This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/f0s7xhIX_ZdEnF7QAqySJk-x7jg.roa
File:                     f0s7xhIX_ZdEnF7QAqySJk-x7jg.roa (raw, json)
Hash identifier:          tOKvjfGqdLOFIsW8qfkzXlM9iNHN9+R4+1GbfNoAQow=
Subject key identifier:   7F:4B:3B:C6:12:17:FD:97:44:9C:5E:D0:02:AC:92:26:4F:B1:EE:38
Certificate issuer:       /CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
Certificate serial:       019B7BA375CCD269E87387EB654258651B86
Authority key identifier: 87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/f0s7xhIX_ZdEnF7QAqySJk-x7jg.roa
Signing time:             Thu 01 Jan 2026 22:17:48 +0000
ROA not before:           Thu 01 Jan 2026 22:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210964
IP address blocks:        194.150.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:75:cc:d2:69:e8:73:87:eb:65:42:58:65:1b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f1cac0de8f66a7076f2810f3f3518aa70643ba
        Validity
            Not Before: Jan  1 22:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f4b3bc61217fd97449c5ed002ac92264fb1ee38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:ee:ec:cb:c3:35:8c:3f:34:08:2f:ee:0a:
                    e2:c4:35:9f:ca:7f:70:6a:45:cd:6a:fb:54:e4:0b:
                    0c:a9:28:67:71:4c:3a:5b:19:9d:59:a7:d0:16:91:
                    de:4f:ae:44:a8:26:94:21:5a:eb:12:df:6e:58:db:
                    a1:11:c6:7a:31:d4:fd:cb:fa:38:88:42:e0:40:f5:
                    d5:69:7c:bf:30:e0:bb:75:d5:f9:33:b3:2e:28:91:
                    b7:c7:b3:8e:db:4d:82:6f:4b:3c:20:37:9a:36:0b:
                    b0:f2:aa:54:3a:8a:b7:de:d4:61:24:5d:42:dd:99:
                    b9:db:85:58:9a:f1:78:d6:9f:ca:69:09:2d:0e:55:
                    f1:a2:d2:b6:e7:55:97:75:93:17:d9:8c:04:e7:97:
                    2f:83:f5:76:7f:5e:6c:f1:d6:aa:8a:8d:5e:e1:ad:
                    42:db:97:85:83:ed:e3:10:a6:2f:e9:f8:85:be:4f:
                    47:98:3b:0d:05:8f:4f:5c:3f:b7:75:ea:ac:ca:c6:
                    38:47:9f:c9:5b:12:77:e5:bc:77:9c:e5:b3:57:52:
                    7f:f9:94:5c:b9:67:91:2e:89:89:46:ae:4c:82:77:
                    d7:da:0c:0d:9a:70:04:85:25:50:89:ca:c1:d2:4c:
                    0a:55:1a:72:12:38:dc:08:53:07:a7:5f:18:21:20:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4B:3B:C6:12:17:FD:97:44:9C:5E:D0:02:AC:92:26:4F:B1:EE:38
            X509v3 Authority Key Identifier:
                keyid:87:F1:CA:C0:DE:8F:66:A7:07:6F:28:10:F3:F3:51:8A:A7:06:43:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/f0s7xhIX_ZdEnF7QAqySJk-x7jg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f6b1b9-9ed6-4af2-a73b-f8874a6bad38/1/h_HKwN6PZqcHbygQ8_NRiqcGQ7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:33:84:27:e6:d2:34:19:ff:a3:d1:f8:9a:f7:56:b6:72:8a:
