This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/s79ADl13hyZq40_HLcrTPjG2mRg.roa
File:                     s79ADl13hyZq40_HLcrTPjG2mRg.roa (raw, json)
Hash identifier:          EZUGlDX2oMPmHYAhRUDOOd8jPBc7C0jRYmNC4z4hkiA=
Subject key identifier:   B3:BF:40:0E:5D:77:87:26:6A:E3:4F:C7:2D:CA:D3:3E:31:B6:99:18
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019B7BA4915A8F5742C64EE273A353097D36
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/s79ADl13hyZq40_HLcrTPjG2mRg.roa
Signing time:             Thu 01 Jan 2026 22:19:01 +0000
ROA not before:           Thu 01 Jan 2026 22:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43581
IP address blocks:        194.169.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:91:5a:8f:57:42:c6:4e:e2:73:a3:53:09:7d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jan  1 22:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b3bf400e5d7787266ae34fc72dcad33e31b69918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:7f:9b:5a:af:b9:f0:be:eb:e8:ac:c1:96:
                    bd:11:aa:1b:38:a0:13:f2:ca:20:55:ce:e8:6a:a6:
                    80:b2:cb:d5:b0:b6:29:9b:78:a0:46:5a:dd:51:f9:
                    b1:c4:34:ea:b8:fc:e4:ed:8f:19:27:fc:a4:12:f5:
                    35:6f:9b:e4:93:74:f0:8e:e5:45:4b:f8:14:0b:c4:
                    ef:a1:2e:30:75:d3:b5:82:62:da:c3:a2:be:8f:cb:
                    a5:5f:a9:74:cd:20:eb:ac:e4:f2:5b:a7:f3:6a:58:
                    5c:1e:ef:14:9e:17:2d:e8:05:09:b2:c2:da:13:5f:
                    30:85:09:09:ac:fc:e0:d9:2d:74:a3:ef:4b:af:fb:
                    da:15:44:27:0b:c2:c1:d1:0b:fd:c7:15:d7:54:4a:
                    c3:2e:b0:28:c3:70:e6:f6:26:64:9c:aa:39:17:0e:
                    30:06:55:66:ff:60:e5:35:39:44:f4:fb:46:82:f8:
                    f7:66:da:bb:e9:84:e4:8e:53:e9:c3:86:73:63:06:
                    ce:c5:fc:d6:ef:ce:52:b6:0e:92:22:7e:9a:68:6f:
                    a0:49:75:29:c7:bb:50:8b:ec:1b:f6:ba:4c:48:bc:
                    8b:2c:7a:2e:78:a3:81:d5:74:e4:19:c0:4e:51:9a:
                    fb:c8:1c:52:87:09:46:aa:21:3c:c9:60:ec:af:65:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BF:40:0E:5D:77:87:26:6A:E3:4F:C7:2D:CA:D3:3E:31:B6:99:18
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/s79ADl13hyZq40_HLcrTPjG2mRg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.169.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:72:91:43:a4:a9:30:3c:20:08:40:aa:35:c2:a8:46:33:cb:
         e8:61:5f:6f:91:fa:0b:b4:70:6f:7b:b9:12:5c:17:78:f7:ee:
         15:44:06:07:be:ab:76:63:ed:1b:a9:28:ab:cc:68:88:2f:c9:
         d4:e8:7e:f1:74:11:fa:6a:81:4c:30:16:fc:18:54:7a:4a:22:
         0e:c9:2d:49:47:1b:3a:6d:f3:a0:8e:70:e2:23:d2:5a:82:f9:
         fd:01:c0:bb:8d:fd:78:b2:a0:c0:0d:4d:55:35:63:8c:7c:ce:
         a3:94:82:68:d1:b9:ce:91:d7:8a:09:40:a3:ce:24:11:01:b1:
         53:74:a4:0e:08:e6:01:34:f4:21:67:8d:6f:b9:10:41:b4:d7:
         43:2d:17:f4:2d:47:50:a6:dc:71:a3:9b:8e:65:f6:f4:dd:47:
         39:af:58:d4:f4:e4:df:71:65:e6:9e:9f:35:d4:ce:8d:49:f4:
         55:e6:9f:2a:57:1b:22:27:ad:58:fa:54:9d:2e:31:a7:bd:67:
         90:9a:52:81:1c:59:75:2a:4c:32:45:73:a8:36:94:c3:86:db:
         94:4f:71:f3:bf:f1:78:83:aa:cb:36:96:23:31:f3:17:03:43:
         73:15:ae:bc:8a:c7:ec:bf:4d:ad:8a:84:f6:3b:db:ab:fc:45:
         9b:ee:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:51 2026 by rpki-client