This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa
File:                     RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa (raw, json)
Hash identifier:          BE+VwtKl7zKClVOQGTL8tdfzuTZ8z6XoZx7cFV+84EA=
Subject key identifier:   44:F1:10:AB:73:9E:83:C8:37:7F:81:1B:D8:9D:B8:BD:DB:50:DC:33
Certificate issuer:       /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial:       019B7B361865D03DF08070E2D3369E205CF2
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa
Signing time:             Thu 01 Jan 2026 20:18:21 +0000
ROA not before:           Thu 01 Jan 2026 20:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202788
IP address blocks:        185.154.184.0/22 maxlen: 22
                          185.154.184.0/24 maxlen: 24
                          185.154.185.0/24 maxlen: 24
                          185.154.186.0/24 maxlen: 24
                          185.154.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:18:65:d0:3d:f0:80:70:e2:d3:36:9e:20:5c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
        Validity
            Not Before: Jan  1 20:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44f110ab739e83c8377f811bd89db8bddb50dc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:32:25:1a:69:23:5b:d6:93:d4:19:1d:e6:
                    55:54:34:2b:36:d4:fd:ff:71:3c:0c:fa:8a:d5:71:
                    d0:09:47:fa:90:cd:cb:cd:e1:ac:61:86:1c:46:22:
                    10:ac:52:c9:5b:9a:4f:3f:1d:e8:e7:d0:47:88:82:
                    c7:ae:bb:27:86:a9:ba:73:6e:42:7d:6a:dd:c0:bc:
                    d2:71:a1:50:cc:6a:f7:19:22:5b:a2:27:f0:35:d6:
                    f2:fb:9d:d2:9f:d3:b8:fe:99:6b:f5:10:22:7a:92:
                    20:b6:7f:08:cc:a6:99:a3:1e:55:fb:79:41:aa:92:
                    ae:a3:16:0f:9d:1e:7b:7c:20:70:0f:1b:30:48:58:
                    ef:f4:91:95:6e:ad:47:ee:df:12:4a:32:2c:52:d0:
                    be:67:51:eb:40:37:6f:5d:3a:e4:51:96:6f:75:06:
                    0b:8d:ef:3e:3d:21:ff:87:3c:2c:db:2d:b7:6e:80:
                    e5:92:d9:15:dd:3a:26:25:a6:2d:ae:b9:26:08:91:
                    e6:cb:4a:e0:6b:a3:06:2b:00:7c:fe:7c:af:92:af:
                    a8:6a:c1:19:4b:8d:c2:83:ec:06:c8:f6:be:bf:11:
                    16:91:a1:45:c0:6a:22:da:d0:cc:d7:bd:99:9e:56:
                    f1:0c:21:71:0b:73:78:9c:4a:30:3b:e4:0d:ab:07:
                    ec:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F1:10:AB:73:9E:83:C8:37:7F:81:1B:D8:9D:B8:BD:DB:50:DC:33
            X509v3 Authority Key Identifier:
                keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.154.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:78:f9:54:82:f3:8d:ba:5e:08:a5:08:5b:a3:1b:d3:e8:26:
         af:7d:35:24:58:29:08:fa:61:49:a3:d1:57:b4:0a:9d:7c:18:
         8e:eb:e6:6e:44:da:36:40:bb:f2:6b:68:c3:c8:92:37:1d:35:
         59:c7:7d:8e:de:e3:bb:cb:5b:0d:93:cc:63:b9:d4:e8:e8:57:
         cf:8c:e8:da:96:9b:d6:a9:be:e1:f5:61:5a:7c:94:3d:9d:f2:
         87:35:7f:53:dc:40:bc:e4:f1:05:e7:90:ff:1d:e0:ca:7b:56:
         b4:2d:ff:6f:fa:42:9a:9e:5e:16:f2:02:0e:30:19:0d:29:dc:
         0f:0e:55:57:3c:97:13:10:9f:23:2f:25:39:b2:9f:ca:be:65:
         07:a4:17:2f:0c:7a:5b:1a:63:f5:58:4d:b9:97:6d:96:2f:75:
         36:b5:86:c1:16:35:d7:40:53:52:c3:57:ae:0c:a6:ed:6c:fb:
         cf:a0:ae:a1:ab:a0:05:dd:c1:05:cf:f5:7b:99:44:27:6f:1b:
         75:95:cd:80:e1:a1:fe:b8:3d:06:6c:bb:9c:e8:51:95:8f:1e:
         1b:da:c7:03:7b:a5:d5:6b:67:73:61:3b:8d:df:9d:8a:a4:a6:
         5c:19:8c:e4:37:0c:4d:0c:d4:f5:c5:ae:bb:ed:96:bf:5e:19:
         23:fd:a8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:27 2026 by rpki-client