This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7Vt176ATYSjm9xZTT-XQX-Zb3gg.roa
File:                     7Vt176ATYSjm9xZTT-XQX-Zb3gg.roa (raw, json)
Hash identifier:          ISmlrNLUJ9oatP75F6hJydyOwv0HwqatazNk2zCU8B8=
Subject key identifier:   ED:5B:75:EF:A0:13:61:28:E6:F7:16:53:4F:E5:D0:5F:E6:5B:DE:08
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       019B76EAD2EE81EA9DBD1BD9E69EBDF62180
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7Vt176ATYSjm9xZTT-XQX-Zb3gg.roa
Signing time:             Thu 01 Jan 2026 00:17:39 +0000
ROA not before:           Thu 01 Jan 2026 00:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210542
IP address blocks:        45.8.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:d2:ee:81:ea:9d:bd:1b:d9:e6:9e:bd:f6:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Jan  1 00:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed5b75efa0136128e6f716534fe5d05fe65bde08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:1a:8f:98:8b:85:15:53:02:bd:64:5d:f3:
                    5a:1b:63:54:dd:f1:93:c1:b9:17:da:f0:b3:88:d9:
                    e4:52:c4:8a:43:87:4a:71:b5:a3:bc:77:cd:a6:a1:
                    3c:0a:39:fc:5d:6e:e3:bd:20:e5:d2:73:e5:d2:41:
                    84:0a:30:26:f8:1d:95:82:7e:6b:cd:ef:2e:d8:aa:
                    86:e8:b6:38:ea:c8:69:b6:15:2d:b9:e8:1d:39:f9:
                    4e:6f:cf:44:0c:4d:a2:a4:96:9f:1f:86:5b:a5:7d:
                    c0:01:d0:d5:7f:b9:3b:0b:77:7d:fa:5d:9d:c0:ae:
                    09:99:71:a0:55:09:c6:e2:65:55:fa:01:f1:bd:6d:
                    1c:f3:dd:71:51:28:71:7b:01:33:33:32:78:32:d6:
                    c5:5a:1f:fc:e8:fe:34:31:86:c3:cd:1a:e4:5f:19:
                    8c:49:6f:07:cb:62:7d:81:41:1a:2f:cf:0b:fb:94:
                    d9:4a:f5:47:dc:35:ad:7a:d4:30:61:5d:0c:3a:c1:
                    10:bc:8e:38:db:6a:e2:06:56:4e:89:45:f2:a3:4d:
                    ee:14:79:0a:2a:90:c9:46:db:6b:d0:16:f3:9c:e0:
                    54:ac:f5:83:8f:0a:bf:f0:cf:a5:a8:4d:80:8f:97:
                    dc:5b:cc:8b:25:65:52:d4:d1:0d:5f:cf:7f:31:4b:
                    29:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:75:EF:A0:13:61:28:E6:F7:16:53:4F:E5:D0:5F:E6:5B:DE:08
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7Vt176ATYSjm9xZTT-XQX-Zb3gg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:79:b9:aa:0a:ba:c5:03:ea:7f:a8:93:c0:20:6d:06:61:f4:
         eb:be:20:ab:4f:36:fe:aa:48:75:79:b9:41:46:b8:af:2f:3a:
         65:e9:65:fc:20:e6:20:f9:6b:87:56:d0:9e:32:80:33:1f:b7:
         ca:ee:82:b9:eb:e6:29:1b:9f:01:19:8c:89:c8:f6:a0:fe:59:
         0b:f6:82:e4:02:e5:8d:84:7c:5f:06:dc:08:46:e0:81:f8:61:
         a0:0d:cd:71:b3:6c:08:6d:e0:4a:a5:c3:21:d6:3a:dd:0c:29:
         1d:a7:36:e5:6c:49:c7:28:7f:78:c6:1e:e9:15:78:dc:4a:85:
         54:16:0b:b2:11:89:02:7f:ef:03:d9:c3:7b:93:26:1a:b8:a4:
         9c:45:c0:ee:8a:0d:25:b2:98:c8:0b:22:73:d8:70:e8:ee:97:
         d1:5a:98:00:69:d2:35:37:37:af:72:06:1e:c4:93:6e:c4:99:
         46:14:e6:f6:f4:e4:43:42:8e:94:7d:b0:19:e6:1a:72:ab:10:
         be:4f:96:ac:62:af:9c:d4:8f:f7:41:bc:f6:fd:6b:40:7f:66:
         50:ae:fb:6b:dc:88:94:da:4e:e1:b3:ce:1f:ee:07:b4:c9:3a:
         61:9c:f6:07:97:13:e1:ca:83:56:0e:56:1e:86:43:f1:dc:25:
         f2:e8:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 01:07:58 2026 by rpki-client