         37:44:77:13:0a:77:cf:c4:1d:ea:ea:be:10:4c:81:b2:98:25:
         9a:23:2a:58:1a:f7:e0:51:19:54:47:be:86:a5:47:29:6f:e8:
         b4:1f:98:26:dc:49:37:12:05:86:8c:dd:51:04:c8:0b:7c:e9:
         1d:ef:f1:c6:e4:d7:ec:3c:71:68:7a:9a:66:07:72:83:5b:ff:
         4a:9e:1e:7e:8c:cb:b5:6c:af:9a:f2:bd:d9:a4:7b:d7:df:8b:
         d5:b6:85:8c:be:db:bf:68:a5:db:93:8f:4e:c4:f4:81:85:c3:
         2e:6c:87:fe:5a:d0:3d:f0:bd:30:dd:2d:99:98:63:e5:4f:01:
         52:06:3e:be:0f:3b:04:1a:5f:25:a5:c2:c1:da:54:79:e7:20:
         a9:16:b8:d6:4c:46:90:15:54:e2:3e:ba:08:29:68:0f:cb:fe:
         b8:b0:6d:47:73:92:ca:bf:0f:53:60:48:4d:7a:73:bc:9f:fa:
         42:51:28:25:5b:ba:90:4b:d5:6b:b7:fd:5d:a2:f1:29:8b:59:
         d0:39:5b:64:4b:df:ad:f0:ff:e1:b1:fd:d1:89:44:02:6a:19:
         19:0a:d3:6d:7e:1e:af:71:3a:57:19:0f:da:83:8c:b9:ae:a0:
         8c:4c:50:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o3XM0mnoc4frZUJYZRuGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjFjYWMwZGU4ZjY2YTcwNzZmMjgxMGYzZjM1MThhYTcw
NjQzYmEwHhcNMjYwMTAxMjIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjRiM2JjNjEyMTdmZDk3NDQ5YzVlZDAwMmFjOTIyNjRmYjFlZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslHu7MvDNYw/NAgv7grixDWfyn9w
akXNavtU5AsMqShncUw6WxmdWafQFpHeT65EqCaUIVrrEt9uWNuhEcZ6MdT9y/o4
iELgQPXVaXy/MOC7ddX5M7MuKJG3x7OO202Cb0s8IDeaNguw8qpUOoq33tRhJF1C
3Zm524VYmvF41p/KaQktDlXxotK251WXdZMX2YwE55cvg/V2f15s8daqio1e4a1C
25eFg+3jEKYv6fiFvk9HmDsNBY9PXD+3deqsysY4R5/JWxJ35bx3nOWzV1J/+ZRc
uWeRLomJRq5MgnfX2gwNmnAEhSVQicrB0kwKVRpyEjjcCFMHp18YISD55wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9LO8YSF/2XRJxe0AKskiZPse44MB8GA1UdIwQY
MBaAFIfxysDej2anB28oEPPzUYqnBkO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9IS3dONlBacWNIYnlnUThfTlJpcWNHUTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNmIxYjktOWVkNi00YWYyLWE3M2It
Zjg4NzRhNmJhZDM4LzEvZjBzN3hoSVhfWmRFbkY3UUFxeVNKay14N2pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNmIxYjktOWVkNi00YWYyLWE3M2ItZjg4NzRhNmJhZDM4
LzEvaF9IS3dONlBacWNIYnlnUThfTlJpcWNHUTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpZOMA0G
CSqGSIb3DQEBCwUAA4IBAQATM4Qn5tI0Gf+j0fia91a2coo3RHcTCnfPxB3q6r4Q
TIGymCWaIypYGvfgURlUR76GpUcpb+i0H5gm3Ek3EgWGjN1RBMgLfOkd7/HG5Nfs
PHFoeppmB3KDW/9Knh5+jMu1bK+a8r3ZpHvX34vVtoWMvtu/aKXbk49OxPSBhcMu
bIf+WtA98L0w3S2ZmGPlTwFSBj6+DzsEGl8lpcLB2lR55yCpFrjWTEaQFVTiProI
KWgPy/64sG1Hc5LKvw9TYEhNenO8n/pCUSglW7qQS9Vrt/1dovEpi1nQOVtkS9+t
8P/hsf3RiUQCahkZCtNtfh6vcTpXGQ/ag4y5rqCMTFBu
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:32 2026 by rpki-client