This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/R7WrkHTz8Z4uFzVvLwwewtIZRig.roa
File:                     R7WrkHTz8Z4uFzVvLwwewtIZRig.roa (raw, json)
Hash identifier:          1hwMjw7cpv5JIijDxvehnPVnW0806xT0CAc8mdkEJNU=
Subject key identifier:   47:B5:AB:90:74:F3:F1:9E:2E:17:35:6F:2F:0C:1E:C2:D2:19:46:28
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       019B7FF1930AE5C252589DC5AA22858565F7
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/R7WrkHTz8Z4uFzVvLwwewtIZRig.roa
Signing time:             Fri 02 Jan 2026 18:21:36 +0000
ROA not before:           Fri 02 Jan 2026 18:21:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57043
IP address blocks:        185.24.150.0/24 maxlen: 24
                          212.16.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:93:0a:e5:c2:52:58:9d:c5:aa:22:85:85:65:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jan  2 18:21:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47b5ab9074f3f19e2e17356f2f0c1ec2d2194628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:26:64:4e:f3:4c:ab:a0:9d:d6:2a:f3:ec:
                    e9:58:eb:88:70:0c:5a:02:74:f6:2b:f8:cd:04:9a:
                    99:e9:2c:34:4a:20:ea:c2:1c:12:ae:66:4d:8a:4f:
                    00:34:4a:30:5a:5c:af:8d:34:8b:1d:36:05:60:1a:
                    de:22:5a:0c:33:50:9f:48:2e:62:a7:91:38:bf:cd:
                    ab:cf:9b:6f:87:25:c2:87:76:11:ee:85:da:d5:96:
                    96:51:18:30:a4:c5:8a:3e:fa:17:d9:b0:73:48:c3:
                    37:16:03:4a:65:f3:75:7b:36:85:96:9a:08:45:2c:
                    94:ca:b4:1f:c8:0a:cd:d0:ae:c6:fd:1c:1f:2c:9e:
                    fc:88:4e:f1:dd:08:f3:41:e3:f1:a5:68:f8:b5:8a:
                    ae:f4:8e:7d:d5:81:98:8a:7b:d5:4d:d6:a4:93:3b:
                    78:80:6b:02:65:97:05:2f:b0:7b:f4:1b:72:89:3c:
                    b9:de:10:a1:eb:a8:6a:59:b8:2d:76:1c:cb:83:ce:
                    0c:4a:ac:5d:c8:9f:0d:eb:b0:81:7b:d4:5a:d2:78:
                    93:b9:42:ab:b9:a4:21:16:e2:fc:3b:a9:f9:a4:66:
                    0b:58:d5:ec:4b:91:64:2d:73:3c:b2:66:ec:1c:7d:
                    f4:d2:59:b8:d0:08:30:16:f4:6d:44:fe:c0:95:16:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B5:AB:90:74:F3:F1:9E:2E:17:35:6F:2F:0C:1E:C2:D2:19:46:28
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/R7WrkHTz8Z4uFzVvLwwewtIZRig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.24.150.0/24
                  212.16.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:8b:51:49:07:b1:84:e3:66:37:a9:90:aa:42:86:d9:5a:47:
         b5:f7:82:a1:73:b8:9c:61:8a:33:25:55:74:fc:dc:a0:15:73:
         c6:23:28:59:13:b5:58:3e:c6:7b:6d:4d:54:09:65:68:56:ce:
         7c:bf:ae:e2:0a:b8:64:3c:63:39:73:f9:80:18:30:fc:ab:a0:
         85:8e:ce:5f:ee:7e:32:f3:95:4f:d3:13:6a:de:a6:5a:3b:3d:
         f5:aa:09:8d:6a:03:d2:ec:f1:31:2a:7b:a8:43:a2:9a:9f:28:
         e9:35:95:aa:9b:0a:34:ec:2c:dd:6e:ed:f7:9d:f7:1a:82:a3:
         e4:f0:4c:dd:d6:1a:08:64:73:20:98:5e:78:74:b8:05:d9:12:
         9d:41:c2:a5:bc:51:a8:06:ee:07:36:ba:85:15:d9:64:b7:49:
         b9:2e:97:78:38:dc:1b:85:38:f1:26:36:1a:96:41:3c:c4:78:
         9d:0b:c0:8e:f0:11:b2:4a:2f:bd:0f:46:74:c7:2d:39:1a:93:
         f8:ad:55:17:9b:58:f9:ae:66:b3:e8:b9:a7:95:3c:5b:21:28:
         d4:ff:f4:f8:b3:a4:0c:13:bc:78:bc:a6:41:fc:df:0a:3c:8f:
         2f:a0:8c:3d:b4:f1:57:c2:ae:11:9c:38:8d:96:a8:c5:f2:ef:
         87:ac:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:03:56 2026 by rpki-client