This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/75s-ByXhLvXCyZa2XbqfAvH6Epk.roa
File:                     75s-ByXhLvXCyZa2XbqfAvH6Epk.roa (raw, json)
Hash identifier:          IX8EC7yBzBqlbwdtd9sbWgqtYLmPYcgtwLxVHX+Gxtw=
Subject key identifier:   EF:9B:3E:07:25:E1:2E:F5:C2:C9:96:B6:5D:BA:9F:02:F1:FA:12:99
Certificate issuer:       /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial:       019B7BA31B75B16E02563949503D63BFC5F5
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/75s-ByXhLvXCyZa2XbqfAvH6Epk.roa
Signing time:             Thu 01 Jan 2026 22:17:25 +0000
ROA not before:           Thu 01 Jan 2026 22:17:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210930
IP address blocks:        2a10:9903:501::/48 maxlen: 48
                          2a10:9903:511::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:1b:75:b1:6e:02:56:39:49:50:3d:63:bf:c5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
        Validity
            Not Before: Jan  1 22:17:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef9b3e0725e12ef5c2c996b65dba9f02f1fa1299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:7f:fa:f1:62:d8:07:8e:f4:69:47:cd:38:
                    c2:81:9f:af:ee:00:77:c1:41:b0:cf:f4:42:e2:d5:
                    2a:af:b4:95:61:8b:79:c6:74:43:b1:8f:bc:13:ca:
                    c4:e2:1d:88:e1:c2:dd:17:36:2b:56:15:ae:50:04:
                    d8:47:33:2e:d5:44:b7:38:90:28:bb:d3:96:83:51:
                    ad:a8:94:e0:ca:02:f5:21:16:dc:59:8a:18:d4:9f:
                    30:7b:df:d6:46:3e:db:48:fa:74:b6:24:c5:18:c7:
                    59:c9:88:25:57:da:ce:e5:2f:56:7b:ab:91:7d:2c:
                    5c:e3:49:2a:54:c4:ee:eb:e4:2c:8a:b8:dd:af:01:
                    c7:a7:95:0e:00:70:9c:5b:b5:60:25:3f:f9:5f:91:
                    26:11:e1:aa:20:fb:3e:45:09:7b:44:5a:8f:63:df:
                    85:0e:a5:a1:28:d3:77:89:8c:a6:52:72:fd:e3:29:
                    47:2e:79:6a:86:80:82:89:52:7b:5c:12:a1:a2:a9:
                    6a:0c:b0:ea:cf:aa:1e:6c:d6:a3:80:ae:15:fd:ce:
                    f8:72:73:a6:ea:e3:3c:77:bb:96:78:c4:12:94:80:
                    0a:13:ca:be:2b:f7:e4:13:e7:36:89:ca:57:f0:d4:
                    bf:05:c4:10:78:ad:2a:0e:26:be:ac:1f:2e:9d:5d:
                    a6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9B:3E:07:25:E1:2E:F5:C2:C9:96:B6:5D:BA:9F:02:F1:FA:12:99
            X509v3 Authority Key Identifier:
                keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/75s-ByXhLvXCyZa2XbqfAvH6Epk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:9903:501::/48
                  2a10:9903:511::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:b6:09:09:f7:58:76:c4:bd:95:d4:25:5a:c0:85:a0:c3:14:
         1b:51:58:39:20:9d:12:73:51:ba:97:cc:5c:6a:a3:5b:06:b7:
         04:a4:86:ab:91:7f:96:29:4e:c2:20:e9:fe:b1:b1:8c:f5:85:
         33:7d:ea:71:6f:e0:97:c8:3d:21:4e:3d:0b:60:9a:bd:8b:d8:
         5c:dc:0d:61:0e:50:60:76:23:24:b2:da:14:ed:c4:f9:65:ea:
         cb:c5:93:a5:74:e4:6d:fc:44:e8:3d:9c:0f:bf:86:26:2f:8a:
         2a:70:dc:bb:d3:60:9d:a8:06:ea:9d:b5:ae:a6:85:b5:d9:0d:
         13:68:7f:08:7b:e2:7e:d8:8c:1b:ca:df:7e:60:75:f1:10:64:
         75:ad:da:0e:0e:08:68:95:66:71:a0:f5:a7:f6:84:9d:be:09:
         69:a9:f3:6e:58:f7:6c:16:cd:b1:87:bc:43:41:ff:bd:14:81:
         be:99:07:f1:df:77:bc:74:d7:45:51:d1:80:fc:72:b8:2b:b7:
         e0:19:81:34:ab:b0:b2:75:be:ce:f6:d5:c8:56:db:54:dd:10:
         eb:97:79:fa:a0:59:2e:1a:56:14:8e:61:e5:4b:27:89:b6:5e:
         0a:0c:23:1a:98:e7:03:51:1e:25:e1:06:38:3e:18:cf:80:0c:
         61:dd:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:21:50 2026 by rpki-client