This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/7XNQLkqusgtqTDyK5arrGJq0lRY.roa
File:                     7XNQLkqusgtqTDyK5arrGJq0lRY.roa (raw, json)
Hash identifier:          zOw1DRzg6Vf26GhobM+cFclpIaBB2DBklLXC8PBkZNs=
Subject key identifier:   ED:73:50:2E:4A:AE:B2:0B:6A:4C:3C:8A:E5:AA:EB:18:9A:B4:95:16
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       019B7CEDF4A2199A355DD10CDB79847ABD82
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/7XNQLkqusgtqTDyK5arrGJq0lRY.roa
Signing time:             Fri 02 Jan 2026 04:18:48 +0000
ROA not before:           Fri 02 Jan 2026 04:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211619
IP address blocks:        185.244.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:f4:a2:19:9a:35:5d:d1:0c:db:79:84:7a:bd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  2 04:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed73502e4aaeb20b6a4c3c8ae5aaeb189ab49516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:6c:d4:5e:cb:dc:99:ee:c0:98:ff:52:f9:
                    7c:62:de:78:03:e7:37:29:83:08:1f:2a:cd:42:83:
                    f2:cd:b6:6b:e3:b8:76:40:f5:d9:7a:67:6e:ea:2b:
                    6e:75:7b:75:ae:c8:f0:a1:22:fd:0c:68:fb:d7:47:
                    d6:31:a8:3f:99:74:a1:ce:b1:c4:85:bb:5a:4b:2d:
                    e1:f2:1d:56:cc:b7:1b:4c:66:79:00:91:5a:bb:01:
                    51:0b:63:88:b2:e6:21:41:f2:80:f9:96:00:f2:02:
                    fa:88:9c:63:4b:53:d3:2b:37:f1:19:80:c1:bf:e0:
                    07:34:c4:f9:2d:7c:ad:a8:18:1d:10:b8:a6:e4:35:
                    ef:25:85:b5:89:7f:13:3b:70:c3:1d:80:d1:4d:68:
                    25:d8:45:93:b5:1b:ae:44:e1:33:34:04:0d:83:8e:
                    47:e3:5e:0e:fd:95:ee:cb:7a:f8:5c:39:c2:7b:5a:
                    82:c6:b9:1d:2a:64:69:0e:e6:67:cd:68:32:56:90:
                    f6:7d:c1:ab:a3:c2:1e:f8:5e:8a:21:b4:ce:ec:0f:
                    7a:4c:7c:5e:6c:42:69:4d:04:7e:05:87:bd:96:5a:
                    98:40:57:c3:f9:15:3d:18:70:99:c2:0c:71:b2:9b:
                    44:3c:63:e8:bc:d9:ab:75:3c:a1:23:1f:cf:0e:fc:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:73:50:2E:4A:AE:B2:0B:6A:4C:3C:8A:E5:AA:EB:18:9A:B4:95:16
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/7XNQLkqusgtqTDyK5arrGJq0lRY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:b6:38:60:d5:49:c9:3a:e0:f2:ad:6e:fd:bf:72:46:77:07:
         fc:e6:84:42:2b:92:5f:e7:82:2c:4a:22:8c:5c:02:6e:48:eb:
         20:84:42:61:30:f6:0b:96:2d:cc:0e:79:c8:9c:c8:8e:d6:f2:
         30:88:4a:a8:36:ed:1d:e7:dd:b7:e5:a7:93:b2:2f:61:30:1d:
         03:85:16:59:d7:7f:80:15:7d:12:3a:5a:ae:5a:21:56:d3:16:
         fb:ff:6a:26:3d:7c:35:ef:44:ad:19:12:ea:3d:d1:5d:fa:6d:
         37:db:ff:74:59:91:60:f6:80:54:ae:8e:f5:f5:2f:e3:bc:9e:
         e3:04:3d:5c:8a:ae:7e:74:33:18:06:07:bd:f9:24:8a:bb:c3:
         42:de:b7:53:5a:85:7c:82:c2:78:72:98:f6:83:c8:73:e9:e8:
         0e:87:bc:c7:d5:74:49:cd:3d:7b:55:39:49:6c:83:23:19:5b:
         26:3d:b1:89:92:53:b4:70:02:5c:dd:4d:c5:bb:4f:59:f5:d1:
         37:c8:0b:03:58:e4:94:d3:99:60:36:2d:10:e8:44:dc:3e:97:
         af:d7:e7:e1:0c:e4:64:7d:68:10:6f:12:f8:c7:88:ab:3d:51:
         f5:b3:0e:0c:bd:d6:2a:76:d3:b0:ce:90:e7:7b:40:92:f8:fe:
         5a:70:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 03:22:48 2026 by rpki-client