This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/a_eFz3kNbw6MGzajABk4dEXgc9s.roa
File:                     a_eFz3kNbw6MGzajABk4dEXgc9s.roa (raw, json)
Hash identifier:          Zg2MKZuxwUt+pP7f+iON7A91n7fBHXhnm1qiKX03pFQ=
Subject key identifier:   6B:F7:85:CF:79:0D:6F:0E:8C:1B:36:A3:00:19:38:74:45:E0:73:DB
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B3592BFC22EB718BE0765B973D65EDA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/a_eFz3kNbw6MGzajABk4dEXgc9s.roa
Signing time:             Thu 01 Jan 2026 20:17:47 +0000
ROA not before:           Thu 01 Jan 2026 20:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209874
IP address blocks:        194.62.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:92:bf:c2:2e:b7:18:be:07:65:b9:73:d6:5e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6bf785cf790d6f0e8c1b36a30019387445e073db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:57:3e:03:b3:18:73:0e:09:e5:ca:15:7d:
                    ab:fa:ae:cf:b9:43:bf:97:32:0d:89:82:b2:aa:1f:
                    e6:20:c1:5b:3d:6b:64:dd:62:6c:43:74:0b:43:d4:
                    84:2b:da:b1:f9:db:e5:0f:91:e0:44:f2:9b:df:ed:
                    76:99:26:56:b8:67:48:02:82:29:9f:36:53:60:26:
                    9c:af:4e:4f:c5:51:14:83:69:b4:e5:64:b1:50:64:
                    68:bb:3b:20:65:b4:42:9b:1a:51:b0:c1:af:f2:98:
                    f0:5b:cd:e3:eb:bc:a4:38:00:d5:bd:3c:f0:ab:32:
                    1b:2e:b5:2b:fc:40:35:1c:b2:e5:d1:e7:83:f3:0c:
                    cb:17:1d:85:54:94:97:1a:bd:30:66:4c:8b:57:b5:
                    9c:b4:68:5d:84:24:a0:f4:5a:a2:73:42:42:78:f9:
                    6f:1d:4f:92:be:7c:da:f5:ff:93:8d:93:65:eb:dc:
                    1b:12:41:c7:70:33:aa:2f:84:49:b0:68:ba:f4:6e:
                    7e:54:c2:a9:50:44:3c:83:b7:97:27:a6:f8:64:77:
                    7d:21:81:96:32:a1:6d:ae:3f:6b:92:26:40:2e:99:
                    2b:46:3a:bd:3a:fb:db:13:0e:d4:77:cc:98:3e:c5:
                    d4:c6:27:61:ad:70:66:70:71:a5:8a:35:d0:6e:49:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F7:85:CF:79:0D:6F:0E:8C:1B:36:A3:00:19:38:74:45:E0:73:DB
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/a_eFz3kNbw6MGzajABk4dEXgc9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:f3:ee:fa:c0:39:60:c5:e4:d2:65:94:de:11:51:6b:3d:8b:
         2f:f8:6b:49:74:45:a9:66:bc:81:4a:a3:9c:c7:99:c1:b7:ad:
         5d:e5:84:b6:39:ab:ff:fe:4e:ea:88:8c:a0:7c:0f:15:70:ec:
         04:0e:14:9f:a7:a4:c3:a2:8f:60:3f:e8:72:2e:de:a7:80:5a:
         28:dc:5d:22:9e:68:2b:8f:d2:66:94:13:59:82:0c:e8:3c:57:
         8f:e0:71:2d:b0:d8:f7:15:05:2d:86:f1:61:52:69:95:2f:ee:
         c7:39:ab:40:59:f7:d2:18:c0:4b:2a:76:aa:6d:83:58:f1:b4:
         28:ef:67:bd:1d:e8:14:ba:f1:72:c4:c6:0b:30:3f:ec:3a:9d:
         97:15:60:2b:41:1a:70:a5:bb:e0:7b:db:d5:5f:08:31:27:83:
         ce:8d:04:7c:6c:86:89:b8:f4:f8:fc:7f:49:b1:84:7a:fc:00:
         b9:39:09:d1:95:95:fe:28:1a:46:5d:17:30:57:87:2e:be:4a:
         9b:4e:89:28:3b:13:de:be:d7:90:13:64:e0:25:51:ff:4e:2f:
         06:40:6a:3d:57:62:3e:4a:8e:39:db:ab:5f:35:8d:7f:c8:9d:
         de:e2:75:e4:18:14:01:4f:9c:de:93:9c:ec:c3:16:29:b7:61:
         fa:f7:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:53 2026 by rpki-client