This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/rGGWcglvMeSsvlJBXs2-o4-N8sw.roa
File:                     rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (raw, json)
Hash identifier:          xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=
Subject key identifier:   AC:61:96:72:09:6F:31:E4:AC:BE:52:41:5E:CD:BE:A3:8F:8D:F2:CC
Certificate issuer:       /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial:       019B77C6D62A9876CE0522EBDC8E2F8A20ED
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/rGGWcglvMeSsvlJBXs2-o4-N8sw.roa
Signing time:             Thu 01 Jan 2026 04:17:58 +0000
ROA not before:           Thu 01 Jan 2026 04:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56971
IP address blocks:        195.211.124.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:d6:2a:98:76:ce:05:22:eb:dc:8e:2f:8a:20:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
        Validity
            Not Before: Jan  1 04:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac619672096f31e4acbe52415ecdbea38f8df2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:70:26:f5:bf:dd:4c:2c:10:bf:40:30:7f:
                    8e:f9:10:a8:5e:f3:05:09:d1:83:68:97:ee:12:13:
                    e6:1b:76:6c:4b:95:ac:ec:34:5d:de:55:c3:22:dc:
                    e4:84:64:c0:fd:36:58:53:1a:7b:70:93:c3:00:13:
                    17:01:3d:60:7c:e6:ac:e0:cc:74:c1:fd:0f:b0:d3:
                    30:3b:9f:0a:f9:2d:14:b6:91:dd:ae:42:29:e9:c5:
                    27:53:cd:f0:60:17:bb:35:8a:50:ef:d5:48:7f:fc:
                    63:e6:f7:18:ee:b3:0d:91:a1:5b:60:59:f6:2d:79:
                    3c:06:ad:62:28:ec:e6:e4:e7:19:0c:74:85:21:03:
                    7b:96:bc:c4:f5:db:d7:f8:55:da:0e:80:09:2e:ff:
                    04:b5:38:fe:e2:d5:d4:67:3c:7a:93:e6:97:3e:2d:
                    7c:00:3b:28:24:fb:1c:52:2e:4e:00:5f:52:a4:51:
                    9b:af:75:2c:80:31:bd:ee:72:b8:6f:97:d8:aa:bf:
                    a5:53:b0:4f:ea:14:21:5a:ef:bb:5d:9f:60:5c:ca:
                    c3:ba:b7:6f:74:42:e9:9c:83:85:81:fc:ac:28:35:
                    3b:89:0f:c6:aa:1f:a5:1c:99:59:d9:0b:a6:f9:67:
                    eb:af:93:b1:f9:1c:2c:2a:68:ea:56:05:01:a6:e1:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:61:96:72:09:6F:31:E4:AC:BE:52:41:5E:CD:BE:A3:8F:8D:F2:CC
            X509v3 Authority Key Identifier:
                keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/rGGWcglvMeSsvlJBXs2-o4-N8sw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.211.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:38:5f:6b:bb:ff:d3:d3:83:6e:d3:f8:d2:1d:c9:e7:c3:94:
         be:d5:ef:a9:90:e8:28:e3:5a:43:46:b7:af:e5:60:a6:63:34:
         07:00:b5:ef:75:60:b9:00:08:c4:b7:3d:33:cb:e0:27:39:6f:
         b0:41:48:4a:00:dc:af:3d:1d:62:0a:bf:2b:ab:cb:79:c7:de:
         80:b3:d0:96:81:00:1c:b0:91:13:09:43:95:9c:29:21:af:6f:
         21:68:00:5c:95:bd:87:09:a1:b3:11:fa:19:fb:51:e2:5d:ba:
         09:03:0d:fe:2a:56:58:10:d6:e8:e1:b8:90:3b:45:91:b2:a5:
         5e:48:e2:4c:6e:c6:52:a1:4b:3b:2d:45:1e:78:02:45:4b:40:
         3c:c2:1b:e8:61:85:30:8a:02:0a:de:7b:38:ea:b7:52:87:3d:
         a1:97:5c:9d:be:4d:c8:61:55:f0:31:a4:1b:60:fe:be:4d:a4:
         b8:b6:ae:93:d0:56:7d:e0:d0:3b:51:17:b8:37:43:88:15:11:
         65:ee:c8:f7:78:e0:f5:37:20:49:0c:ac:5a:eb:19:18:f6:72:
         d7:bb:b1:25:f8:0e:d3:41:fc:6b:19:ee:0d:13:ad:5b:6e:03:
         20:9b:d2:63:00:31:c5:fa:2e:45:ed:57:cc:da:4b:a7:b6:a1:
         8e:e8:17:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 02:51:45 2026 by rpki-client