This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/f7Z-yQgbhY-mbuerKun7yr_WUAA.roa
File:                     f7Z-yQgbhY-mbuerKun7yr_WUAA.roa (raw, json)
Hash identifier:          atWuTLUfIEIsv5drDtWMJUqZuSDTqKqQ4Je+XdvicgE=
Subject key identifier:   7F:B6:7E:C9:08:1B:85:8F:A6:6E:E7:AB:2A:E9:FB:CA:BF:D6:50:00
Certificate issuer:       /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial:       019B7C131861750047242D0075C890F6BC60
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/f7Z-yQgbhY-mbuerKun7yr_WUAA.roa
Signing time:             Fri 02 Jan 2026 00:19:44 +0000
ROA not before:           Fri 02 Jan 2026 00:19:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210641
IP address blocks:        2a02:dcf::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:18:61:75:00:47:24:2d:00:75:c8:90:f6:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
        Validity
            Not Before: Jan  2 00:19:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7fb67ec9081b858fa66ee7ab2ae9fbcabfd65000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:80:88:ca:28:5c:14:0e:b0:ef:86:75:64:
                    75:70:2f:fc:7e:68:4b:eb:7f:04:17:22:df:19:ea:
                    e0:ea:81:68:ff:b2:fb:c4:4c:f0:1f:a5:93:dc:5b:
                    89:20:2d:da:89:d0:8d:51:1e:01:f9:25:ae:2e:d4:
                    d4:6e:3f:d5:fe:b3:3e:4b:64:8d:65:d4:a7:1e:7f:
                    c2:6a:f1:b9:08:f5:36:71:2a:29:01:5e:78:b6:a1:
                    19:89:a7:8a:0f:1f:09:73:fa:1e:50:73:a6:7e:0d:
                    f1:c1:33:ea:58:92:0a:48:9e:60:57:a9:86:74:70:
                    98:22:fe:49:56:0a:9e:14:23:de:e6:90:ff:52:00:
                    19:09:b7:27:95:c1:cb:30:a2:3d:29:28:f9:bb:61:
                    38:0a:0b:28:16:d1:b7:f3:9c:0e:c5:8f:65:6b:a0:
                    c2:0f:f7:25:53:55:b5:33:c2:22:5e:b7:84:82:aa:
                    1b:8d:83:79:d3:92:00:fd:ba:41:32:73:86:47:95:
                    9a:11:5f:24:28:0f:3a:0c:2d:09:43:b6:c7:df:b9:
                    bd:b9:65:9e:66:e3:ee:57:a0:91:09:58:a5:81:02:
                    c0:c0:c3:99:60:43:4d:41:e4:5e:01:45:9e:19:9d:
                    5c:c8:86:f7:3c:a8:5e:7f:40:19:0c:b9:bd:9d:c0:
                    6f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B6:7E:C9:08:1B:85:8F:A6:6E:E7:AB:2A:E9:FB:CA:BF:D6:50:00
            X509v3 Authority Key Identifier:
                keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/f7Z-yQgbhY-mbuerKun7yr_WUAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:dcf::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:04:bf:81:30:1b:0b:95:02:24:50:b6:d9:79:8e:b8:a0:2d:
         2e:e8:45:88:76:3d:60:2b:1c:84:f9:34:fa:07:6a:6f:14:69:
         eb:ff:a7:19:2c:d3:73:62:51:72:8b:1b:a3:a0:19:da:f7:44:
         b6:00:4d:47:c8:5a:3d:ff:50:ff:16:b2:ba:4a:ba:df:aa:43:
         93:b9:ff:b1:5d:d3:ac:8d:07:28:9d:81:e3:fd:97:6c:66:f6:
         45:ee:20:99:f4:ba:58:1b:ad:f7:f9:d4:7e:ae:9b:68:15:56:
         37:f7:b7:b3:d5:ca:7e:37:08:24:2d:b1:dd:48:59:5d:95:2b:
         22:11:fa:cd:c7:a3:73:cf:d4:c4:4a:23:5c:b7:44:a4:df:2e:
         fe:50:7e:b1:43:8b:60:2f:06:01:ee:6b:05:51:31:c5:9d:b0:
         5e:49:e6:e9:06:c1:f8:ce:85:db:2f:39:e1:5c:ff:07:1d:37:
         0f:62:7f:02:d0:79:9e:40:52:a4:18:5d:4b:ab:e7:32:3e:54:
         67:c0:4f:47:24:6d:22:13:f1:e0:97:ad:9c:93:90:db:bd:8b:
         ae:76:94:67:4d:fb:36:2e:7a:f8:5f:ca:02:d5:d9:3f:81:50:
         0c:e9:d5:1f:6a:82:f7:ae:07:d5:3d:cf:28:14:d7:ae:f0:7d:
         45:20:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:44 2026 by rpki-client