This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ebW6fP07GSExHXJnIRkPI1CffRo.roa
File:                     ebW6fP07GSExHXJnIRkPI1CffRo.roa (raw, json)
Hash identifier:          wesCxXzhjpD69gFx3Itq09Mse/YEDloriSNJY1Xbmi4=
Subject key identifier:   79:B5:BA:7C:FD:3B:19:21:31:1D:72:67:21:19:0F:23:50:9F:7D:1A
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019C267CABF6173489B92FBB89ABFA2AC6C6
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ebW6fP07GSExHXJnIRkPI1CffRo.roa
Signing time:             Wed 04 Feb 2026 02:30:30 +0000
ROA not before:           Wed 04 Feb 2026 02:30:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        212.100.164.0/22 maxlen: 22
                          212.100.166.0/24 maxlen: 24
                          212.100.167.0/24 maxlen: 24
                          212.100.172.0/22 maxlen: 22
                          212.100.176.0/22 maxlen: 24
                          212.100.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:26:7c:ab:f6:17:34:89:b9:2f:bb:89:ab:fa:2a:c6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Feb  4 02:30:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79b5ba7cfd3b1921311d726721190f23509f7d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:46:6e:2c:fc:9f:4d:38:12:2d:d1:25:78:
                    5e:16:c7:20:a7:37:8c:2c:eb:10:12:7f:d7:f9:e1:
                    fc:ae:e4:d9:fb:cb:d2:cb:a6:1e:4c:d1:31:15:ec:
                    9d:8b:11:1e:4a:51:5d:24:0b:9b:e9:9a:60:da:69:
                    eb:b2:5d:05:65:fc:37:b7:9b:45:62:b2:c7:cc:97:
                    88:f9:92:e8:a2:59:c9:ee:07:15:74:b0:bc:8a:c6:
                    9f:67:13:5c:6b:9c:26:89:67:23:7d:b9:97:c3:1f:
                    9f:60:c1:0f:ef:93:04:4e:6c:92:d5:8a:1c:d2:c6:
                    17:84:f4:0a:98:51:55:96:04:c8:56:fb:ac:a6:7f:
                    6f:59:4a:80:7c:50:b4:45:5a:27:2d:13:81:52:ca:
                    d8:f1:a9:62:4a:d9:d8:48:51:f9:74:37:fe:01:a7:
                    c8:74:db:00:f5:f1:34:31:2a:e9:73:b4:a5:7f:1e:
                    88:23:73:ec:6e:d0:e2:ad:eb:2a:6f:4d:09:ba:51:
                    09:a5:d4:c3:40:27:9f:ee:b9:e5:ff:0f:8b:d6:d1:
                    9a:92:5c:97:81:fa:42:36:fc:22:8f:6b:64:32:1c:
                    34:89:ff:0e:6b:b8:7f:c1:d2:1d:85:04:b7:57:eb:
                    8a:3e:24:32:10:61:62:ad:b3:7e:71:a7:13:fc:85:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:BA:7C:FD:3B:19:21:31:1D:72:67:21:19:0F:23:50:9F:7D:1A
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/ebW6fP07GSExHXJnIRkPI1CffRo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.164.0/22
                  212.100.172.0-212.100.179.255
                  212.100.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:8d:95:a1:fc:25:bd:9e:da:da:44:31:d2:a5:40:a2:58:
         68:6c:d7:a1:30:92:d3:e8:ec:74:83:84:62:93:cf:45:a6:8f:
         85:e8:b3:08:4d:6f:8d:db:ff:f6:3a:56:95:84:98:b0:42:8b:
         76:8d:3e:77:fb:07:ba:a5:16:f5:38:f7:db:8d:30:ed:7f:bc:
         ce:e9:bd:a3:4e:bf:f3:03:df:12:36:eb:fb:8c:bc:bc:d3:a3:
         d8:61:fc:ab:07:0c:55:8e:da:d6:6a:5a:bd:bb:98:b2:56:53:
         30:6a:67:c7:69:8b:6e:cc:ff:5d:2d:7a:09:8b:a4:67:34:c1:
         10:7b:85:45:8f:99:56:2a:30:c8:da:48:48:9a:3c:1b:fd:44:
         45:9b:04:57:0d:f3:11:68:4c:6a:31:48:bf:5f:8a:46:1c:65:
         db:0b:df:2e:ab:c9:2a:9a:e8:79:c9:32:28:57:02:a6:ba:3b:
         b3:c6:61:01:eb:70:cd:7c:16:18:85:7c:f9:6a:da:c6:4a:d4:
         87:c9:66:52:2b:18:84:68:d0:eb:ca:49:31:23:9e:73:b9:28:
         36:9e:fd:29:d5:ab:c8:58:c6:45:31:6f:0e:7b:f6:22:3e:27:
         5e:d1:0f:4a:65:a3:c7:88:b2:b4:0f:f9:2c:70:6e:46:34:f7:
         1f:26:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 09:48:18 2026 by rpki-client