This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/R7yjlqKVC_g5K4daVbkjXz4EoC0.roa
File:                     R7yjlqKVC_g5K4daVbkjXz4EoC0.roa (raw, json)
Hash identifier:          SjJL3uwbof0k8GhL3qw3R1A3vM1QlaILS8y/Gn2OYl0=
Subject key identifier:   47:BC:A3:96:A2:95:0B:F8:39:2B:87:5A:55:B9:23:5F:3E:04:A0:2D
Certificate issuer:       /CN=7946647d9d5759a01f8d18668a377c063ff59136
Certificate serial:       019B30CCD8DA19024151A73F179EF1577B73
Authority key identifier: 79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/R7yjlqKVC_g5K4daVbkjXz4EoC0.roa
Signing time:             Thu 18 Dec 2025 09:31:29 +0000
ROA not before:           Thu 18 Dec 2025 09:31:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202765
IP address blocks:        185.163.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:cc:d8:da:19:02:41:51:a7:3f:17:9e:f1:57:7b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946647d9d5759a01f8d18668a377c063ff59136
        Validity
            Not Before: Dec 18 09:31:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=47bca396a2950bf8392b875a55b9235f3e04a02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:fe:b5:b1:dd:0c:9e:6f:ea:7a:48:94:6a:
                    6c:b7:f4:3e:b5:aa:b3:de:f4:ff:a7:a5:26:91:36:
                    de:84:be:34:54:63:7d:81:fa:74:46:66:0e:97:1e:
                    ec:43:0a:af:09:14:e6:1c:e3:37:09:48:30:04:88:
                    ba:8f:41:15:3f:d7:f2:ea:cf:12:21:88:95:31:a3:
                    4b:88:87:43:64:92:fb:c4:0b:26:71:1f:5b:75:22:
                    44:7e:4a:aa:83:76:6e:9e:82:7f:3d:dd:c3:bc:08:
                    fc:fc:e1:34:c4:0f:99:53:cf:7e:aa:38:86:35:40:
                    b2:58:92:18:7b:b8:5b:fb:10:56:21:e2:84:e3:3b:
                    1c:ac:e0:97:4e:81:a9:56:46:57:56:45:0f:bd:51:
                    31:63:29:69:df:b0:0a:62:52:92:03:6d:77:74:db:
                    ce:35:e3:90:52:80:86:39:40:8b:ed:de:38:cb:c5:
                    20:24:a5:2f:91:bb:da:3e:d8:b3:3a:08:c9:1f:8a:
                    09:47:2c:48:ea:de:b6:cf:e8:a1:4b:a6:6a:b0:e5:
                    58:44:85:23:d0:48:f7:97:47:96:f5:57:49:ca:7c:
                    e3:1e:c9:53:c9:17:bc:3b:34:73:79:84:e4:bc:bf:
                    bf:40:69:cb:7f:84:1d:0b:3d:8c:74:23:5c:3d:a1:
                    2b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BC:A3:96:A2:95:0B:F8:39:2B:87:5A:55:B9:23:5F:3E:04:A0:2D
            X509v3 Authority Key Identifier:
                keyid:79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/R7yjlqKVC_g5K4daVbkjXz4EoC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:02:91:3b:aa:6a:b5:ce:1f:24:fd:9e:67:73:77:07:ab:cb:
         6c:9e:31:94:82:41:6b:1d:ad:e7:70:b1:87:f5:27:b9:f0:b8:
         88:45:07:dd:97:89:05:4b:14:49:f4:70:22:6c:27:46:72:83:
         81:30:db:4b:66:89:aa:29:98:a8:a7:bf:69:65:d0:4c:50:e2:
         e8:98:c2:a4:db:83:d7:ec:6b:97:c2:7c:0a:d7:e2:95:ce:36:
         c3:45:62:d4:df:13:96:3f:bf:2e:7f:3f:c3:94:c8:8f:79:4d:
         8a:ca:0a:fa:f1:70:a4:bd:3d:b0:35:a0:7d:09:3c:90:fa:65:
         bf:21:3b:13:aa:a5:8d:40:27:29:85:78:18:85:9b:6b:fb:3f:
         61:b9:15:a0:c8:c0:9b:9e:6f:c4:d3:a7:4c:f4:55:b8:67:8c:
         50:b5:45:79:98:7f:9d:df:41:e3:cd:b5:28:79:f1:3f:7a:cc:
         3a:7d:39:f6:40:ae:2e:90:64:b7:f2:16:be:95:67:2f:70:29:
         b7:54:d3:8e:40:eb:ea:e1:4b:99:96:41:6d:bd:0f:a2:22:57:
         c8:90:6d:53:55:fc:1a:a8:24:2f:29:27:b9:c7:55:2d:e5:ea:
         e3:a7:48:80:ea:fc:44:bd:0b:7c:56:06:2a:15:f8:7d:fd:25:
         d1:2c:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:42:28 2025 by rpki-client