This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/79f2iwLtrmRydXFTtc58ysq7PXU.roa
File:                     79f2iwLtrmRydXFTtc58ysq7PXU.roa (raw, json)
Hash identifier:          /kHpLUM291G9o+Fyp/HVYlns3gOueQ1aYbjeKqPoOTE=
Subject key identifier:   EF:D7:F6:8B:02:ED:AE:64:72:75:71:53:B5:CE:7C:CA:CA:BB:3D:75
Certificate issuer:       /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial:       019B78A341CCF3325A36EBCE72EF1A0CCA99
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/79f2iwLtrmRydXFTtc58ysq7PXU.roa
Signing time:             Thu 01 Jan 2026 08:18:43 +0000
ROA not before:           Thu 01 Jan 2026 08:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208045
IP address blocks:        151.249.126.0/24 maxlen: 24
                          2a01:5b40:ac3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:41:cc:f3:32:5a:36:eb:ce:72:ef:1a:0c:ca:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
        Validity
            Not Before: Jan  1 08:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efd7f68b02edae6472757153b5ce7ccacabb3d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:69:fb:c6:d9:13:9d:23:3a:4f:4d:ad:1f:
                    e0:9b:dc:30:63:0b:7a:d8:1c:77:bd:b9:bb:a3:fb:
                    d0:14:6e:f0:c0:6b:93:dd:b5:c9:db:76:d5:c1:70:
                    7f:19:aa:2f:c1:33:ff:f6:18:53:05:58:c2:b2:1d:
                    7c:d4:89:1e:d6:d5:22:7a:cb:c2:47:3d:d4:b5:ce:
                    e5:7a:b3:30:0d:d5:d0:7d:63:7e:b9:56:f7:08:9b:
                    46:55:95:67:d8:ef:f4:3a:b6:2b:08:7e:63:dc:54:
                    96:96:95:28:79:41:d2:59:cc:6e:1f:a3:a7:84:a7:
                    f1:ad:93:1e:5f:80:85:3c:5e:60:9a:3a:61:56:7f:
                    76:93:07:e8:0d:92:81:3e:39:2f:0a:2b:86:7d:a0:
                    04:b6:ce:19:75:5c:f9:24:31:b9:63:14:14:8e:23:
                    82:c6:18:b4:e4:11:1a:c4:c4:56:3a:84:50:ea:d2:
                    d0:41:f9:e8:c0:09:e9:e3:ff:f8:1b:ac:71:a2:4d:
                    55:55:77:2e:76:c9:9d:d9:a7:32:d5:05:8c:7f:4d:
                    b1:3c:e0:6e:8c:3d:74:3c:84:89:cd:13:3b:3e:72:
                    a2:f5:9e:b4:07:e7:ab:10:08:bf:fc:2d:3e:c4:33:
                    c2:88:c2:29:b6:1e:52:74:45:39:54:d8:20:70:4a:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D7:F6:8B:02:ED:AE:64:72:75:71:53:B5:CE:7C:CA:CA:BB:3D:75
            X509v3 Authority Key Identifier:
                keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/79f2iwLtrmRydXFTtc58ysq7PXU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.249.126.0/24
                IPv6:
                  2a01:5b40:ac3::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:18:69:f2:26:20:3d:df:1a:79:e6:cc:67:8d:d4:ec:51:f1:
         4e:dc:58:96:87:fa:ad:e3:40:9e:7d:99:42:2f:40:6a:fd:f5:
         a4:2e:45:91:a9:b3:17:25:37:29:f6:e9:3b:30:ac:72:74:a7:
         d6:a5:c4:a6:81:72:43:16:16:66:79:35:77:58:66:72:58:35:
         15:25:e1:da:8e:83:fe:b2:e8:a1:ed:78:bc:6d:93:1f:6a:de:
         77:2a:1d:bd:86:2d:a5:ec:e3:54:ca:c6:aa:d5:12:94:7e:d7:
         7d:fe:6a:e2:c5:0d:08:96:05:a5:6f:2d:80:42:93:26:5f:65:
         7a:ba:2a:17:d0:b2:d1:c8:65:b4:f2:6d:c2:4a:d3:9b:a0:6c:
         16:12:5c:f0:cf:9e:36:63:93:5e:90:3f:07:b0:7c:ef:e2:a0:
         4a:94:d2:40:52:f3:29:c6:d2:45:ac:2b:42:24:97:73:f3:25:
         f4:7f:8a:ba:3a:c5:75:32:16:a7:29:ab:c7:f7:d6:5b:d4:2d:
         06:09:af:f0:95:9d:7c:9a:f8:8f:76:32:88:03:a6:34:91:75:
         80:6b:b3:80:9f:9e:d2:7a:7a:39:00:31:7c:28:9e:e8:55:97:
         26:9c:58:e1:67:fa:9e:1f:c8:d1:84:5d:bc:38:fa:ea:ba:b0:
         19:12:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:34 2026 by rpki-client