This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/c-F2WweblFyg_d0Om77N1Fz0NhA.roa
File:                     c-F2WweblFyg_d0Om77N1Fz0NhA.roa (raw, json)
Hash identifier:          mryNxcdYvyAitDSF01ejR87XOcQtMw80tZRZ9uD4xtE=
Subject key identifier:   73:E1:76:5B:07:9B:94:5C:A0:FD:DD:0E:9B:BE:CD:D4:5C:F4:36:10
Certificate issuer:       /CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
Certificate serial:       019B7F814BF7A9714314C0967FCEA64DB400
Authority key identifier: 1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/c-F2WweblFyg_d0Om77N1Fz0NhA.roa
Signing time:             Fri 02 Jan 2026 16:18:58 +0000
ROA not before:           Fri 02 Jan 2026 16:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28919
IP address blocks:        77.223.0.0/22 maxlen: 24
                          80.93.32.0/20 maxlen: 24
                          86.111.56.0/22 maxlen: 24
                          89.41.128.0/21 maxlen: 24
                          94.24.56.0/21 maxlen: 24
                          185.66.48.0/22 maxlen: 24
                          185.163.144.0/22 maxlen: 24
                          185.164.112.0/22 maxlen: 24
                          213.182.224.0/19 maxlen: 24
                          2a03:c680::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:81:4b:f7:a9:71:43:14:c0:96:7f:ce:a6:4d:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d0672c99f87f05cd83f0b627d31871fe80be01f
        Validity
            Not Before: Jan  2 16:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=73e1765b079b945ca0fddd0e9bbecdd45cf43610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f1:55:d8:50:41:66:5f:9d:cf:c7:9b:87:1a:
                    2e:86:80:d4:d3:2a:b3:c9:7a:8c:fb:04:a9:30:5d:
                    62:94:22:bc:18:4a:c8:14:e4:51:c2:fa:83:dc:59:
                    a6:b7:0d:b3:9f:fd:65:21:05:26:e4:fc:14:49:e6:
                    23:46:83:7c:69:16:b8:27:a6:56:c8:fc:68:68:1b:
                    b1:a1:23:4a:c3:0d:8c:e9:b6:9b:ee:39:21:67:ef:
                    a6:4c:a6:06:c2:3b:54:b6:b4:b2:6c:4d:02:25:5e:
                    5b:aa:da:dc:27:21:46:0d:64:b4:aa:a0:fb:19:d9:
                    79:ab:54:6a:f0:21:ca:72:28:a0:6c:34:d7:02:38:
                    64:c0:dd:b2:b7:76:79:0c:be:31:9e:e4:64:a0:dd:
                    a0:cb:60:49:5e:06:ee:54:35:34:a1:84:e7:87:24:
                    16:1f:1f:c5:f6:e8:41:b2:3f:d1:56:37:a8:82:0c:
                    7e:1c:e5:42:ad:86:2b:dc:9c:f3:89:d6:69:df:0a:
                    13:de:d0:fd:20:33:9f:eb:c8:54:a5:d0:74:68:b2:
                    dc:d5:d3:d5:1a:eb:58:80:9e:46:9c:bd:f8:e2:e5:
                    eb:02:0d:42:b6:0c:bb:ed:a7:a1:eb:c9:38:97:d3:
                    43:6b:f9:74:12:e4:cc:2a:46:28:76:dd:c9:b6:ad:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:76:5B:07:9B:94:5C:A0:FD:DD:0E:9B:BE:CD:D4:5C:F4:36:10
            X509v3 Authority Key Identifier:
                keyid:1D:06:72:C9:9F:87:F0:5C:D8:3F:0B:62:7D:31:87:1F:E8:0B:E0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQZyyZ-H8FzYPwtifTGHH-gL4B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/c-F2WweblFyg_d0Om77N1Fz0NhA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e4f08-6730-4051-9792-494f4c4da426/1/HQZyyZ-H8FzYPwtifTGHH-gL4B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.223.0.0/22
                  80.93.32.0/20
                  86.111.56.0/22
                  89.41.128.0/21
                  94.24.56.0/21
                  185.66.48.0/22
                  185.163.144.0/22
                  185.164.112.0/22
                  213.182.224.0/19
                IPv6:
                  2a03:c680::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:33:a4:30:d9:65:7c:8e:d3:f7:27:08:6a:a1:a3:b8:42:af:
         29:a3:4c:a4:cf:9f:22:a6:ef:a8:66:81:35:24:c0:05:ef:52:
         5e:03:f8:65:f5:57:fb:fb:b5:81:69:f9:91:c4:14:fa:1a:a0:
         3c:87:48:a7:1b:ae:ed:dc:52:08:a6:07:07:d4:b8:c4:49:d0:
         65:c4:af:4c:ca:f3:fa:d7:e8:87:2c:9f:0c:38:5b:6e:b3:4e:
         27:5d:35:d8:33:02:de:d8:b0:e1:8f:65:32:32:79:b5:6a:d1:
         bd:78:af:a2:7f:f7:fe:9b:7f:59:2f:ce:1d:9c:d5:f9:08:b7:
         c9:e2:a0:08:d6:98:5e:8f:e4:03:8b:1f:af:e7:ad:e8:44:64:
         be:85:31:8d:32:eb:35:9b:64:78:18:c9:bd:5d:d8:6c:0f:cf:
         b7:14:d5:ce:e1:2f:ba:2d:2a:bd:54:6b:9f:a5:36:df:09:ca:
         f6:bb:0c:f5:e1:d0:e4:0e:1c:f3:57:d2:4b:31:53:45:f8:0d:
         e5:fc:0e:b7:53:58:b5:c4:c8:f5:7c:7a:a7:a8:17:78:f9:31:
         e8:52:a0:f6:1b:11:67:3d:7e:4b:04:b7:d4:6a:e7:45:97:5d:
         8e:de:a8:2b:4c:41:69:b6:a5:eb:3a:c9:f5:93:2c:01:2a:d0:
         70:e0:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:28 2026 by rpki-client