This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/7873A-doZHT3z3WdUC9-3ek1dsM.roa
File:                     7873A-doZHT3z3WdUC9-3ek1dsM.roa (raw, json)
Hash identifier:          GiS1ksDLyImHjpb2W7ngtoEXY3bCfhYHNgRK23R2O8Q=
Subject key identifier:   EF:CE:F7:03:E7:68:64:74:F7:CF:75:9D:50:2F:7E:DD:E9:35:76:C3
Certificate issuer:       /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial:       019B76EB129B557C3879846F79BA68D2EEDC
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/7873A-doZHT3z3WdUC9-3ek1dsM.roa
Signing time:             Thu 01 Jan 2026 00:17:55 +0000
ROA not before:           Thu 01 Jan 2026 00:17:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201241
IP address blocks:        185.235.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:12:9b:55:7c:38:79:84:6f:79:ba:68:d2:ee:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
        Validity
            Not Before: Jan  1 00:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efcef703e7686474f7cf759d502f7edde93576c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:57:dd:2f:e8:5d:fe:df:fb:fd:55:8f:13:3d:
                    de:ee:3f:a7:9e:01:46:39:5a:0a:c3:75:b9:e6:2b:
                    fc:d6:1f:33:a0:03:d2:a8:21:8e:bd:43:90:c4:c8:
                    ad:19:d8:df:ef:2f:5d:bf:5d:f4:64:ca:be:df:a5:
                    fd:93:61:c0:46:ab:89:91:01:84:f5:8d:e7:18:7e:
                    0c:4e:a0:7b:0d:e7:cd:9d:05:4d:18:c9:b9:73:a8:
                    97:86:a7:1f:08:67:b5:45:46:a5:0e:64:30:5a:ee:
                    7a:13:de:77:fa:21:37:be:58:70:d8:2e:22:24:52:
                    60:2b:f8:5b:98:80:59:2e:7b:93:33:c2:2e:7c:59:
                    15:31:68:0d:8b:b2:dc:4d:82:b7:a0:7d:bd:7b:54:
                    2e:2c:58:08:3e:64:07:7e:2c:b3:c7:87:04:4d:e0:
                    52:22:f5:a7:36:7d:b6:36:59:3c:99:41:f5:b2:fb:
                    46:36:a0:18:59:bc:18:6a:3f:89:80:e1:07:0d:91:
                    52:87:8e:b7:bc:34:c7:6e:b1:fb:75:c5:16:45:fa:
                    37:92:2f:53:1f:22:a5:95:0b:90:cc:1c:87:57:f2:
                    c7:87:e9:10:8c:9a:1a:b4:6e:0e:b9:56:9d:89:fb:
                    0f:2e:70:b1:1a:39:0b:1e:f1:3c:5b:b7:62:79:27:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:F7:03:E7:68:64:74:F7:CF:75:9D:50:2F:7E:DD:E9:35:76:C3
            X509v3 Authority Key Identifier:
                keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/7873A-doZHT3z3WdUC9-3ek1dsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:17:7c:ed:b4:3d:19:de:43:ed:56:53:74:66:78:56:28:7a:
         4f:90:47:70:77:73:b3:2b:2b:c5:c6:de:5e:32:bb:56:5a:a3:
         35:da:0f:39:3f:f0:6d:32:40:fa:ba:06:aa:77:a2:21:25:9a:
         69:16:11:a9:e0:67:f7:ce:6f:46:98:d3:51:15:ab:33:68:02:
         c2:3e:ed:1a:6f:1c:3d:fb:50:bb:7e:f2:07:88:a9:c4:4c:14:
         86:34:a2:62:d8:c0:b8:82:bf:e6:cc:4d:d1:e9:06:2f:9f:08:
         22:bd:01:f0:d4:6d:b3:a7:51:4e:0b:34:65:ad:9e:28:f6:cd:
         98:34:f4:0b:14:fb:b5:dd:1d:ff:c0:e8:7c:91:ea:46:e9:d2:
         ac:94:7a:05:d4:c3:1c:b1:4d:86:e8:e6:20:8d:87:c8:4e:dc:
         ca:36:0d:4a:b1:f2:7f:ed:3a:a1:d4:32:f6:ba:e7:c1:06:bc:
         e0:15:1c:3c:aa:d6:2f:d1:05:d1:83:37:cb:ab:f3:8e:0c:59:
         3b:1d:aa:00:2f:19:d4:45:55:a9:50:35:ee:8c:94:4c:96:87:
         ab:84:c7:85:d4:c3:45:23:b9:dd:ef:02:a1:b9:cc:28:f6:dc:
         a1:ad:94:8b:eb:79:97:f7:4b:8f:b4:64:82:df:94:81:ea:66:
         64:5b:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:30 2026 by rpki-client