This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/7Qx48EmBn-OawWJSPpRThxXxGsw.roa
File:                     7Qx48EmBn-OawWJSPpRThxXxGsw.roa (raw, json)
Hash identifier:          vJn+IO3r8KyMcEh7oBKpoGl8tmbKCsu+EUXynkIKhkQ=
Subject key identifier:   ED:0C:78:F0:49:81:9F:E3:9A:C1:62:52:3E:94:53:87:15:F1:1A:CC
Certificate issuer:       /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial:       019B7BA4E78AF7D41A49A4FFD9622F4D3839
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/7Qx48EmBn-OawWJSPpRThxXxGsw.roa
Signing time:             Thu 01 Jan 2026 22:19:23 +0000
ROA not before:           Thu 01 Jan 2026 22:19:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1299
IP address blocks:        80.245.0.0/24 maxlen: 24
                          80.245.1.0/24 maxlen: 24
                          80.245.2.0/24 maxlen: 24
                          80.245.3.0/24 maxlen: 24
                          80.245.4.0/24 maxlen: 24
                          80.245.5.0/24 maxlen: 24
                          80.245.6.0/24 maxlen: 24
                          80.245.7.0/24 maxlen: 24
                          80.245.8.0/24 maxlen: 24
                          80.245.9.0/24 maxlen: 24
                          80.245.10.0/24 maxlen: 24
                          80.245.11.0/24 maxlen: 24
                          80.245.12.0/24 maxlen: 24
                          80.245.13.0/24 maxlen: 24
                          80.245.14.0/24 maxlen: 24
                          80.245.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:e7:8a:f7:d4:1a:49:a4:ff:d9:62:2f:4d:38:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
        Validity
            Not Before: Jan  1 22:19:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed0c78f049819fe39ac162523e94538715f11acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:0f:57:1b:03:7e:f1:99:73:7a:e2:3f:2f:
                    10:37:06:09:42:ce:a7:fa:b3:d8:89:80:7d:93:cb:
                    45:d9:bb:ad:4f:77:b9:a6:59:22:13:c6:4f:33:9f:
                    71:9f:ca:d3:97:32:78:5f:74:50:40:c7:85:95:77:
                    eb:40:f7:90:c6:05:cf:63:70:5a:37:12:f7:38:7a:
                    b9:bd:ab:ed:c8:64:c8:97:73:fb:34:39:d6:e5:d0:
                    bb:e5:1d:b7:6c:51:f7:c0:ef:ea:ab:35:16:65:0b:
                    bf:a7:d2:0d:cf:b9:95:2f:c4:f2:c0:1d:b3:6e:4f:
                    74:42:f7:17:77:e4:2d:63:5d:52:d7:64:f9:c6:91:
                    8d:8f:60:af:fa:85:3b:f4:bd:eb:fa:07:b1:bb:0d:
                    83:85:ca:3d:ae:8e:95:9f:6e:e7:63:02:fd:e2:82:
                    5c:9f:14:68:b4:64:4a:bb:b5:2e:31:a0:15:ce:a7:
                    85:b1:b1:38:26:0e:bf:f5:46:19:8c:96:fc:18:35:
                    6b:ed:3a:e1:78:59:84:fa:67:ab:81:ec:5b:ad:af:
                    7f:0a:53:14:4c:78:40:18:e9:f9:00:b5:5e:05:fc:
                    ee:e5:d7:64:a2:73:81:5f:24:68:b9:65:c7:a8:db:
                    52:fd:07:68:c9:94:91:e8:25:87:19:57:4d:09:78:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0C:78:F0:49:81:9F:E3:9A:C1:62:52:3E:94:53:87:15:F1:1A:CC
            X509v3 Authority Key Identifier:
                keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/7Qx48EmBn-OawWJSPpRThxXxGsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.245.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:21:d5:50:59:6d:28:16:61:62:ed:53:21:0b:dd:55:47:f6:
         76:d0:76:7b:9a:8e:85:a9:7f:e0:bc:93:d7:01:5c:c5:96:c4:
         8d:2b:64:53:96:f4:7d:2b:c9:c6:fa:68:0a:df:dc:ba:95:5a:
         90:79:ee:0c:aa:b2:37:d7:8a:7e:0e:b5:0d:c3:40:6b:bc:c9:
         37:29:55:1c:a8:62:6f:18:a8:67:3f:11:52:8b:14:a5:80:cb:
         9d:29:99:0e:e4:b7:51:c6:c5:76:70:50:18:f4:81:d2:9d:09:
         e1:de:ce:8d:c6:64:48:f2:53:84:59:26:3e:fe:83:8f:15:ad:
         a5:af:a2:48:19:6c:41:f1:06:6e:d9:b9:1c:08:cb:5f:3f:ee:
         b7:72:ef:b1:4e:31:94:4c:f5:3a:e2:36:1e:be:e6:c8:11:11:
         09:53:3b:cd:24:7c:0b:50:58:5d:90:ce:ee:f0:ef:40:a7:8a:
         bb:3f:52:32:80:fd:2f:69:de:02:fc:7f:e2:32:10:3d:ef:c3:
         a6:70:fd:2c:ee:b6:c1:b2:da:58:b3:8c:b3:38:27:04:af:a4:
         1c:2f:c4:ae:04:ea:f0:26:60:ad:45:54:a5:eb:70:2e:5b:e4:
         eb:1f:0a:55:16:4f:66:f0:59:ec:2e:6b:1c:cc:3d:91:94:50:
         f6:d2:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:41 2026 by rpki-client