This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/7JIJlTfBX4PS77oE0Mx0OejSM24.roa
File:                     7JIJlTfBX4PS77oE0Mx0OejSM24.roa (raw, json)
Hash identifier:          fNa36vATsrsor3PYEeM7hTNfoNAesQKtpUagqEla5bc=
Subject key identifier:   EC:92:09:95:37:C1:5F:83:D2:EF:BA:04:D0:CC:74:39:E8:D2:33:6E
Certificate issuer:       /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial:       019B7BA473A8FC9DB8F049782DAE5484CC8A
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/7JIJlTfBX4PS77oE0Mx0OejSM24.roa
Signing time:             Thu 01 Jan 2026 22:18:53 +0000
ROA not before:           Thu 01 Jan 2026 22:18:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50630
IP address blocks:        2.56.4.0/24 maxlen: 24
                          2.56.5.0/24 maxlen: 24
                          2.56.6.0/24 maxlen: 24
                          2.56.7.0/24 maxlen: 24
                          109.95.57.0/24 maxlen: 24
                          109.95.58.0/24 maxlen: 24
                          195.8.194.0/24 maxlen: 24
                          2a0d:4d40::/44 maxlen: 48
                          2a0d:4d40:10::/48 maxlen: 48
                          2a0d:4d40:11::/48 maxlen: 48
                          2a0d:4d40:12::/48 maxlen: 48
                          2a0d:4d40:13::/48 maxlen: 48
                          2a0d:4d40:14::/48 maxlen: 48
                          2a0d:4d40:15::/48 maxlen: 48
                          2a0d:4d40:16::/48 maxlen: 48
                          2a0d:4d40:17::/48 maxlen: 48
                          2a0d:4d40:18::/48 maxlen: 48
                          2a0d:4d40:1a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:73:a8:fc:9d:b8:f0:49:78:2d:ae:54:84:cc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
        Validity
            Not Before: Jan  1 22:18:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec92099537c15f83d2efba04d0cc7439e8d2336e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4d:f8:f7:81:82:9a:a0:2f:fc:77:d3:4d:3c:
                    40:a0:87:13:91:92:d6:67:62:b0:55:b2:55:8f:02:
                    e3:60:f9:ee:2d:43:08:3d:85:0a:96:2b:a4:ed:00:
                    a8:24:34:76:74:11:ac:87:98:56:33:61:fe:55:46:
                    99:c9:7a:e0:36:7c:e6:63:3a:06:a7:44:e7:3a:00:
                    40:da:67:b9:fa:49:b9:59:99:55:54:72:67:5d:0c:
                    fa:f6:31:6a:d0:bb:ae:99:75:ce:a7:f4:0e:7f:98:
                    56:01:11:b9:1b:f3:85:fd:72:63:77:f1:32:32:19:
                    af:00:64:c4:48:2b:fc:dd:05:34:10:6e:81:96:6e:
                    ae:5f:e9:bb:ac:d3:0e:70:85:f5:0b:15:66:d3:fe:
                    5f:d0:a0:11:c2:92:ff:f0:9c:de:77:12:6b:1a:d7:
                    29:3f:25:c0:80:4b:99:eb:05:cb:72:1d:f9:e4:df:
                    33:e2:31:67:1f:74:29:02:63:ea:98:f5:49:af:ca:
                    2c:2c:a7:e6:44:dc:b4:63:0a:ef:c7:95:88:63:c4:
                    de:e2:47:61:da:3b:de:76:fb:de:a8:7e:dd:13:41:
                    1a:09:9f:a1:e3:57:76:9f:b9:16:0f:6a:e9:b7:0d:
                    9f:65:41:c1:d7:0c:74:99:a1:c8:46:ee:aa:6a:cc:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:09:95:37:C1:5F:83:D2:EF:BA:04:D0:CC:74:39:E8:D2:33:6E
            X509v3 Authority Key Identifier:
                keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/7JIJlTfBX4PS77oE0Mx0OejSM24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.4.0/22
                  109.95.57.0-109.95.58.255
                  195.8.194.0/24
                IPv6:
                  2a0d:4d40::-2a0d:4d40:18:ffff:ffff:ffff:ffff:ffff
                  2a0d:4d40:1a::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:14:84:a6:6c:74:80:9a:aa:ae:ea:5a:7d:bb:65:1c:c1:f0:
         50:81:6d:96:8e:c8:fe:04:d1:ce:0b:b5:b7:5d:4d:87:7c:04:
         c7:22:c7:20:a5:f0:54:65:58:c1:b6:69:48:24:2a:d5:7c:2d:
         4f:e7:a1:8e:cc:88:1f:b0:b8:80:ab:dd:f9:6d:94:e9:00:18:
         6f:54:59:b2:3c:ac:b9:0c:1d:4b:a1:b3:13:03:46:10:2a:10:
         3a:b3:95:e3:e8:13:14:3b:e5:b2:e2:bf:74:5f:5e:20:01:ff:
         9c:e7:ba:a8:f0:f6:0d:c7:63:6d:a3:99:7c:75:32:87:8a:33:
         34:43:08:24:32:03:c7:6a:30:d6:60:7c:04:26:cd:5b:70:10:
         62:50:5f:b8:70:d1:29:f2:ce:c7:64:d6:39:41:ed:c4:d5:c3:
         d6:d8:56:a4:97:14:ff:cd:ec:d3:79:10:d0:94:a6:19:10:89:
         14:d8:1d:7e:37:96:d3:09:c9:85:ce:e6:d9:35:a4:2f:8d:79:
         31:d3:f0:e3:78:5d:a2:24:34:59:72:93:a2:a0:24:9c:7c:22:
         2f:c2:4e:93:14:0f:3e:5d:bf:79:f0:68:55:d3:41:5b:47:39:
         d3:65:1f:54:87:11:9e:86:58:f5:09:df:5d:58:3c:ff:8d:70:
         6c:02:03:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:09 2026 by rpki-client