This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/7eeo5JU3juiQ8OvLCUlUNcZKztE.roa
File:                     7eeo5JU3juiQ8OvLCUlUNcZKztE.roa (raw, json)
Hash identifier:          JrzW0ZclqW95xnASoAIpiYFf6Rp0SBoASsXXNEQq9kc=
Subject key identifier:   ED:E7:A8:E4:95:37:8E:E8:90:F0:EB:CB:09:49:54:35:C6:4A:CE:D1
Certificate issuer:       /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial:       019B7AC93124B0EFD1999A812C5F13E4D139
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/7eeo5JU3juiQ8OvLCUlUNcZKztE.roa
Signing time:             Thu 01 Jan 2026 18:19:24 +0000
ROA not before:           Thu 01 Jan 2026 18:19:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24660
IP address blocks:        91.195.44.0/23 maxlen: 23
                          2001:67c:17a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:31:24:b0:ef:d1:99:9a:81:2c:5f:13:e4:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
        Validity
            Not Before: Jan  1 18:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ede7a8e495378ee890f0ebcb09495435c64aced1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:b4:60:94:3b:df:21:b9:dd:59:35:0e:f8:
                    1a:48:29:94:ac:66:49:15:9f:91:a6:2a:98:d2:06:
                    ae:0e:10:c9:e7:04:f5:67:2f:0e:3c:b0:2b:f3:ac:
                    bd:66:56:d6:06:8a:aa:fc:ef:3e:c8:c9:ef:55:18:
                    42:a6:88:3c:b9:fb:94:4d:67:e7:fa:58:42:14:6f:
                    05:11:5b:b9:6f:79:9f:ee:53:65:8b:fc:43:30:19:
                    a5:93:8c:1e:87:f9:8c:d1:c9:24:bf:01:73:23:f1:
                    0f:bd:6c:94:83:75:01:dc:79:d2:9b:b2:18:5c:65:
                    a8:00:5e:af:b3:d1:9c:49:25:db:68:08:00:95:bc:
                    cb:5a:83:65:7a:f6:ff:d3:46:96:bb:6c:37:72:ca:
                    9e:96:66:24:d7:2d:77:4a:41:b2:37:96:71:38:8f:
                    40:c5:32:c2:28:cd:90:35:fc:00:6a:f3:d1:7b:d6:
                    57:5c:cf:92:6b:a0:4d:09:11:4e:8e:31:32:5d:a4:
                    48:63:57:33:a4:75:8f:84:61:43:06:77:f5:64:b8:
                    5b:e7:68:70:70:e9:9d:2c:94:99:1f:eb:79:b0:4b:
                    a7:88:82:7a:92:56:00:08:5a:bb:08:fe:67:a3:b0:
                    34:11:c9:83:3d:9d:bb:f5:9f:7d:30:cb:bf:43:fd:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E7:A8:E4:95:37:8E:E8:90:F0:EB:CB:09:49:54:35:C6:4A:CE:D1
            X509v3 Authority Key Identifier:
                keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/7eeo5JU3juiQ8OvLCUlUNcZKztE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.195.44.0/23
                IPv6:
                  2001:67c:17a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:0c:df:87:90:fb:4f:5b:a3:a6:f3:d1:38:47:e7:fe:32:b7:
         42:f4:35:e7:4a:18:05:4d:12:22:51:89:4b:ca:dd:d7:2a:49:
         54:47:50:3e:4c:3c:bb:84:f1:fa:3c:c8:c2:ac:77:c2:33:e3:
         46:4f:79:e3:1d:ee:88:5b:fe:79:bf:9a:03:0c:b5:a4:31:10:
         cc:f6:88:8e:0b:56:1c:ad:83:01:50:89:3f:d3:fb:0b:60:1a:
         c4:a8:c9:50:84:6d:db:44:85:e0:eb:a6:57:8d:3c:9c:0b:ab:
         7f:06:3a:e4:33:07:43:bf:99:6b:05:1b:ee:c8:9a:59:eb:a2:
         28:da:e1:76:eb:0b:60:c1:2f:81:9a:01:9c:bb:a6:b0:fc:36:
         80:68:58:c6:a8:11:d8:a1:3b:fb:c3:8c:ec:29:66:07:95:57:
         b2:b5:98:c3:d8:64:08:b9:d1:b7:fa:52:27:0b:fc:c1:9f:a2:
         5a:29:b8:9c:5d:58:70:d9:dc:53:fc:42:9d:1d:a0:3b:f4:4b:
         a9:b7:e3:0c:8d:b1:19:88:3f:fa:63:86:5a:15:4e:95:66:27:
         30:3c:46:56:61:f2:46:4e:32:1b:02:8b:5f:8a:52:73:2f:b6:
         2c:bd:8d:4d:84:9e:fd:d7:ff:15:f5:1b:40:a0:6a:74:74:0c:
         da:f2:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:28 2026 by rpki-client