This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/7WKrJrhvhGi9RYRIgcoWd2xmbkc.roa
File:                     7WKrJrhvhGi9RYRIgcoWd2xmbkc.roa (raw, json)
Hash identifier:          GeJ8x38uiqGaYg3LXRMD8PkKkjHNwyyZii4Sa8DdSEs=
Subject key identifier:   ED:62:AB:26:B8:6F:84:68:BD:45:84:48:81:CA:16:77:6C:66:6E:47
Certificate issuer:       /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Certificate serial:       019B7CEE26D97C1B885C4087676602E94681
Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/7WKrJrhvhGi9RYRIgcoWd2xmbkc.roa
Signing time:             Fri 02 Jan 2026 04:19:00 +0000
ROA not before:           Fri 02 Jan 2026 04:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12480
IP address blocks:        195.42.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:26:d9:7c:1b:88:5c:40:87:67:66:02:e9:46:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
        Validity
            Not Before: Jan  2 04:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed62ab26b86f8468bd45844881ca16776c666e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:fd:f4:7c:6a:c6:a8:f1:70:71:42:ef:7c:
                    57:21:27:1a:e7:54:1c:a4:44:8b:bf:6c:e8:28:7c:
                    6f:fc:00:d0:33:f5:db:c8:2c:8f:9d:93:13:75:14:
                    dd:bf:e9:d6:a0:0f:6f:50:57:7b:aa:8e:fd:08:76:
                    f7:01:c9:c5:51:3c:9f:7c:86:00:eb:3e:f8:1a:94:
                    4b:41:e7:23:8f:7c:22:be:48:32:9e:a7:05:5c:10:
                    00:e2:bf:12:74:e9:df:9f:8b:58:7a:c5:45:fb:8b:
                    44:2d:71:ce:78:24:96:c1:81:18:58:55:f3:52:4d:
                    34:e8:0f:63:fc:41:18:d4:ff:e5:81:cc:3c:27:7a:
                    1f:62:82:4e:07:80:c3:35:23:59:83:90:32:14:90:
                    1e:3e:25:a9:70:bf:b5:ca:97:ed:03:0a:36:e1:e0:
                    04:0b:b8:8c:1c:9c:b1:42:d3:6b:f0:f0:71:c7:f4:
                    94:6a:6f:b0:c1:28:ad:a8:fe:8d:66:b7:32:9d:0a:
                    44:f8:38:ad:2a:c1:32:d2:b3:6b:05:88:aa:6d:20:
                    b0:d0:a3:27:27:88:68:e8:c9:af:fb:2b:30:5d:25:
                    0b:d5:69:e0:90:a2:e1:64:4a:fb:48:ea:51:eb:95:
                    08:c7:22:dc:cc:e0:f8:5b:52:93:11:9e:8e:2b:35:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:62:AB:26:B8:6F:84:68:BD:45:84:48:81:CA:16:77:6C:66:6E:47
            X509v3 Authority Key Identifier:
                keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/7WKrJrhvhGi9RYRIgcoWd2xmbkc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.42.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:2c:b3:e4:05:fd:53:84:37:0f:30:f4:0a:f8:63:e1:3e:ad:
         b2:71:5e:8e:c9:38:4c:de:67:02:46:9a:3f:69:5e:b7:79:86:
         0e:89:18:d1:55:fe:84:88:67:2f:26:8e:e3:b1:a9:ad:1a:df:
         f6:f9:33:b4:33:0a:ad:f3:2d:3c:8f:f3:0f:23:4b:86:de:8c:
         7b:0e:ac:ae:1a:fb:ef:55:7c:9a:ee:40:54:70:05:4b:93:0c:
         5e:dc:d0:02:71:e0:5d:bd:e6:82:57:a1:4f:c4:07:81:76:24:
         a5:08:50:74:45:c4:d9:e2:3c:9b:a4:cd:2b:32:d4:d9:9c:22:
         fb:d5:0b:0c:6d:ec:b9:42:c1:b5:18:ec:ef:d4:73:41:39:84:
         35:13:74:ee:89:c0:5a:c9:1c:a1:e5:74:6e:fb:ec:40:cd:08:
         96:2e:53:cd:9c:a8:55:7c:e4:43:64:60:7d:9c:f2:bd:f2:e9:
         14:0f:9f:a8:31:b1:2b:93:f5:a1:5b:af:2d:93:d7:98:c6:b0:
         3d:24:b5:cc:c4:c6:83:78:52:48:3d:9f:a3:f7:71:69:ab:8d:
         12:f8:db:0f:d3:48:d3:b5:ed:8f:d3:f0:17:e5:0f:ad:cd:93:
         6f:24:92:d9:7c:6e:84:55:02:0b:b4:23:f7:3c:5a:62:a8:d4:
         76:03:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:34:59 2026 by rpki-client