This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/q7302L2OQ1J4JgKpMluxPnKa3L4.roa
File:                     q7302L2OQ1J4JgKpMluxPnKa3L4.roa (raw, json)
Hash identifier:          CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=
Subject key identifier:   AB:BD:F4:D8:BD:8E:43:52:78:26:02:A9:32:5B:B1:3E:72:9A:DC:BE
Certificate issuer:       /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial:       019B7C80881EB4582D1E380864B9333A4D0A
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/q7302L2OQ1J4JgKpMluxPnKa3L4.roa
Signing time:             Fri 02 Jan 2026 02:19:16 +0000
ROA not before:           Fri 02 Jan 2026 02:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35684
IP address blocks:        93.188.56.0/22 maxlen: 22
                          185.79.44.0/22 maxlen: 22
                          185.178.40.0/22 maxlen: 22
                          194.59.192.0/22 maxlen: 22
                          195.137.191.0/24 maxlen: 24
                          2001:678:b68::/48 maxlen: 48
                          2001:67c:18b0::/48 maxlen: 48
                          2a05:7180::/29 maxlen: 29
                          2a06:8500::/29 maxlen: 29
                          2a06:9300::/29 maxlen: 29
                          2a0c:d980::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:88:1e:b4:58:2d:1e:38:08:64:b9:33:3a:4d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
        Validity
            Not Before: Jan  2 02:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=abbdf4d8bd8e4352782602a9325bb13e729adcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:cc:be:e1:60:3e:83:5a:02:be:61:3a:c9:
                    cb:e6:9f:0d:ca:de:da:97:f3:ab:dc:40:b3:ba:77:
                    ed:7c:b7:7f:60:cd:d3:31:6d:82:0a:55:50:3d:7a:
                    43:15:48:89:64:80:83:6f:e3:f0:8e:39:c3:ad:a3:
                    8d:dc:bc:0a:ac:91:52:1c:ed:35:54:03:08:c1:2a:
                    cc:16:1c:a2:68:e3:bb:3d:f0:4b:ac:66:f1:78:83:
                    07:59:c3:8e:0c:e9:f7:3c:c0:39:9c:19:68:38:63:
                    0a:05:51:d9:ae:36:9b:ff:29:f6:73:16:a4:e2:af:
                    d9:7e:65:08:04:70:9d:10:4b:8c:88:b8:86:31:f4:
                    40:31:f5:08:a9:46:ca:5e:06:ff:33:79:24:da:6b:
                    30:40:fb:55:75:d8:b9:07:74:63:37:80:7b:de:9b:
                    70:19:dc:66:65:3c:36:72:47:a1:a8:de:1d:d1:e0:
                    62:65:88:11:5d:de:4b:07:c5:a4:1e:cb:4a:fb:76:
                    11:b3:9c:78:3c:5b:45:b5:8f:e8:3d:4e:bc:ab:ad:
                    57:c7:07:65:9a:ed:cb:00:0f:02:07:ea:a8:0b:be:
                    cc:78:c5:8d:04:0f:fd:91:2f:c7:39:f3:c3:c8:ec:
                    b6:84:15:62:f2:fa:25:87:6d:5f:7a:d7:8f:5b:d6:
                    8f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BD:F4:D8:BD:8E:43:52:78:26:02:A9:32:5B:B1:3E:72:9A:DC:BE
            X509v3 Authority Key Identifier:
                keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/q7302L2OQ1J4JgKpMluxPnKa3L4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.188.56.0/22
                  185.79.44.0/22
                  185.178.40.0/22
                  194.59.192.0/22
                  195.137.191.0/24
                IPv6:
                  2001:678:b68::/48
                  2001:67c:18b0::/48
                  2a05:7180::/29
                  2a06:8500::/29
                  2a06:9300::/29
                  2a0c:d980::/29

    Signature Algorithm: sha256WithRSAEncryption
         58:15:81:c9:c2:6a:c0:9e:75:d5:12:fd:9a:8d:d9:a7:7b:2e:
         b3:67:4f:46:5a:9d:f4:5e:42:ec:56:76:6f:c8:a8:38:97:4c:
         1c:2c:5e:4f:4e:e4:37:68:4e:7d:4a:b7:85:13:84:80:5c:e3:
         15:cc:e9:95:00:57:f7:ee:c0:d1:6a:cc:b0:fc:1b:3d:50:c2:
         f8:b8:ed:10:80:e3:11:e2:87:51:c2:6b:29:f6:3a:0f:7a:af:
         d7:ee:2c:a7:3a:9d:1c:08:de:34:0c:52:d6:7d:58:ba:fd:ef:
         0c:28:5c:ee:ac:90:9e:0b:43:fc:4c:85:2c:7f:d9:8e:00:9a:
         c6:35:9d:e3:12:89:f0:a5:74:b8:8b:a0:ae:6f:9c:59:6f:39:
         9f:62:36:8d:8c:ec:f9:47:a3:68:d5:78:42:bd:d9:41:1c:3d:
         e1:50:e9:11:92:7c:09:84:41:c2:b2:72:9d:89:97:db:1a:00:
         f0:5a:4e:78:c9:a1:e5:1b:f9:57:79:4f:4c:17:d8:25:81:16:
         c5:fe:0b:ca:d9:b6:19:b1:aa:d5:b2:49:ff:70:e7:89:8a:1b:
         ac:78:da:c8:14:06:f4:db:82:03:7c:f5:07:3a:e6:c6:21:a6:
         cd:ba:77:5a:4e:7d:dc:38:0d:4d:73:31:29:4d:24:12:15:a9:
         a0:54:40:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:35 2026 by rpki-client