This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/NHID-Emf-Ba4m6BHNFBPaXhMzAA.roa
File:                     NHID-Emf-Ba4m6BHNFBPaXhMzAA.roa (raw, json)
Hash identifier:          ePERwTxsWkIh1mJKy/UAXUHj01oDPoU24Hn8snDPMzw=
Subject key identifier:   34:72:03:F8:49:9F:F8:16:B8:9B:A0:47:34:50:4F:69:78:4C:CC:00
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019B7BA3D9DBF24B0A765502D750C0DEDE8D
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/NHID-Emf-Ba4m6BHNFBPaXhMzAA.roa
Signing time:             Thu 01 Jan 2026 22:18:14 +0000
ROA not before:           Thu 01 Jan 2026 22:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215262
IP address blocks:        212.100.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:d9:db:f2:4b:0a:76:55:02:d7:50:c0:de:de:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Jan  1 22:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=347203f8499ff816b89ba04734504f69784ccc00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:09:13:f3:b8:50:c1:ad:73:92:ea:98:cd:
                    13:e0:e0:58:ae:7e:6a:bd:3a:69:cc:95:8d:ae:9d:
                    da:52:de:b7:1d:e8:c7:3b:7e:8e:41:91:4d:2e:eb:
                    6e:12:9a:61:09:26:13:cc:49:4e:b9:8f:15:67:67:
                    75:d1:61:7e:37:c5:33:06:3c:05:d6:ec:b9:6d:08:
                    7e:1d:76:12:fd:70:28:ab:2f:7c:b6:62:86:c9:ef:
                    20:6a:e5:85:24:55:66:0b:85:3c:cf:e4:92:cc:55:
                    ab:72:30:ff:5d:4b:4b:93:fd:45:f9:45:52:f9:27:
                    77:37:78:85:63:60:dc:87:c0:5f:59:c4:df:34:a1:
                    ee:73:42:fa:bb:d5:b5:f0:7e:cd:0c:33:d1:4a:0d:
                    aa:8f:9e:5d:b4:23:3f:03:b3:24:6d:e6:ab:3a:1e:
                    ce:1a:d9:10:16:d3:dc:9a:8c:f5:f8:27:e0:39:49:
                    44:f6:d1:c4:7c:e4:d5:4a:d6:fd:de:3e:3e:a5:72:
                    72:01:5e:6e:0a:d7:3f:6b:00:09:6e:92:c3:f2:a1:
                    9c:76:92:12:ba:4d:ee:62:67:1b:10:04:a9:c0:8c:
                    45:61:50:87:bb:36:5e:19:1a:84:45:93:73:70:fc:
                    6b:12:c3:bf:2e:a6:d2:b3:7a:0f:70:f5:8e:a8:20:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:72:03:F8:49:9F:F8:16:B8:9B:A0:47:34:50:4F:69:78:4C:CC:00
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/NHID-Emf-Ba4m6BHNFBPaXhMzAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:ce:05:28:aa:ee:bb:e6:69:05:e9:4a:eb:f8:4f:a5:50:c3:
         7e:74:ad:fb:4c:99:40:67:71:46:4b:2f:0e:35:64:8f:d3:96:
         8f:f9:a3:b2:c9:91:6c:7f:9e:a7:34:54:cd:ee:b1:28:d4:0e:
         fa:4b:35:7c:11:e0:08:11:2a:47:8b:e0:02:3b:e8:aa:8d:3e:
         42:99:c2:5f:74:10:9b:78:49:f5:44:07:f3:26:09:bf:dc:10:
         ed:80:9d:94:8c:aa:13:54:dd:6c:59:b2:55:3c:12:2b:97:b3:
         cc:4a:9f:b2:f5:fa:5d:c9:7d:62:89:7e:4e:3a:09:9e:55:bc:
         67:e3:ed:da:e5:4c:12:75:68:d4:9c:3a:24:c9:60:05:a4:a0:
         24:84:e7:42:76:43:f2:0d:12:df:cc:18:f1:8d:cd:f0:78:fd:
         80:3e:75:f4:68:ad:11:e1:07:a4:3d:2a:86:76:26:2c:86:52:
         0e:1a:ad:e0:ef:49:1b:5d:bf:d5:c6:99:14:39:3d:6c:c8:a4:
         b1:5f:8f:79:c2:3d:53:43:41:12:88:12:b0:c5:09:c8:68:35:
         ad:ec:7d:f1:9a:75:6b:a7:0f:a6:94:82:ff:7c:d8:df:c6:eb:
         10:2f:78:7a:13:62:ad:82:47:79:94:74:00:96:64:65:5d:4c:
         62:6f:b0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:53:17 2026 by rpki-client