This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa
File:                     MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa (raw, json)
Hash identifier:          0pzaFGjjnJFM3Mi6/Z0qJhoLAoydrAANnuMwOCc5Kso=
Subject key identifier:   32:E4:32:89:E0:A0:C4:F2:53:D1:24:6F:E9:78:FF:1B:19:22:07:E2
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       019B7CEDB8976E0CB145316A480720CDD5D8
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa
Signing time:             Fri 02 Jan 2026 04:18:32 +0000
ROA not before:           Fri 02 Jan 2026 04:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        195.114.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:b8:97:6e:0c:b1:45:31:6a:48:07:20:cd:d5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Jan  2 04:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=32e43289e0a0c4f253d1246fe978ff1b192207e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:2a:1a:61:55:18:0e:41:90:5f:7d:18:c8:
                    5e:f5:a2:18:81:7a:3b:eb:74:50:f5:88:bb:ec:3c:
                    f9:63:04:43:d5:b2:d4:53:ba:13:62:e5:d8:91:c3:
                    1d:01:34:c5:c8:e9:0d:b4:a1:99:27:15:19:5b:f8:
                    1d:48:6a:82:93:09:54:76:27:7b:7f:e9:b0:05:56:
                    4f:10:80:58:e6:f3:c0:43:75:d0:0b:46:09:3d:7c:
                    f0:c8:d0:da:c3:20:0d:ef:da:c5:4f:14:a6:c0:57:
                    56:23:13:d3:06:9f:47:31:72:09:d0:af:1d:d6:62:
                    ca:78:3b:e9:2d:e5:f5:ae:11:87:4e:6e:a1:ee:39:
                    83:6b:d2:a3:5f:4f:c8:1e:3f:50:6e:05:3b:2d:53:
                    05:3d:27:ab:ad:56:af:17:99:d2:b6:0b:78:44:0a:
                    4c:36:16:6b:b9:1b:80:17:f9:f0:13:12:aa:af:76:
                    7e:66:10:7c:71:89:63:ce:18:5e:f0:d3:33:c9:9f:
                    30:1b:6c:fe:c5:40:37:f3:11:97:4c:6b:ba:e2:d8:
                    b6:0c:f1:81:68:6c:73:e5:c2:fb:64:f6:85:86:39:
                    82:d9:f4:e3:40:85:fe:b6:44:20:f4:6e:d6:fa:cb:
                    2b:3a:46:1e:dd:a3:10:fe:7a:af:50:4c:99:80:7c:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E4:32:89:E0:A0:C4:F2:53:D1:24:6F:E9:78:FF:1B:19:22:07:E2
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:cf:50:f8:37:d3:fc:31:9a:9a:64:1a:19:e5:48:78:f7:49:
         f7:31:ee:0a:40:e3:32:e5:ab:7e:0b:5b:f8:8c:7e:89:d9:d3:
         cf:74:12:c9:e8:55:18:79:4c:e7:63:a7:7a:a9:50:a2:ac:9a:
         13:d8:59:12:54:7f:9b:90:48:cc:79:36:17:20:f9:8e:fc:f5:
         18:70:c0:bd:8b:cd:5a:b2:40:6d:ae:2a:a5:ba:d2:f1:3d:bf:
         e0:3c:35:d5:8b:45:12:5f:b7:ad:73:d7:40:06:c0:4f:58:b4:
         38:fd:38:f9:c1:fb:95:ee:e5:5e:57:9c:56:f4:ce:00:13:e2:
         ee:f6:ed:91:91:e5:4d:ee:2e:4b:07:70:4c:ce:c9:99:f0:38:
         cb:95:77:2f:bc:71:fd:f3:53:e9:93:ae:58:c9:17:9a:c3:c2:
         86:61:3d:0d:26:65:db:d5:b5:d9:9e:8c:88:60:ab:da:31:14:
         82:0e:1c:de:a9:43:90:05:33:75:d6:f1:88:79:7e:58:a9:cb:
         a5:63:1c:c7:f5:b1:b0:40:31:79:bb:39:69:f1:3d:9d:a2:ff:
         bf:02:da:8c:6f:7b:cd:af:1f:e2:09:37:10:81:1a:eb:b8:b1:
         3a:63:f0:ea:4f:aa:ad:23:c3:04:67:e4:cb:55:f6:70:c5:39:
         bb:0c:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:35 2026 by rpki-client