:fe:2b:21:7f:30:80:0b:70:36:20:c9:f2:28:83:57:
         fd:f7:fa:ab:e9:f2:ff:80:26:5b:ab:c6:40:87:db:27:8e:5f:
         4b:55:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:11 2026 by rpki-client