This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/7P-BWi-f3LglYNhsYLkhHyuFgak.roa
File:                     7P-BWi-f3LglYNhsYLkhHyuFgak.roa (raw, json)
Hash identifier:          3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=
Subject key identifier:   EC:FF:81:5A:2F:9F:DC:B8:25:60:D8:6C:60:B9:21:1F:2B:85:81:A9
Certificate issuer:       /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial:       019B783520735E75B5C447ECC554E61E8020
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/7P-BWi-f3LglYNhsYLkhHyuFgak.roa
Signing time:             Thu 01 Jan 2026 06:18:26 +0000
ROA not before:           Thu 01 Jan 2026 06:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     553
IP address blocks:        141.79.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:20:73:5e:75:b5:c4:47:ec:c5:54:e6:1e:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
        Validity
            Not Before: Jan  1 06:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ecff815a2f9fdcb82560d86c60b9211f2b8581a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:59:9c:72:c2:ee:b7:71:96:65:c1:9c:2a:73:
                    1c:4c:56:12:35:5f:7d:92:ea:89:90:ef:95:df:39:
                    4b:34:20:35:72:25:bc:72:dd:c0:e4:a4:07:7b:35:
                    00:26:82:83:cd:05:04:90:63:9a:53:88:e8:5f:22:
                    56:12:37:5c:99:8f:28:bc:7c:83:84:a3:95:ea:8a:
                    87:14:5d:14:ca:95:bc:d1:3f:a5:3a:3e:b0:d5:ea:
                    c3:e4:78:15:28:36:da:20:08:25:68:9a:ce:be:23:
                    a8:68:a2:c7:a6:8e:8b:73:cf:00:cb:de:a5:0d:f7:
                    1f:58:0e:f3:73:dd:8f:6c:e8:27:f2:7e:ff:29:bc:
                    70:81:7a:31:b3:67:73:13:48:e6:55:2f:d1:a9:e9:
                    f5:03:79:ab:8e:2d:95:59:54:21:22:93:6b:2e:16:
                    1c:b2:77:23:b4:23:3e:9c:47:96:32:d5:b0:f2:81:
                    7a:e6:a7:8e:8c:04:bb:f6:d1:fc:55:f7:af:f8:9c:
                    4f:16:d6:59:f5:1a:d2:23:a8:31:90:8b:b9:0d:90:
                    f7:68:19:5a:f6:e0:5f:6a:68:0e:20:1c:9d:2a:c6:
                    c7:87:ef:6a:6f:f5:be:41:1d:d3:25:fb:c7:10:c7:
                    28:f9:65:8a:8e:05:90:b1:17:f6:6c:7c:39:32:6d:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FF:81:5A:2F:9F:DC:B8:25:60:D8:6C:60:B9:21:1F:2B:85:81:A9
            X509v3 Authority Key Identifier:
                keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/7P-BWi-f3LglYNhsYLkhHyuFgak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.79.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:53:8f:e1:a4:51:c8:3f:aa:4e:d9:d3:e9:17:b3:3f:78:a6:
         fe:2f:41:6b:15:8d:dc:1a:91:71:17:0b:a1:8c:a2:b9:93:5d:
         fc:4c:34:05:ee:6e:c7:d6:ae:53:11:8c:c4:50:21:f6:89:b7:
         e1:60:7e:43:3a:e4:6a:7e:47:fc:b1:22:14:a6:83:1c:37:50:
         40:a9:fd:15:75:36:03:84:81:57:88:a1:23:f1:ac:92:69:ed:
         39:87:5f:e1:17:37:90:d4:6c:62:0d:40:5f:68:8b:6c:97:c7:
         7c:dc:48:04:eb:63:71:34:1e:41:50:74:b1:a2:ec:01:33:0d:
         59:f2:32:d8:0d:d8:0a:b9:63:ec:f0:33:e0:d3:c4:07:b5:04:
         87:3a:7c:6d:18:45:91:52:bd:16:48:d9:7c:94:d5:a6:b0:47:
         c5:0e:48:4f:e5:31:19:a4:96:c7:44:e8:26:e5:36:38:fc:76:
         11:7d:e5:fd:aa:f3:cb:62:b8:69:0e:b6:b2:40:78:fa:06:5d:
         d0:e1:dd:2f:a3:c8:f7:18:5e:cc:00:aa:60:5c:44:61:ad:b6:
         1d:cb:12:87:ba:b3:8c:d3:82:8b:b3:7a:12:16:87:f5:52:a9:
         12:20:34:a7:63:47:4f:89:11:21:bf:ee:9e:12:29:c7:f1:65:
         73:4b:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 07:53:47 2026 by rpki-client