This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa
File:                     gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa (raw, json)
Hash identifier:          /3JebFmLKobYKFETqDIlb43OxSa7E2ofJHi6zZ1wGnw=
Subject key identifier:   80:8E:F0:75:57:44:BA:3B:DD:F5:52:C5:E1:8D:1D:D9:8C:71:5D:54
Certificate issuer:       /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial:       019B7AC90B931EA5BAAAA9699DFDF817FED7
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa
Signing time:             Thu 01 Jan 2026 18:19:14 +0000
ROA not before:           Thu 01 Jan 2026 18:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199803
IP address blocks:        185.45.200.0/22 maxlen: 22
                          2a01:7fe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:0b:93:1e:a5:ba:aa:a9:69:9d:fd:f8:17:fe:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
        Validity
            Not Before: Jan  1 18:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=808ef0755744ba3bddf552c5e18d1dd98c715d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3e:e8:8d:2f:da:a1:0d:ec:a6:db:33:81:f5:
                    71:86:a2:1f:b9:90:fe:7a:98:08:e5:ae:3c:c6:29:
                    6c:36:8f:de:5c:39:df:3e:a6:c8:e5:68:6f:7b:d9:
                    7c:83:74:2b:48:d2:e1:47:9d:90:64:c7:7f:47:17:
                    cb:b2:8a:c3:35:9d:17:60:3a:2f:ce:bb:91:db:03:
                    9c:c0:8a:5e:33:85:7e:d5:1a:f7:db:06:34:2d:ec:
                    80:4b:78:b2:c1:b2:e1:98:81:22:f3:47:fd:fc:da:
                    9d:6e:f5:74:e5:a2:24:4e:03:9e:f3:99:8d:74:a7:
                    07:c4:91:47:37:ab:30:4b:a3:5d:b0:c0:df:e3:46:
                    8d:bc:20:9b:7b:fb:bf:50:11:f6:40:de:35:62:f9:
                    a7:68:86:ef:6c:4a:d7:13:36:99:e4:5b:cc:e2:6c:
                    2a:ae:c4:ef:fe:01:7d:d3:13:18:cb:6a:a0:f1:5f:
                    0e:04:08:1a:56:0c:ca:5a:6e:48:91:91:29:73:13:
                    f1:ea:7e:f5:e2:83:22:a6:ff:e3:4d:8c:43:41:9e:
                    f1:6f:89:a1:c7:52:ea:f7:b4:2b:24:f6:29:f8:4c:
                    cf:04:57:b3:a7:14:b4:b6:fa:ee:bb:87:cc:84:7f:
                    ec:eb:cf:09:82:d3:30:22:f7:47:d7:66:b2:c8:2b:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:F0:75:57:44:BA:3B:DD:F5:52:C5:E1:8D:1D:D9:8C:71:5D:54
            X509v3 Authority Key Identifier:
                keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.45.200.0/22
                IPv6:
                  2a01:7fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:92:ea:68:6e:d1:d7:a5:bc:4b:27:39:fe:16:64:94:60:de:
         51:cf:42:cf:d2:ce:b9:9c:59:0d:b8:fd:a5:55:c8:42:59:38:
         6a:73:16:6e:3b:37:b6:7d:70:95:63:af:02:7e:a8:b7:3e:c2:
         21:d3:b4:6b:ae:d8:8b:24:fe:08:a8:a5:84:1a:42:6c:d7:d7:
         48:98:39:8f:51:7a:e2:76:5c:e3:8b:c0:dd:ab:49:79:19:ef:
         84:ae:f7:cf:af:a4:a3:14:8e:ad:17:c0:94:64:78:2b:a1:30:
         8b:36:17:7a:81:1b:fa:b0:d2:14:90:38:cd:0e:1a:0e:37:e1:
         4c:9d:8b:cf:91:3c:99:c0:ec:24:36:79:af:b5:4a:b9:17:ee:
         18:76:67:ef:de:f5:82:7e:96:62:33:61:42:f0:02:ca:02:b3:
         4e:47:e7:44:15:60:7e:2d:4f:6c:6f:43:ca:9d:77:f2:cd:1e:
         9f:d0:75:ec:79:4a:f7:c4:5b:47:88:61:33:48:8a:ac:96:50:
         a6:b9:fc:3d:ae:87:17:7c:53:33:32:ef:a9:f6:5b:ac:7d:c2:
         08:3c:1d:b2:87:52:d5:b8:b0:c4:4b:f1:a1:d6:bb:3a:09:48:
         65:f0:94:62:a7:e6:57:c8:77:15:41:eb:a6:cc:f6:c0:2b:4d:
         e7:13:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:26 2026 by rpki-client