This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/fox27NXVF3hhctk7eDZO3_sQAOY.roa
File:                     fox27NXVF3hhctk7eDZO3_sQAOY.roa (raw, json)
Hash identifier:          26MiypYIS39Ml9eU7Jpgn8zqX9zNFdPBqz0vFNyAW3U=
Subject key identifier:   7E:8C:76:EC:D5:D5:17:78:61:72:D9:3B:78:36:4E:DF:FB:10:00:E6
Certificate issuer:       /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial:       019B77C6FD50F229D8B0FE7584132E83C760
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/fox27NXVF3hhctk7eDZO3_sQAOY.roa
Signing time:             Thu 01 Jan 2026 04:18:08 +0000
ROA not before:           Thu 01 Jan 2026 04:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42781
IP address blocks:        80.184.3.0/24 maxlen: 24
                          80.184.9.0/24 maxlen: 24
                          80.184.10.0/24 maxlen: 24
                          80.184.11.0/24 maxlen: 24
                          80.184.12.0/23 maxlen: 23
                          80.184.17.0/24 maxlen: 24
                          80.184.19.0/24 maxlen: 24
                          80.184.21.0/24 maxlen: 24
                          80.184.24.0/22 maxlen: 22
                          80.184.29.0/24 maxlen: 24
                          80.184.55.0/24 maxlen: 24
                          80.184.56.0/24 maxlen: 24
                          80.184.77.0/24 maxlen: 24
                          80.184.85.0/24 maxlen: 24
                          80.184.95.0/24 maxlen: 24
                          80.184.107.0/24 maxlen: 24
                          80.184.109.0/24 maxlen: 24
                          80.184.110.0/24 maxlen: 24
                          80.184.117.0/24 maxlen: 24
                          80.184.120.0/22 maxlen: 22
                          80.184.124.0/24 maxlen: 24
                          80.184.125.0/24 maxlen: 24
                          80.184.127.0/24 maxlen: 24
                          80.184.135.0/24 maxlen: 24
                          80.184.140.0/23 maxlen: 23
                          80.184.144.0/22 maxlen: 22
                          80.184.148.0/22 maxlen: 22
                          80.184.165.0/24 maxlen: 24
                          80.184.190.0/24 maxlen: 24
                          80.184.200.0/24 maxlen: 24
                          80.184.204.0/22 maxlen: 22
                          80.184.216.0/22 maxlen: 22
                          80.184.221.0/24 maxlen: 24
                          80.184.224.0/22 maxlen: 22
                          80.184.229.0/24 maxlen: 24
                          80.184.245.0/24 maxlen: 24
                          158.94.180.0/23 maxlen: 23
                          158.94.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:fd:50:f2:29:d8:b0:fe:75:84:13:2e:83:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
        Validity
            Not Before: Jan  1 04:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e8c76ecd5d517786172d93b78364edffb1000e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:c5:d9:f3:df:26:2a:38:48:8f:33:9a:5d:
                    ce:22:b4:3f:32:d0:16:ae:dd:27:c8:8c:d8:bf:f0:
                    90:d4:d0:b7:07:68:c7:24:bb:98:b8:2d:34:b1:c1:
                    2a:a8:22:14:6e:ec:46:d5:06:97:c1:7e:d8:4a:e7:
                    5d:ab:66:da:be:e6:ef:91:a3:30:90:f2:e7:39:7d:
                    26:26:be:cc:0a:86:40:a0:c9:74:ea:53:d1:15:b5:
                    5a:d0:25:f8:93:37:76:88:81:58:ba:96:68:0f:bf:
                    fa:96:1b:4c:98:6e:a7:9f:77:43:98:47:4a:ba:5e:
                    ff:28:17:9d:7c:f8:a9:5a:66:96:2b:31:73:6b:45:
                    b2:53:01:3f:c2:56:8b:25:7f:35:b2:7e:16:70:fd:
                    74:0f:f9:08:89:18:f0:7c:8f:41:1c:6a:74:60:c5:
                    70:af:d6:fb:09:eb:23:86:90:95:03:3f:79:ee:57:
                    d0:1c:4a:23:f4:e9:9b:c5:bb:bb:18:0d:99:a1:ef:
                    94:17:71:bd:72:cf:b5:0a:63:9a:66:16:aa:0e:dd:
                    18:4d:35:05:41:d6:a8:16:00:e7:e5:a9:2a:42:21:
                    58:5f:0c:c1:90:95:fc:b2:6a:a5:2f:43:fd:60:87:
                    de:1e:00:89:f5:19:d2:ab:4d:e3:91:34:2d:8d:2c:
                    35:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8C:76:EC:D5:D5:17:78:61:72:D9:3B:78:36:4E:DF:FB:10:00:E6
            X509v3 Authority Key Identifier:
                keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/fox27NXVF3hhctk7eDZO3_sQAOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.184.3.0/24
                  80.184.9.0-80.184.13.255
                  80.184.17.0/24
                  80.184.19.0/24
                  80.184.21.0/24
                  80.184.24.0/22
                  80.184.29.0/24
                  80.184.55.0-80.184.56.255
                  80.184.77.0/24
                  80.184.85.0/24
                  80.184.95.0/24
                  80.184.107.0/24
                  80.184.109.0-80.184.110.255
                  80.184.117.0/24
                  80.184.120.0-80.184.125.255
                  80.184.127.0/24
                  80.184.135.0/24
                  80.184.140.0/23
                  80.184.144.0/21
                  80.184.165.0/24
                  80.184.190.0/24
                  80.184.200.0/24
                  80.184.204.0/22
                  80.184.216.0/22
                  80.184.221.0/24
                  80.184.224.0/22
                  80.184.229.0/24
                  80.184.245.0/24
                  158.94.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:75:ef:90:7d:7e:59:2b:56:19:c1:23:43:5e:7e:ee:9f:a0:
         59:a8:ba:c2:09:55:46:ba:fe:f3:c9:16:6b:a2:f6:e5:d4:89:
         6c:dd:23:91:bf:74:22:ba:d0:ea:e9:48:18:bf:55:9e:e1:43:
         39:40:85:d9:53:89:9d:c0:d2:53:07:7b:f9:a3:db:d0:83:89:
         bd:bc:5a:cd:ca:28:ce:30:6c:34:34:68:a6:f9:5d:64:f3:ca:
         9e:b4:a2:05:cd:29:d6:e5:11:e1:a9:9c:e4:7b:20:32:d4:8c:
         9b:a9:cf:4b:23:12:aa:bf:69:b5:05:4d:2e:cc:95:f1:30:2a:
         a4:64:f1:80:3f:2e:b4:65:e9:f6:0a:75:ff:84:5d:aa:d1:e6:
         3c:a0:6f:4c:10:c8:d8:c5:5d:50:db:4b:7b:4c:76:41:e9:72:
         4b:63:3a:5e:b1:8d:b8:55:82:f1:87:f1:51:0f:d7:5b:ba:89:
         fc:7e:30:13:49:eb:d1:35:0d:8b:4a:9b:56:24:26:f9:c1:cc:
         fa:a0:51:c4:01:ad:2b:20:88:31:77:fe:2d:09:06:c3:98:99:
         fa:da:b6:69:b9:ba:1a:35:55:e5:36:31:f3:07:d1:e4:71:70:
         31:f1:9e:26:92:ef:e6:aa:bc:ee:26:1d:00:65:6b:9d:d5:5e:
         96:b3:d4:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:43:58 2026 by rpki-client