This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/3rus813YuNoFCPm5gVNfCetKB0o.roa
File:                     3rus813YuNoFCPm5gVNfCetKB0o.roa (raw, json)
Hash identifier:          2Psn64fFe1lFh4gbe2ww6CEoWYkZWI81wssdO4TcKTk=
Subject key identifier:   DE:BB:AC:F3:5D:D8:B8:DA:05:08:F9:B9:81:53:5F:09:EB:4A:07:4A
Certificate issuer:       /CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
Certificate serial:       019B77C6F99EB003F48CE7206A43771B1F7F
Authority key identifier: 7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/3rus813YuNoFCPm5gVNfCetKB0o.roa
Signing time:             Thu 01 Jan 2026 04:18:07 +0000
ROA not before:           Thu 01 Jan 2026 04:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207073
IP address blocks:        185.150.248.0/22 maxlen: 22
                          193.193.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:f9:9e:b0:03:f4:8c:e7:20:6a:43:77:1b:1f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ef87bdbb295e1c85eb4b0e3566153c221845f81
        Validity
            Not Before: Jan  1 04:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=debbacf35dd8b8da0508f9b981535f09eb4a074a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:ef:b3:a3:74:a6:0f:5c:38:6c:83:46:b8:
                    86:42:e5:05:62:ca:d8:4d:f6:66:6d:e4:34:a0:80:
                    35:e7:7a:7a:d6:ad:81:ee:14:21:0d:89:85:54:fd:
                    b6:d1:1a:77:ca:d3:f1:01:a3:1d:2d:e7:7c:01:22:
                    95:d5:26:77:e1:0d:38:56:9f:53:cd:56:ab:12:fa:
                    67:50:e0:65:81:35:df:01:d1:07:ed:8c:84:05:40:
                    45:87:70:82:1f:cc:06:e1:db:13:a7:1a:b5:cb:b6:
                    38:4f:59:77:8c:88:4a:61:0d:9b:cb:95:62:41:6f:
                    ba:63:cc:9f:b2:3b:ef:e5:64:8c:6d:31:da:b9:49:
                    48:6a:9d:44:ca:42:17:13:ba:0c:83:48:75:9a:73:
                    c2:cb:2e:47:59:6a:95:1e:6b:17:2d:28:ef:2f:af:
                    6a:b8:90:19:6e:b3:e6:20:86:58:4e:c1:45:75:70:
                    92:cf:2c:73:9c:85:b7:c6:62:81:8f:09:b8:1b:27:
                    c6:ed:b1:ee:27:81:08:d2:a6:3e:21:eb:b6:5e:3a:
                    3a:0a:5a:c0:2b:ee:49:44:de:c6:80:19:c6:7c:69:
                    bc:68:a1:a7:fb:8d:cc:c7:71:bc:1b:bb:f1:6e:a0:
                    fc:95:42:51:63:ea:24:fb:c5:ce:20:78:34:13:0c:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BB:AC:F3:5D:D8:B8:DA:05:08:F9:B9:81:53:5F:09:EB:4A:07:4A
            X509v3 Authority Key Identifier:
                keyid:7E:F8:7B:DB:B2:95:E1:C8:5E:B4:B0:E3:56:61:53:C2:21:84:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvh727KV4chetLDjVmFTwiGEX4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/3rus813YuNoFCPm5gVNfCetKB0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca9ff3-19a2-4e65-85f7-546a845b6b39/1/fvh727KV4chetLDjVmFTwiGEX4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.248.0/22
                  193.193.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:ef:d7:fa:6b:e4:d8:62:9a:09:3d:00:40:5b:0f:4e:60:
         61:29:8f:23:8c:c2:68:e1:6b:88:9b:ae:22:52:3e:42:cc:99:
         fc:6f:7c:f0:30:46:f4:e0:43:9f:73:85:04:c7:2a:97:3c:15:
         eb:d1:01:99:14:0a:bf:f5:4f:ea:79:02:48:80:34:f5:9f:13:
         36:60:6f:9b:f4:57:49:9a:9d:14:66:82:34:41:8d:09:c8:ac:
         c2:e9:25:b7:e5:fe:e0:f0:12:9b:10:e1:4d:6a:b8:1a:54:07:
         60:60:af:35:12:8e:c7:94:8f:a9:01:7a:89:04:96:4f:2b:14:
         ba:05:49:5e:7b:68:84:05:6e:d2:c2:c5:8b:6e:9f:ed:db:00:
         3c:e5:e9:8e:97:24:b0:41:fd:ef:ce:85:72:0d:3f:e1:1a:3c:
         bc:f8:91:7a:6b:54:e8:46:7d:01:96:24:a0:8f:44:b2:11:1a:
         c7:dd:cf:90:38:7c:55:f8:66:f4:9b:1e:41:49:81:f1:0b:9c:
         08:65:45:63:ee:40:40:cc:01:3f:fb:1d:0b:ed:df:12:79:ab:
         b8:f0:28:bc:73:5e:3f:e9:65:ad:56:a2:72:23:f7:d9:6b:26:
         25:4f:f5:63:fc:87:50:ed:53:10:53:ae:bc:95:d3:ed:4b:c0:
         1a:01:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:17 2026 by rpki-client