This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/R7Cay2ueq0WnTCeL2uX-2wJUHco.roa
File:                     R7Cay2ueq0WnTCeL2uX-2wJUHco.roa (raw, json)
Hash identifier:          GQcuyMDby4kskPuI7EodSnNGXQ1UXDDiaDHBI1s2tqA=
Subject key identifier:   47:B0:9A:CB:6B:9E:AB:45:A7:4C:27:8B:DA:E5:FE:DB:02:54:1D:CA
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       019B7DC89ABBA42C1B201AB03908EE899CC7
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/R7Cay2ueq0WnTCeL2uX-2wJUHco.roa
Signing time:             Fri 02 Jan 2026 08:17:37 +0000
ROA not before:           Fri 02 Jan 2026 08:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        92.53.180.0/22 maxlen: 24
                          92.53.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 02:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c8:9a:bb:a4:2c:1b:20:1a:b0:39:08:ee:89:9c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Jan  2 08:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47b09acb6b9eab45a74c278bdae5fedb02541dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:82:07:92:4b:04:70:66:e0:63:1c:18:b3:
                    0d:98:2f:38:15:29:e3:06:d6:5c:3d:6e:fa:3d:b6:
                    69:31:f3:dc:d3:83:32:58:28:99:e4:07:99:fe:8a:
                    7e:35:5b:2d:2b:bf:b9:6e:b5:10:12:3b:f6:d9:fa:
                    2c:65:a3:de:76:28:d2:6a:e6:9d:b6:b5:60:21:b9:
                    11:86:70:1c:81:b4:0c:40:0f:72:99:ce:3c:01:f7:
                    b8:07:31:04:c4:be:e5:29:be:dd:a9:70:cb:68:50:
                    af:e9:d8:d0:ff:08:33:2a:61:0f:8e:7c:69:f9:06:
                    eb:dc:6a:98:01:f8:e0:47:d6:c3:4d:9d:57:47:c2:
                    43:d4:23:4e:3d:08:e6:09:c0:4c:45:a1:d8:1c:b6:
                    72:de:22:e8:27:b5:7e:b2:6b:04:37:2e:1f:d2:1b:
                    ec:65:d9:a9:66:9b:10:2a:4e:42:8a:8e:8d:26:aa:
                    42:45:f4:71:97:e5:17:52:55:35:95:62:d3:57:c1:
                    ca:9d:90:11:06:fe:f5:fc:f1:41:84:64:24:f6:2d:
                    6c:4a:0d:8d:14:9f:e5:b4:58:0c:09:4a:f3:c7:f4:
                    32:90:c4:b1:08:79:66:3b:1e:d6:fd:da:aa:92:98:
                    ee:88:6f:84:c0:2c:2d:7d:63:20:e9:2e:a7:0d:22:
                    25:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:9A:CB:6B:9E:AB:45:A7:4C:27:8B:DA:E5:FE:DB:02:54:1D:CA
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/R7Cay2ueq0WnTCeL2uX-2wJUHco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.180.0-92.53.187.255

    Signature Algorithm: sha256WithRSAEncryption
         09:e3:e7:ca:e6:9e:af:0d:21:d1:34:fc:79:85:da:32:1f:bf:
         63:c2:c9:76:d9:f6:0f:5d:64:da:b0:9d:0d:82:34:43:e6:ac:
         77:25:ac:30:05:b7:29:e6:a5:9b:3d:f7:d6:4f:d9:1c:15:22:
         a2:bb:83:2e:c9:4b:09:72:3d:9f:45:93:0a:9e:80:04:92:9f:
         97:46:f4:8b:61:84:3b:01:d2:37:e4:3c:95:a0:75:af:53:7c:
         e7:ff:43:95:f5:e3:df:93:e0:f1:eb:b9:96:d3:07:b5:4a:ff:
         84:ae:ab:d5:50:c9:c1:9c:ee:71:9a:5e:22:fa:8f:c1:42:22:
         0b:5f:65:3e:d4:ff:dd:93:3b:e7:df:d6:69:bd:41:81:c9:80:
         6b:75:fc:6e:50:3c:52:c5:7b:5c:4a:13:6a:a3:10:be:75:b6:
         6b:17:6d:36:61:c1:d7:f4:67:6f:52:62:f7:c4:43:ae:12:2c:
         5d:7f:1e:43:6a:c8:71:ce:50:46:ea:62:58:9d:9a:d2:95:0a:
         50:6d:82:3c:82:c5:2d:bc:6b:d3:17:b8:13:49:83:59:4c:87:
         7e:f2:e0:cf:3a:a9:96:12:91:88:31:35:65:e2:b6:d0:6e:f6:
         6b:22:c6:c0:92:51:37:27:49:a7:67:56:a4:d5:68:bc:54:66:
         2b:dd:b3:47
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZt9yJq7pCwbIBqwOQjuiZzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjYwMTAyMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2IwOWFjYjZiOWVhYjQ1YTc0YzI3OGJkYWU1ZmVkYjAyNTQxZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwuCB5JLBHBm4GMcGLMNmC84FSnj
BtZcPW76PbZpMfPc04MyWCiZ5AeZ/op+NVstK7+5brUQEjv22fosZaPedijSauad
trVgIbkRhnAcgbQMQA9ymc48Afe4BzEExL7lKb7dqXDLaFCv6djQ/wgzKmEPjnxp
+Qbr3GqYAfjgR9bDTZ1XR8JD1CNOPQjmCcBMRaHYHLZy3iLoJ7V+smsENy4f0hvs
ZdmpZpsQKk5Cio6NJqpCRfRxl+UXUlU1lWLTV8HKnZARBv71/PFBhGQk9i1sSg2N
FJ/ltFgMCUrzx/QykMSxCHlmOx7W/dqqkpjuiG+EwCwtfWMg6S6nDSIlZwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEewmstrnqtFp0wni9rl/tsCVB3KMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvUjdDYXkydWVxMFduVENlTDJ1WC0yd0pVSGNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJcNbQD
BAJcNbgwDQYJKoZIhvcNAQELBQADggEBAAnj58rmnq8NIdE0/HmF2jIfv2PCyXbZ
9g9dZNqwnQ2CNEPmrHclrDAFtynmpZs999ZP2RwVIqK7gy7JSwlyPZ9FkwqegASS
n5dG9IthhDsB0jfkPJWgda9TfOf/Q5X149+T4PHruZbTB7VK/4Suq9VQycGc7nGa
XiL6j8FCIgtfZT7U/92TO+ff1mm9QYHJgGt1/G5QPFLFe1xKE2qjEL51tmsXbTZh
wdf0Z29SYvfEQ64SLF1/HkNqyHHOUEbqYlidmtKVClBtgjyCxS28a9MXuBNJg1lM
h37y4M86qZYSkYgxNWXittBu9msixsCSUTcnSadnVqTVaLxUZivds0c=
-----END CERTIFICATE-----
Generated at Sat Feb 7 12:14:59 2026 by rpki-client