This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/7EYICmxx7jfWFKyNew2yJRdJD-4.roa
File:                     7EYICmxx7jfWFKyNew2yJRdJD-4.roa (raw, json)
Hash identifier:          C6pdWtI2MDU5VLgQf1VYuNUhvfomAtWCGF4df8IZdjc=
Subject key identifier:   EC:46:08:0A:6C:71:EE:37:D6:14:AC:8D:7B:0D:B2:25:17:49:0F:EE
Certificate issuer:       /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial:       019B7C10FD0BA3BC3B62B30E16114B0DD29B
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/7EYICmxx7jfWFKyNew2yJRdJD-4.roa
Signing time:             Fri 02 Jan 2026 00:17:26 +0000
ROA not before:           Fri 02 Jan 2026 00:17:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34285
IP address blocks:        185.197.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:10:fd:0b:a3:bc:3b:62:b3:0e:16:11:4b:0d:d2:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
        Validity
            Not Before: Jan  2 00:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec46080a6c71ee37d614ac8d7b0db22517490fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:a7:4a:1e:56:c4:8a:c3:5c:52:60:fd:91:
                    ed:e6:ae:5a:a6:b4:bb:00:3e:03:0e:11:03:f7:cf:
                    62:cf:56:16:28:92:98:70:4c:9c:c6:1b:71:c7:85:
                    37:c7:13:90:d6:9e:90:02:d5:ff:da:81:95:10:1a:
                    82:fe:91:26:2e:c3:b8:7d:89:e7:5d:61:8e:02:08:
                    8f:ea:9a:64:ac:2d:35:aa:0a:1c:92:cd:9c:f7:34:
                    e3:bf:cf:8a:f5:ba:43:4f:ac:03:b1:34:5b:e4:e1:
                    0a:57:9f:b4:45:be:ce:52:33:26:98:8f:af:30:94:
                    86:8e:19:89:de:01:3c:1a:bd:80:d1:a0:22:f1:cc:
                    2c:65:b7:90:fa:c1:b6:0f:2b:67:05:2e:fc:49:cf:
                    2c:aa:ce:39:d5:e0:39:c9:64:29:6a:f2:92:7e:11:
                    08:50:ae:a0:ed:b8:34:d4:32:b3:b6:05:9a:71:35:
                    d3:9c:d7:60:7f:b3:c9:e1:5b:b5:a1:b5:7f:fe:ed:
                    aa:fc:0f:c5:87:5f:5a:2f:ea:d7:27:63:95:0b:a7:
                    b5:b4:da:2b:9e:bb:39:22:4c:c3:d9:7e:d5:b5:84:
                    38:0d:2b:8b:68:b7:c2:27:de:06:cf:43:6d:98:e0:
                    b0:4f:b1:31:b9:1e:a9:e5:8e:e7:3d:5f:80:5f:1a:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:46:08:0A:6C:71:EE:37:D6:14:AC:8D:7B:0D:B2:25:17:49:0F:EE
            X509v3 Authority Key Identifier:
                keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/7EYICmxx7jfWFKyNew2yJRdJD-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:59:9c:46:06:33:37:ae:91:8f:40:08:31:0d:bf:c0:2a:06:
         20:5c:08:06:1f:8b:eb:32:23:76:ee:b8:88:c9:e0:a6:3d:fd:
         5a:95:80:b7:d6:5c:0a:0e:d6:4f:0c:c7:57:18:63:b7:65:d8:
         69:03:5d:a1:9e:a7:e1:55:d3:3e:ae:0c:39:93:36:33:47:bf:
         3d:4b:b2:b7:33:73:cf:9a:0a:f9:53:34:7f:48:b8:1c:5e:6a:
         5d:7d:ca:c5:a1:75:4a:bc:88:74:5a:22:a7:36:67:ba:6c:32:
         69:c4:2e:68:b7:c2:25:af:6a:14:99:08:6a:e0:e0:26:d1:0d:
         16:30:40:f9:8c:a1:37:47:b8:5f:f4:31:e3:b5:da:77:24:ac:
         ab:65:a4:79:03:d1:db:ad:77:03:fe:6b:40:92:87:52:0a:77:
         29:67:05:ee:55:6c:51:68:a1:33:13:ff:45:34:56:61:30:74:
         e7:bb:59:89:d9:b8:60:ea:fb:d5:c7:3e:c1:bd:82:e0:30:8b:
         89:cc:11:51:3e:fd:b5:fb:7f:e5:8e:bb:ad:07:b9:dd:91:dd:
         ef:54:8c:43:08:04:68:02:cc:be:15:44:8c:a5:5b:0c:69:0e:
         b3:66:cb:c2:ee:b8:bf:25:22:98:27:70:72:59:db:3a:58:83:
         2c:11:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:50 2026 by rpki-client