This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/7AdqwFeOvZzL1Lrf8cQvdUqvAAI.roa
File:                     7AdqwFeOvZzL1Lrf8cQvdUqvAAI.roa (raw, json)
Hash identifier:          5arTTImvBzaIRupQVayIK37D8OB4WYArstAWqXrZVwM=
Subject key identifier:   EC:07:6A:C0:57:8E:BD:9C:CB:D4:BA:DF:F1:C4:2F:75:4A:AF:00:02
Certificate issuer:       /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial:       019B7B3654BDE2A2AE06514680AB527057A9
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/7AdqwFeOvZzL1Lrf8cQvdUqvAAI.roa
Signing time:             Thu 01 Jan 2026 20:18:36 +0000
ROA not before:           Thu 01 Jan 2026 20:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209282
IP address blocks:        5.61.211.0/24 maxlen: 24
                          77.87.184.0/24 maxlen: 24
                          2a12:90c0:a0::/48 maxlen: 48
                          2a12:90c0:b0::/48 maxlen: 48
                          2a12:90c1::/40 maxlen: 40
                          2a12:90c1:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:54:bd:e2:a2:ae:06:51:46:80:ab:52:70:57:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
        Validity
            Not Before: Jan  1 20:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec076ac0578ebd9ccbd4badff1c42f754aaf0002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:b6:48:64:33:ca:e2:ec:c4:79:f6:2c:67:
                    78:a8:f0:78:c0:c1:de:1b:5c:a1:e5:be:e4:45:b3:
                    a9:ec:07:6a:d7:2b:2b:2c:59:15:16:e6:58:a2:d5:
                    56:ee:80:6a:9b:00:8f:5c:fc:45:fd:f6:74:6e:e9:
                    76:19:8c:8b:57:2b:74:8b:c7:04:7a:8b:6a:09:a4:
                    c4:e1:40:0f:30:1e:95:74:f7:16:d5:2a:0b:33:5e:
                    4f:54:03:3b:22:91:ba:2b:9d:fb:a1:27:6d:35:8f:
                    c2:8c:97:f0:39:61:ce:7d:07:fc:8d:bc:c0:6e:40:
                    83:dd:51:ba:83:a6:0f:a2:9d:15:91:37:07:bd:ea:
                    95:29:6b:fd:d9:bd:88:4d:39:2d:09:c3:d9:96:0f:
                    a6:ad:55:53:1d:20:be:3a:e8:14:cd:76:22:c3:56:
                    9e:a1:32:7f:96:95:95:5c:0c:22:bf:eb:c0:81:9d:
                    6f:b4:d4:48:7e:90:3d:f9:6c:14:ec:b7:1c:2e:92:
                    60:d2:64:da:19:45:a6:20:b7:5f:f3:ae:89:20:aa:
                    9d:4a:87:8e:22:33:0e:be:dd:d2:06:2a:8f:f3:81:
                    5d:fc:50:9e:01:34:ac:33:b2:ac:47:38:4a:2c:ea:
                    54:f7:e8:ca:1d:e2:ea:27:22:9f:9b:88:68:42:6c:
                    af:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:07:6A:C0:57:8E:BD:9C:CB:D4:BA:DF:F1:C4:2F:75:4A:AF:00:02
            X509v3 Authority Key Identifier:
                keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/7AdqwFeOvZzL1Lrf8cQvdUqvAAI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.61.211.0/24
                  77.87.184.0/24
                IPv6:
                  2a12:90c0:a0::/48
                  2a12:90c0:b0::/48
                  2a12:90c1::/39

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:0e:aa:2d:82:03:0e:a9:92:1c:2c:c3:47:1a:76:f6:ab:
         f3:e2:b3:98:71:61:67:25:e9:a0:d4:87:b6:f8:9d:b8:c0:43:
         a6:f3:96:f1:49:85:ee:f1:ac:20:e0:c4:2a:db:cd:89:e6:24:
         a7:6f:d7:2e:72:ec:58:02:78:6c:74:90:25:a7:49:41:85:19:
         42:ec:89:31:93:bb:95:d2:16:d9:36:af:e6:16:d4:55:08:47:
         7c:b3:f9:04:b5:52:dc:52:ba:0b:07:b5:6c:dd:4d:02:29:8b:
         0d:74:f9:e8:b9:9a:23:a2:9e:4b:29:1c:2c:fc:83:3b:53:35:
         40:08:84:c5:ac:16:cd:e3:7e:03:db:3d:e3:c4:03:38:5f:86:
         85:d6:87:ee:ec:71:8d:d6:46:1f:52:f1:64:8a:93:41:93:9a:
         3e:ad:4c:26:b3:09:5b:24:1f:7c:73:4b:14:91:d4:35:0a:19:
         d8:16:01:d9:14:60:75:bd:f9:d0:31:ce:4b:be:a6:00:d5:d3:
         be:ae:33:ee:99:e2:85:62:05:09:d1:ec:a4:5b:2f:fb:12:99:
         08:09:77:3c:b9:7a:e5:1a:0f:74:b3:13:f4:60:0b:bd:ec:e8:
         ed:d9:23:01:53:a1:35:40:e1:f4:4a:16:22:c9:ec:b7:de:d0:
         25:01:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:48 2026 by rpki-client