This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/k7WMCllWar9Vb7fMD-FNqAGjq8g.roa
File:                     k7WMCllWar9Vb7fMD-FNqAGjq8g.roa (raw, json)
Hash identifier:          +rvK4SmRtwZUO3WvDMk+eBGnMNZJ7s4dXyPjupF/zCo=
Subject key identifier:   93:B5:8C:0A:59:56:6A:BF:55:6F:B7:CC:0F:E1:4D:A8:01:A3:AB:C8
Certificate issuer:       /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial:       019B7A5A8C1AC26CCF2A6B7EE9A3BD35776F
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/k7WMCllWar9Vb7fMD-FNqAGjq8g.roa
Signing time:             Thu 01 Jan 2026 16:18:33 +0000
ROA not before:           Thu 01 Jan 2026 16:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        193.222.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 01:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:8c:1a:c2:6c:cf:2a:6b:7e:e9:a3:bd:35:77:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
        Validity
            Not Before: Jan  1 16:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=93b58c0a59566abf556fb7cc0fe14da801a3abc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3e:25:2a:7c:a0:4e:77:40:aa:4c:90:7b:4f:
                    02:88:88:3f:23:d0:5d:77:f0:12:38:ab:f4:e9:63:
                    b1:3b:c6:22:72:55:0f:5e:88:de:2a:27:42:9e:2d:
                    85:35:00:8e:0b:e2:69:79:7c:6f:fd:a6:a6:b7:82:
                    c8:83:ac:16:41:e7:9c:41:4f:6c:0b:6b:13:1c:46:
                    b8:01:52:80:f7:7c:52:e4:59:f7:4c:4b:20:62:0f:
                    d3:95:21:e6:eb:5c:ac:bf:5d:c8:7b:78:d8:80:e4:
                    5a:f8:b9:74:26:9e:fe:70:5f:69:0b:b1:9f:41:1d:
                    40:70:51:d6:6e:fc:d4:97:8f:85:f4:ae:86:89:98:
                    5f:93:10:b9:3d:79:4d:58:58:d4:72:82:2c:0d:63:
                    f2:e0:04:61:df:5e:15:7b:59:93:db:7b:50:eb:9d:
                    ac:32:a7:54:ad:b9:db:dd:ff:51:ea:c3:3d:f7:4e:
                    3e:ea:a3:52:e9:b7:c4:22:b8:19:31:bb:56:70:3d:
                    6a:49:02:c8:5c:f9:5e:23:8c:b8:23:ea:d0:7f:7d:
                    60:12:0a:96:86:d1:d0:5f:0d:1d:b0:7f:6a:c5:67:
                    88:90:eb:99:bd:8d:ae:24:9c:e8:21:58:2e:b3:8d:
                    5a:64:27:96:b3:85:93:cf:df:90:0c:94:64:c4:e9:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B5:8C:0A:59:56:6A:BF:55:6F:B7:CC:0F:E1:4D:A8:01:A3:AB:C8
            X509v3 Authority Key Identifier:
                keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/k7WMCllWar9Vb7fMD-FNqAGjq8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ed:95:5d:80:9f:1e:c3:95:72:28:aa:f8:73:0e:99:c3:51:
         e2:88:66:51:e0:f6:78:61:e1:59:b5:b9:d1:c1:a0:c8:fb:64:
         7d:42:88:1d:38:e1:75:3b:7d:dc:ef:57:af:04:dc:f9:a9:fe:
         9c:bd:5e:0d:d4:d1:67:76:ce:23:90:1e:fc:6f:da:4e:5e:96:
         5d:4a:79:1b:87:a2:bc:e3:5a:51:87:72:f8:16:9f:73:bf:af:
         18:dd:0c:70:56:46:c4:4f:43:28:4d:ae:6d:58:5a:32:1a:86:
         c1:4e:55:ef:dc:08:4a:0b:9b:8d:04:5f:14:d2:b2:08:02:5f:
         8b:86:29:00:08:9e:59:6f:d7:50:91:05:18:ae:89:c8:68:37:
         41:f4:71:af:a5:5d:38:c9:2a:d4:3d:98:2d:39:59:33:a0:48:
         28:3a:94:8c:75:78:b6:02:37:db:88:d5:48:86:f1:c6:bf:e6:
         96:08:1c:8a:e3:9e:3a:e5:ca:9e:99:81:8e:8f:2e:fb:27:dd:
         1d:04:1b:ca:44:b0:a5:32:ed:5c:ab:5f:2d:11:b8:48:1b:c1:
         12:7e:ea:ab:d6:fd:12:d2:9d:f2:bd:a1:53:3f:97:17:74:93:
         6f:29:b9:7d:b5:59:80:e4:37:16:c1:6f:d7:f3:a1:55:36:e5:
         b9:58:18:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 11:04:02 2026 by rpki-client