This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/B7H7R5CjB_K85HgVUySutjEx6cQ.roa
File:                     B7H7R5CjB_K85HgVUySutjEx6cQ.roa (raw, json)
Hash identifier:          2i0jflXZbuZAJ4tpvJm10YN75C6ahovwMUSOp8I0pPQ=
Subject key identifier:   07:B1:FB:47:90:A3:07:F2:BC:E4:78:15:53:24:AE:B6:31:31:E9:C4
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B357E83775B4F4ED58660E9F0EF907A
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/B7H7R5CjB_K85HgVUySutjEx6cQ.roa
Signing time:             Thu 01 Jan 2026 20:17:41 +0000
ROA not before:           Thu 01 Jan 2026 20:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56654
IP address blocks:        81.181.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:7e:83:77:5b:4f:4e:d5:86:60:e9:f0:ef:90:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07b1fb4790a307f2bce478155324aeb63131e9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:44:38:3a:50:19:87:c0:01:27:35:77:07:
                    30:50:35:7b:45:1a:da:bf:92:d8:7d:62:63:68:5b:
                    b4:e6:46:b2:c9:74:5f:00:58:07:38:02:f2:f3:62:
                    d1:a3:dd:4c:a8:be:b7:a2:e8:17:91:3a:a2:3e:38:
                    07:fd:b7:32:a8:94:f0:c9:9a:24:f6:eb:d2:41:e6:
                    2c:2f:53:0b:3d:d7:ea:96:5f:7f:78:fe:40:6d:84:
                    76:85:19:12:cd:81:b3:6b:4d:1c:9f:4b:9d:18:5f:
                    2b:fc:20:f8:fe:40:c0:f3:54:fa:86:95:4f:39:9c:
                    c7:c3:1e:ea:8d:5a:24:72:44:b5:83:4e:ad:47:01:
                    04:e4:95:75:d7:a8:7c:6d:34:75:ae:d7:b5:e2:62:
                    f2:e6:09:3e:1b:81:8b:e7:f6:54:9e:8c:ea:aa:d4:
                    20:29:6d:89:b4:fa:e7:bb:e9:f8:66:3c:d2:3a:0b:
                    77:ae:e5:a1:d9:45:1e:7b:6f:77:9d:14:bd:b3:e4:
                    a8:39:45:f0:06:ba:f1:c9:28:80:a9:15:dd:5c:4f:
                    e2:4d:0a:08:b8:c3:3c:f2:bf:af:20:dc:b1:67:2b:
                    0f:b4:b1:de:d4:a5:48:e2:59:10:d7:39:73:52:fb:
                    24:d0:0b:bb:4b:13:d1:47:5c:62:fd:a3:d6:c5:1c:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B1:FB:47:90:A3:07:F2:BC:E4:78:15:53:24:AE:B6:31:31:E9:C4
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/B7H7R5CjB_K85HgVUySutjEx6cQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.181.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:4f:93:95:9e:ac:cc:c3:80:1d:92:1b:b1:e0:ed:25:7a:
         47:45:b4:96:e7:41:16:43:a8:98:d2:4d:60:27:4c:1b:fd:e2:
         94:18:77:08:50:57:6b:8d:d7:97:90:8c:29:fe:2b:66:1a:60:
         5b:7a:d3:63:99:8e:dd:6b:1c:00:c1:b1:bc:12:36:10:a4:b7:
         68:b9:76:97:03:8e:2b:54:7a:9d:dc:7f:9b:1c:26:ba:0b:ff:
         61:9b:09:c7:8a:ae:dd:77:87:cc:e5:42:cf:83:6c:9f:1a:cb:
         eb:00:7a:40:d3:0a:5d:dd:e6:b9:b4:e5:cd:52:5a:0d:96:24:
         38:ff:20:4f:2c:31:8c:dc:e3:b4:d5:f0:d7:e8:9b:7f:81:d5:
         9b:08:97:da:2b:62:47:07:62:f7:f8:fb:01:8b:f9:d0:69:57:
         6c:fc:1b:4b:8a:c4:67:c0:c7:45:8d:7d:9d:fa:02:0d:cb:45:
         01:20:d7:e1:11:d0:13:8b:8a:81:dd:52:32:0b:34:dd:4b:e0:
         c0:df:8b:a4:e7:6b:54:fa:53:ca:0a:5a:c5:4f:16:21:5c:dc:
         c7:08:4d:5b:c4:75:1b:f7:eb:18:3b:22:5e:c8:5a:57:d3:c1:
         58:7f:34:4d:9b:87:01:89:1d:44:81:dc:de:01:02:4d:fd:a3:
         62:08:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:04 2026 by rpki-client