This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/SEcs47zxHnaub6zbYmRibja7-0k.roa
File:                     SEcs47zxHnaub6zbYmRibja7-0k.roa (raw, json)
Hash identifier:          BgJ+K19PECi1+Y95OlHSkHUKKE4El4/40Gb09u3R0LE=
Subject key identifier:   48:47:2C:E3:BC:F1:1E:76:AE:6F:AC:DB:62:64:62:6E:36:BB:FB:49
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       019B7C133AF7CA1C337836DDFD4A72D2A2DF
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/SEcs47zxHnaub6zbYmRibja7-0k.roa
Signing time:             Fri 02 Jan 2026 00:19:53 +0000
ROA not before:           Fri 02 Jan 2026 00:19:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200081
IP address blocks:        185.75.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 13:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:3a:f7:ca:1c:33:78:36:dd:fd:4a:72:d2:a2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Jan  2 00:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48472ce3bcf11e76ae6facdb6264626e36bbfb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:a5:ba:22:16:83:50:97:e8:84:dc:52:c6:
                    d8:2c:e5:e6:74:aa:00:50:5d:ee:d6:f5:9a:6d:f5:
                    f4:ff:e9:eb:06:ea:2b:87:cd:86:02:72:ca:46:c6:
                    eb:1c:09:b8:69:8c:67:d7:1c:e7:89:7e:1e:4d:ac:
                    35:04:3c:f3:a8:88:08:b9:9f:48:56:05:0a:c2:af:
                    72:64:7a:b8:db:1b:0a:a0:91:e8:64:49:40:8d:fe:
                    8b:fe:93:1a:79:c9:fd:33:49:57:91:2d:49:fb:33:
                    b0:01:08:30:6b:0c:0a:17:57:a0:f3:17:8a:d6:e8:
                    b2:ee:38:18:c2:be:14:ef:c2:b1:a5:0b:ec:de:40:
                    f8:12:75:a2:86:dc:1c:bb:dc:25:3f:28:7f:9b:0c:
                    08:cc:04:41:ae:b3:62:cd:f8:45:1e:5c:a8:b1:e9:
                    db:7b:cd:4c:73:52:73:9b:91:68:73:07:79:6e:52:
                    e0:2c:29:04:ab:9d:54:6d:d7:af:c9:8f:61:04:2c:
                    24:0b:4c:17:a9:50:e2:18:10:9d:cd:41:0c:dd:96:
                    e3:17:d9:0b:36:2b:fc:f2:ae:10:05:4a:c2:b8:61:
                    9a:88:dd:a8:a7:6d:87:51:50:9a:34:26:e6:d5:b1:
                    bb:6b:a4:ef:18:ee:b9:15:6d:4f:d7:c7:8f:87:cc:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:47:2C:E3:BC:F1:1E:76:AE:6F:AC:DB:62:64:62:6E:36:BB:FB:49
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/SEcs47zxHnaub6zbYmRibja7-0k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b9:88:ba:05:a0:94:2f:19:d7:8d:9c:2f:57:6b:1b:2e:20:
         7f:ac:3c:9b:4a:33:19:ea:d5:81:10:32:0c:eb:40:2c:e7:e0:
         b2:e3:e7:17:c9:3e:c6:c6:a7:a9:cb:41:97:48:44:dd:5d:0f:
         f8:5d:53:e3:e1:55:9d:58:bc:52:ac:91:93:d6:73:99:f4:25:
         5d:f6:16:3f:3a:91:96:81:e8:2a:5b:b2:b9:ce:be:7c:05:d5:
         72:38:44:9a:5c:9f:d7:41:1e:f4:ef:05:1c:ca:e8:d7:8d:2d:
         59:0a:75:02:41:71:21:82:e4:c8:74:d1:49:34:68:d7:c4:4f:
         00:14:a5:3c:46:c7:1d:7e:3a:b2:4d:13:06:38:ba:91:b8:e8:
         3a:11:ac:19:c5:c6:ef:86:89:10:c9:d1:86:6f:1e:c2:35:99:
         25:79:54:28:f2:9b:64:47:4e:2f:ea:5d:1e:5c:30:d6:a5:3c:
         3a:31:c8:5e:0b:e0:41:26:bf:94:b8:87:37:a5:4d:75:73:3f:
         0e:af:67:89:e1:0f:61:1e:35:be:63:c5:13:3d:25:62:b1:0d:
         f2:fe:64:1e:49:9b:b2:a8:98:89:bf:da:5c:a6:25:0c:5d:8a:
         f3:fe:27:3c:fe:d9:6d:fc:b8:08:9a:a3:0b:ce:a6:55:82:ce:
         8c:06:4f:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Ezr3yhwzeDbd/Upy0qLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4
OWU4NWIwHhcNMjYwMTAyMDAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODQ3MmNlM2JjZjExZTc2YWU2ZmFjZGI2MjY0NjI2ZTM2YmJmYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4KluiIWg1CX6ITcUsbYLOXmdKoA
UF3u1vWabfX0/+nrBuorh82GAnLKRsbrHAm4aYxn1xzniX4eTaw1BDzzqIgIuZ9I
VgUKwq9yZHq42xsKoJHoZElAjf6L/pMaecn9M0lXkS1J+zOwAQgwawwKF1eg8xeK
1uiy7jgYwr4U78KxpQvs3kD4EnWihtwcu9wlPyh/mwwIzARBrrNizfhFHlyosenb
e81Mc1Jzm5Focwd5blLgLCkEq51UbdevyY9hBCwkC0wXqVDiGBCdzUEM3ZbjF9kL
Niv88q4QBUrCuGGaiN2op22HUVCaNCbm1bG7a6TvGO65FW1P18ePh8ys9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhHLOO88R52rm+s22JkYm42u/tJMB8GA1UdIwQY
MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt
NmVlNTM0ZDkyZTUyLzEvU0VjczQ3enhIbmF1YjZ6YlltUmliamE3LTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy
LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUuGMA0G
CSqGSIb3DQEBCwUAA4IBAQB9uYi6BaCULxnXjZwvV2sbLiB/rDybSjMZ6tWBEDIM
60As5+Cy4+cXyT7Gxqepy0GXSETdXQ/4XVPj4VWdWLxSrJGT1nOZ9CVd9hY/OpGW
gegqW7K5zr58BdVyOESaXJ/XQR707wUcyujXjS1ZCnUCQXEhguTIdNFJNGjXxE8A
FKU8RscdfjqyTRMGOLqRuOg6EawZxcbvhokQydGGbx7CNZkleVQo8ptkR04v6l0e
XDDWpTw6McheC+BBJr+UuIc3pU11cz8Or2eJ4Q9hHjW+Y8UTPSVisQ3y/mQeSZuy
qJiJv9pcpiUMXYrz/ic8/tlt/LgImqMLzqZVgs6MBk/i
-----END CERTIFICATE-----
Generated at Tue Jan 20 19:51:17 2026 by rpki-client