This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/1CTEFp3Jvu1F6k0C2ZBodYWIJDs.roa
File:                     1CTEFp3Jvu1F6k0C2ZBodYWIJDs.roa (raw, json)
Hash identifier:          QqXzCs08vUdvWpceemZhSOwsQeTszW8Ksi9FXrp8nQE=
Subject key identifier:   D4:24:C4:16:9D:C9:BE:ED:45:EA:4D:02:D9:90:68:75:85:88:24:3B
Certificate issuer:       /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial:       019B7910503A7E39499B57501AFF1A489A6D
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/1CTEFp3Jvu1F6k0C2ZBodYWIJDs.roa
Signing time:             Thu 01 Jan 2026 10:17:50 +0000
ROA not before:           Thu 01 Jan 2026 10:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134963
IP address blocks:        194.30.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:50:3a:7e:39:49:9b:57:50:1a:ff:1a:48:9a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
        Validity
            Not Before: Jan  1 10:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d424c4169dc9beed45ea4d02d99068758588243b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:f2:7d:bb:1e:40:0d:de:0b:89:86:4c:81:
                    0f:78:82:f7:d0:d0:ca:f4:ba:42:25:fe:99:7c:4f:
                    81:53:06:ff:90:59:72:92:56:cc:e0:d9:60:c7:c4:
                    68:5c:20:ac:23:4b:98:aa:cf:c2:a0:66:89:12:fb:
                    9c:14:19:9d:0b:6f:b6:05:da:53:7b:4d:48:4f:35:
                    13:e4:c5:43:10:10:0f:27:f8:06:e0:5a:44:9a:0f:
                    5a:2b:2e:75:d4:06:5f:b6:eb:c5:b7:ac:d6:f0:50:
                    d9:4c:d9:c0:e8:e4:b0:22:ef:84:64:c0:a2:b3:e5:
                    3e:23:f0:24:78:7d:e6:3c:7a:d6:95:ee:f3:ab:25:
                    f0:ed:0d:c7:d4:1e:56:2b:44:2a:b1:9b:c5:33:0e:
                    65:53:eb:9f:e4:4e:f4:de:5e:2e:97:5a:ae:54:a9:
                    41:aa:73:3a:16:27:28:0c:30:c4:c6:bf:e7:17:63:
                    9f:53:21:73:27:3b:fd:54:c5:7c:8a:03:1b:c1:76:
                    1b:f8:30:f7:b0:dd:40:3b:36:4e:3f:4f:7e:89:38:
                    92:b9:48:33:d1:ee:32:96:7f:a8:e1:fe:c4:39:62:
                    f8:95:28:a4:a8:d5:40:8e:4a:d8:86:4e:f6:95:d4:
                    6a:00:4d:93:3c:f0:a4:39:7e:0c:07:fb:47:2a:da:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:C4:16:9D:C9:BE:ED:45:EA:4D:02:D9:90:68:75:85:88:24:3B
            X509v3 Authority Key Identifier:
                keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/1CTEFp3Jvu1F6k0C2ZBodYWIJDs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.30.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:c7:ea:e8:6d:0d:3c:69:7f:26:73:83:c3:26:e4:49:04:c6:
         6f:70:dc:06:b8:ce:e2:1a:59:80:4a:c1:22:c8:1f:c1:96:00:
         e6:60:95:d4:2c:2e:ef:67:e5:d1:99:fc:58:a2:c2:de:90:b1:
         39:c0:12:13:81:48:3a:c2:8d:60:ec:31:a0:b8:a2:56:e0:96:
         1b:53:bc:7d:48:87:3a:c7:f6:6c:b1:d7:9c:0a:0c:b6:db:4d:
         84:7a:52:49:be:f8:8a:3b:99:57:de:8b:2e:00:f3:54:c0:ea:
         23:30:25:90:08:07:11:f4:ec:eb:a5:c9:d8:7c:54:79:11:a8:
         d8:9b:9e:bb:51:0a:5d:4b:01:26:bc:b9:36:4a:89:12:2d:3d:
         a3:28:59:f2:c6:a3:fe:b1:23:ad:c2:66:4b:3b:eb:18:63:60:
         09:c7:1f:c3:9d:36:5a:e7:ed:db:67:db:91:c7:4f:52:e5:f8:
         fd:a8:b0:c0:53:3c:45:a9:82:f6:00:ff:48:50:9c:b6:bc:19:
         08:11:de:54:a8:03:7f:b0:fc:71:34:26:a0:0b:fe:3d:e6:ca:
         56:cc:22:b4:42:6f:46:21:8e:78:bd:27:b6:1c:31:98:74:4e:
         cc:ca:0d:2e:2f:75:8a:bd:ed:ad:d7:c1:b6:8a:ec:d7:3f:71:
         0b:b9:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 19:06:42 2026 by rpki-client