This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/7o3HU3pC1XthlFE5rMAnOdMOkGY.roa
File:                     7o3HU3pC1XthlFE5rMAnOdMOkGY.roa (raw, json)
Hash identifier:          x+AUbDFdu4k2QNBnXRev35S/cF6y/B0UGwPHMfJj01k=
Subject key identifier:   EE:8D:C7:53:7A:42:D5:7B:61:94:51:39:AC:C0:27:39:D3:0E:90:66
Certificate issuer:       /CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
Certificate serial:       019B7F842E1B08524ECFEE5C92C8949C7DC9
Authority key identifier: B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/7o3HU3pC1XthlFE5rMAnOdMOkGY.roa
Signing time:             Fri 02 Jan 2026 16:22:07 +0000
ROA not before:           Fri 02 Jan 2026 16:22:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39516
IP address blocks:        194.50.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:2e:1b:08:52:4e:cf:ee:5c:92:c8:94:9c:7d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4395f6cea9a018a4cc84818e6aa3520d322218b
        Validity
            Not Before: Jan  2 16:22:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee8dc7537a42d57b61945139acc02739d30e9066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:76:06:70:2f:63:46:d3:19:ab:ab:9b:d0:f3:
                    ed:df:ca:41:e5:ae:e2:85:c4:3a:a8:69:0f:b1:b1:
                    98:87:37:47:bf:24:2a:e0:54:15:96:9d:d8:a7:d5:
                    d8:43:33:3d:5b:9c:3a:01:20:4f:74:5a:b8:f4:f4:
                    01:1c:7c:4a:43:3b:58:7f:f5:b1:02:ea:64:cf:07:
                    53:82:68:05:c6:b9:d9:4e:b2:fa:a6:be:74:57:6d:
                    53:b2:9f:cd:3a:9d:0f:b4:35:e0:c0:68:c1:d1:f0:
                    13:a5:7c:5a:1c:5c:7b:8a:1a:af:20:75:bd:a6:ea:
                    0a:6d:c3:7f:d6:91:e9:16:6f:92:e9:fb:70:d9:2b:
                    b0:4f:55:a9:5f:4a:6c:f8:0c:e3:4e:94:1b:c2:60:
                    e6:a5:62:30:af:88:cd:83:9c:fd:c8:93:ae:45:3a:
                    97:c4:a2:7e:11:77:59:5e:0c:c5:df:7f:ac:a0:c3:
                    a2:1f:13:d7:63:e9:db:de:e2:4d:5d:f3:fc:49:04:
                    3b:1b:51:8c:02:ad:f4:80:b7:81:d3:8f:2c:6a:b3:
                    3d:22:d5:20:14:cb:13:d2:43:38:c9:62:a7:8b:f2:
                    d5:5f:82:28:1a:0c:45:d1:e4:73:c6:28:a2:0f:ca:
                    70:09:ba:b7:5a:ce:89:ca:0a:fd:5d:ce:4e:df:23:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8D:C7:53:7A:42:D5:7B:61:94:51:39:AC:C0:27:39:D3:0E:90:66
            X509v3 Authority Key Identifier:
                keyid:B4:39:5F:6C:EA:9A:01:8A:4C:C8:48:18:E6:AA:35:20:D3:22:21:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlfbOqaAYpMyEgY5qo1INMiIYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/7o3HU3pC1XthlFE5rMAnOdMOkGY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1e5c88-c3fc-4e76-bc65-391fec267dae/1/tDlfbOqaAYpMyEgY5qo1INMiIYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:73:34:b3:14:9b:c7:ca:81:62:83:86:37:1e:cc:9c:06:c3:
         4c:a9:db:13:a9:d4:a3:bf:35:df:47:75:54:5b:e5:08:ae:6c:
         b4:a2:75:0d:e0:77:2b:ba:b3:27:f4:97:c2:5a:45:72:b1:ed:
         78:96:92:85:69:b6:59:3e:70:5a:14:5d:c3:ef:e5:4d:2c:85:
         43:ba:02:ee:e1:46:e4:0a:d5:d2:c3:83:0a:73:2f:b2:6e:cc:
         12:4e:df:2a:12:b9:c8:c4:1a:44:e0:bb:8c:35:e6:9b:da:51:
         a5:3e:2c:5a:f6:b1:7e:98:09:f1:5d:e3:a4:c0:8e:a7:f3:01:
         35:ff:c7:ad:0a:28:ba:e3:07:67:90:56:29:a2:34:bc:0d:34:
         1a:59:52:30:cd:d4:fc:c8:29:d8:84:6a:c8:ed:18:1c:93:06:
         46:0c:67:f2:e1:5f:33:20:2d:bc:86:25:37:80:d4:04:4b:de:
         17:fd:fb:b1:94:84:22:90:37:f3:ee:e4:10:c1:6a:b1:60:b2:
         2e:db:07:a1:5d:f6:b6:23:d9:3e:b5:b7:30:fe:6e:32:79:27:
         1c:dc:00:8f:0c:41:df:15:a5:b1:c1:bd:e4:79:d2:ce:2a:99:
         6c:dc:5e:07:ba:5e:b6:9d:d1:dd:37:55:b4:c2:46:61:c2:71:
         bc:41:aa:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:11 2026 by rpki-client