This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa
File:                     7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (raw, json)
Hash identifier:          nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=
Subject key identifier:   EE:71:91:04:D8:CC:E6:3E:5E:34:3A:98:CF:E4:D2:4A:FF:78:8F:B4
Certificate issuer:       /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial:       019B7C134C19437607712B868DD9204F603E
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa
Signing time:             Fri 02 Jan 2026 00:19:58 +0000
ROA not before:           Fri 02 Jan 2026 00:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        185.137.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:4c:19:43:76:07:71:2b:86:8d:d9:20:4f:60:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
        Validity
            Not Before: Jan  2 00:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee719104d8cce63e5e343a98cfe4d24aff788fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:8e:91:6f:7f:8e:79:d2:ab:f1:b5:fa:52:
                    5b:18:87:e9:41:e5:75:82:4d:27:ab:92:58:33:b9:
                    87:08:4f:b0:76:52:fb:e1:00:df:18:f4:91:4f:e1:
                    6d:ef:b7:03:08:9a:f0:e8:64:df:31:98:58:ef:cf:
                    68:aa:28:db:0a:23:f9:14:45:43:c4:10:71:fd:40:
                    76:b2:43:7c:0c:29:87:42:1e:c1:3a:be:f9:41:58:
                    57:47:5f:19:a2:9f:65:07:bd:5b:90:56:ee:b6:28:
                    71:9f:f6:2c:12:f7:14:a4:a2:97:ad:2d:bc:ee:09:
                    86:54:72:3e:92:fd:ea:a1:c1:e0:15:e3:01:5b:d0:
                    78:4c:0a:d3:bd:b4:f4:a7:bd:8c:61:7b:6d:78:e3:
                    2a:9a:1f:53:10:8f:5e:97:76:7a:a7:62:c3:29:8a:
                    87:28:2a:2e:f5:79:df:93:1c:f7:13:53:a4:2d:7d:
                    c5:af:de:3f:46:58:ea:a9:1c:9a:f7:ed:00:29:c1:
                    34:b8:6e:40:47:49:2f:4d:a7:e5:bf:b0:8d:eb:de:
                    7f:2f:89:ae:74:e4:22:01:64:4e:f2:ba:96:b6:c4:
                    02:11:29:1b:0c:9b:e9:97:27:3c:05:85:49:96:26:
                    ed:32:89:58:e8:8a:01:96:40:d8:47:ea:1c:fd:2c:
                    8b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:71:91:04:D8:CC:E6:3E:5E:34:3A:98:CF:E4:D2:4A:FF:78:8F:B4
            X509v3 Authority Key Identifier:
                keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a9:6e:c7:ef:e1:c4:27:16:b2:f6:55:de:ad:62:84:15:24:
         b2:39:d0:7e:1e:c3:52:ea:c2:3d:aa:06:b4:7e:c5:ac:66:6d:
         df:17:78:83:fb:76:ad:bb:40:09:07:38:b8:bf:db:9b:45:f4:
         bf:29:46:3f:a2:a0:0d:47:54:55:ad:69:d5:3c:27:18:45:92:
         ef:c6:6a:42:5b:58:99:ef:ea:38:2d:8b:a2:4d:8e:8d:d6:9a:
         15:0f:d3:00:3d:d5:3e:2c:15:75:24:b8:48:be:1e:73:c3:40:
         e0:3a:f5:ac:20:b0:f2:86:3e:71:22:0e:d6:3e:39:14:7c:86:
         68:5f:fa:11:70:81:ce:8d:a3:44:c5:db:d5:90:03:0d:b9:d6:
         c6:00:01:ef:03:d3:9b:f5:50:bc:16:84:10:17:3e:34:f0:7f:
         ae:4f:48:75:e7:12:5e:01:77:ec:7c:3d:4c:6a:ae:e5:61:54:
         4d:8a:71:bd:fb:d9:44:9a:bd:77:78:06:c7:41:bd:ad:14:9f:
         76:f6:4d:68:7a:d5:c6:3b:d9:c6:06:ba:35:1b:fc:38:e9:66:
         f8:32:99:bc:a9:55:71:07:bf:7c:f0:0b:e0:15:ff:a7:89:43:
         59:3c:76:a7:c6:f9:2c:b4:bd:29:99:29:8c:6b:57:e8:03:8a:
         df:6e:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:51:50 2026 by rpki-client