This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/c7MPDF7AuIz_xunWDuFI6Zip6nY.roa
File:                     c7MPDF7AuIz_xunWDuFI6Zip6nY.roa (raw, json)
Hash identifier:          7iUKf2Xowp5SQqf2eZSh0VXwG8m3+M8eOQtKtEsx4Q4=
Subject key identifier:   73:B3:0F:0C:5E:C0:B8:8C:FF:C6:E9:D6:0E:E1:48:E9:98:A9:EA:76
Certificate issuer:       /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial:       019B775893FB8BD8F5664E084C033A5DC252
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/c7MPDF7AuIz_xunWDuFI6Zip6nY.roa
Signing time:             Thu 01 Jan 2026 02:17:32 +0000
ROA not before:           Thu 01 Jan 2026 02:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210169
IP address blocks:        195.95.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:93:fb:8b:d8:f5:66:4e:08:4c:03:3a:5d:c2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
        Validity
            Not Before: Jan  1 02:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=73b30f0c5ec0b88cffc6e9d60ee148e998a9ea76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:21:ab:64:ea:fc:88:e0:db:03:c2:47:2e:
                    18:e8:70:db:86:c9:ef:bf:20:f7:f5:a9:aa:1d:50:
                    fc:6c:d5:47:16:23:de:0e:57:78:a8:c9:3d:65:ff:
                    b1:c4:6f:b4:b8:62:13:b7:1b:27:06:5e:ed:78:67:
                    80:88:aa:fe:0b:71:39:4f:c3:36:8c:7b:d2:d2:5f:
                    89:c3:ff:67:d2:f6:f9:6f:47:30:87:06:60:24:3e:
                    d9:4f:5b:69:bd:83:6a:8e:2b:43:14:4a:99:66:91:
                    d8:63:32:8d:e4:49:89:ab:19:90:a0:0b:66:28:d5:
                    67:5b:2f:84:c0:3c:e9:46:98:8d:96:67:bd:70:2c:
                    8c:79:17:d1:4e:74:b0:a1:f9:e0:15:41:81:bc:c7:
                    ba:92:6a:0c:db:f8:69:51:be:0e:59:18:83:95:89:
                    03:c2:a4:9f:af:57:f7:bd:8a:b0:68:ef:c9:92:ab:
                    48:6a:35:bf:df:e2:1c:b4:a0:84:3a:3d:ef:24:4e:
                    aa:87:40:5b:0a:a8:cb:fe:80:fb:2d:7a:45:17:d4:
                    af:c3:4a:af:49:c7:1f:02:39:63:5f:01:af:64:7f:
                    53:a8:26:27:10:3e:0f:c2:74:c0:ff:ca:c9:34:1b:
                    73:48:49:00:2d:f2:39:5b:0f:30:e1:3f:20:b5:4a:
                    e8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B3:0F:0C:5E:C0:B8:8C:FF:C6:E9:D6:0E:E1:48:E9:98:A9:EA:76
            X509v3 Authority Key Identifier:
                keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/c7MPDF7AuIz_xunWDuFI6Zip6nY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:56:17:10:dc:f7:6e:95:3a:70:e2:5d:5f:08:d5:9d:87:e3:
         e0:d9:79:70:2f:69:6f:67:56:51:f3:ab:7e:5d:c9:fb:83:9d:
         33:22:57:e8:fc:8a:13:9e:d8:fa:34:e5:9f:0f:c2:c8:68:59:
         b4:57:e0:2b:2a:ed:81:41:84:31:e8:34:9e:fb:45:42:5d:d7:
         94:ec:2a:db:12:0e:00:08:d4:c2:7b:12:8e:cf:c3:2b:37:54:
         0e:d9:d3:c8:9b:63:ed:79:9b:b5:fa:75:87:f4:31:2d:19:3d:
         2c:1b:11:69:d7:91:bb:55:58:a3:94:f1:5e:79:c3:07:a7:59:
         b2:e8:44:6c:4d:56:d5:0e:4b:71:d1:5f:dc:97:89:ce:ef:5a:
         d8:56:59:09:3c:29:36:2f:d4:f5:98:52:d5:dc:3d:80:82:3e:
         28:66:62:41:23:0d:39:0b:09:04:c8:0e:77:25:9c:12:b2:91:
         c3:32:61:57:07:6c:22:94:98:64:20:52:af:a3:99:2f:6b:07:
         7d:45:df:27:29:40:bc:2e:b1:11:8d:f7:f6:29:86:bc:34:8e:
         88:00:1f:6a:71:ee:50:88:06:56:f3:1a:cb:b8:ce:fa:5c:7d:
         2b:8c:d1:3a:a1:fc:a3:56:b5:6c:b2:f3:78:a7:49:53:f3:da:
         ed:18:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:30:38 2026 by rpki-client