This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/eG7fxABMtqyI5yUjBnhzemDqnwY.roa
File:                     eG7fxABMtqyI5yUjBnhzemDqnwY.roa (raw, json)
Hash identifier:          HFmCfi29zh6VfW2O1TlhihYlPxvODE9zNcg66Ls00yA=
Subject key identifier:   78:6E:DF:C4:00:4C:B6:AC:88:E7:25:23:06:78:73:7A:60:EA:9F:06
Certificate issuer:       /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial:       019B77C74FA84A1AF114601E16B136BF5499
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/eG7fxABMtqyI5yUjBnhzemDqnwY.roa
Signing time:             Thu 01 Jan 2026 04:18:29 +0000
ROA not before:           Thu 01 Jan 2026 04:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35660
IP address blocks:        185.139.44.0/24 maxlen: 24
                          185.139.45.0/24 maxlen: 24
                          185.139.46.0/24 maxlen: 24
                          185.139.47.0/24 maxlen: 24
                          185.157.140.0/24 maxlen: 24
                          185.157.141.0/24 maxlen: 24
                          185.157.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:4f:a8:4a:1a:f1:14:60:1e:16:b1:36:bf:54:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
        Validity
            Not Before: Jan  1 04:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=786edfc4004cb6ac88e725230678737a60ea9f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:57:1e:d0:e7:f9:87:5c:8a:34:24:ab:23:1f:
                    91:51:b4:66:0d:50:24:b4:36:29:3d:14:83:a8:a9:
                    87:9c:06:d5:d0:b7:fa:5f:d5:15:dc:69:8d:41:b8:
                    d4:d8:5e:d9:65:32:5c:ba:bc:9e:83:44:e1:93:60:
                    13:17:88:ca:15:e7:89:1b:7c:90:11:60:91:74:0a:
                    9a:13:4e:1b:23:f0:6e:fe:54:d0:e0:ed:02:43:80:
                    db:44:72:2c:05:85:15:58:62:82:30:f2:bd:e9:09:
                    62:f4:79:48:bc:7b:c1:0b:82:b0:96:8f:bf:18:30:
                    46:b6:0a:e3:da:d3:9d:f4:1a:58:59:a0:41:95:f4:
                    93:76:27:f4:4f:29:ed:8d:36:02:85:7e:29:b3:52:
                    41:c5:1f:d7:f5:33:32:23:96:06:04:c9:9c:65:8f:
                    20:f4:1c:1e:02:fc:0e:37:c0:ee:09:35:37:57:e1:
                    10:4c:ed:da:75:d9:b4:42:be:fe:6f:ec:1f:2f:6f:
                    3f:8c:36:2b:31:2c:ec:c2:eb:7a:92:da:3d:a1:f7:
                    e8:da:38:06:ac:71:c6:a3:61:c8:13:be:07:25:58:
                    13:11:0b:c2:84:6b:30:4a:c7:d9:66:bc:3a:b4:28:
                    85:80:0f:6c:f3:71:75:a9:e0:4d:6f:a3:6d:10:e3:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6E:DF:C4:00:4C:B6:AC:88:E7:25:23:06:78:73:7A:60:EA:9F:06
            X509v3 Authority Key Identifier:
                keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/eG7fxABMtqyI5yUjBnhzemDqnwY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.44.0/22
                  185.157.140.0-185.157.142.255

    Signature Algorithm: sha256WithRSAEncryption
         8c:25:2b:dd:9c:48:30:3b:9b:79:bd:63:7e:f1:84:ad:0d:fc:
         4c:3f:70:d1:5a:20:8c:8e:97:04:da:da:6a:98:4c:fe:ad:cc:
         71:09:bb:ce:f3:a3:7a:2e:fd:a6:7a:ab:b7:4b:ac:62:ea:89:
         9e:42:c9:4a:b7:8d:9a:ed:1e:74:43:f9:14:46:45:d6:58:e2:
         c7:db:47:78:0f:3d:c5:02:fc:50:04:7d:e2:aa:fc:e1:65:6c:
         8a:5a:0a:90:e9:1d:b7:37:f2:3d:a4:b1:dc:d2:00:0b:3e:d0:
         13:d6:ed:c5:ba:0d:53:32:85:2c:87:6f:a0:1a:c0:da:4e:31:
         b2:5d:b3:0b:ed:cb:b8:6b:1d:8e:49:45:c2:4d:dd:23:b3:8e:
         a3:57:97:ef:53:b2:a0:bf:2d:3b:97:4e:85:f0:e7:77:da:d2:
         fb:6b:ce:a7:8f:df:ec:82:1d:4b:b3:f8:39:5a:3d:f1:df:6d:
         9c:b9:84:8a:40:05:71:d7:5c:71:c2:0e:2d:d8:7f:38:2d:40:
         65:c9:d2:ae:39:0f:23:c2:97:a2:81:35:d6:49:3f:61:e2:06:
         2b:50:22:05:58:32:c6:e1:24:e0:de:89:f8:c5:0d:08:c7:f6:
         10:59:50:6f:4c:b6:57:c7:ea:45:49:90:b4:4a:22:cd:43:b9:
         70:a1:96:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:26:30 2026 by rpki-client