This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OZEjLQrrtxVqipyXKiC_VEkskC0.roa
File:                     OZEjLQrrtxVqipyXKiC_VEkskC0.roa (raw, json)
Hash identifier:          whwsCZLVl75wB+39pEoMpMJ5ORxT6ItlMVUL22YgigA=
Subject key identifier:   39:91:23:2D:0A:EB:B7:15:6A:8A:9C:97:2A:20:BF:54:49:2C:90:2D
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019B7FF1CE2DC1599F09F13653B77B78F418
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OZEjLQrrtxVqipyXKiC_VEkskC0.roa
Signing time:             Fri 02 Jan 2026 18:21:51 +0000
ROA not before:           Fri 02 Jan 2026 18:21:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213887
IP address blocks:        185.126.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:ce:2d:c1:59:9f:09:f1:36:53:b7:7b:78:f4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan  2 18:21:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3991232d0aebb7156a8a9c972a20bf54492c902d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:de:52:f7:8a:c9:49:e3:75:fb:73:55:e7:35:
                    3e:97:cc:00:ab:f8:d1:e1:c8:f8:2e:b9:0b:39:f7:
                    0c:ac:6b:6e:43:85:85:65:8d:ae:a5:98:2a:44:79:
                    d4:26:e1:1c:47:99:bc:bc:56:f0:bd:74:bf:47:36:
                    9a:20:9b:58:76:d1:20:0d:64:5e:ec:22:f1:2e:ea:
                    39:96:e8:a2:d1:cf:33:37:fe:cf:c4:c9:27:ee:74:
                    b9:8a:90:22:d4:26:d2:69:8a:63:cf:74:b6:f0:85:
                    79:aa:fe:97:4d:8b:77:ea:f0:6c:47:d7:9f:9d:c7:
                    15:6a:1e:ab:63:21:34:76:00:75:01:b6:97:01:5a:
                    3c:65:05:36:21:6f:60:b2:c6:ad:e6:0b:2f:b4:c0:
                    32:0c:20:af:64:c8:57:e7:d4:00:39:e5:ff:1c:d7:
                    d3:ac:0d:48:db:7a:ad:85:c7:63:75:ea:74:a2:85:
                    d8:9b:03:47:73:1c:93:dc:a5:fd:45:44:2b:39:b9:
                    c7:79:6a:eb:c4:82:3f:ab:6e:35:88:d4:00:ac:bc:
                    55:fe:03:a0:62:f5:8a:e7:43:38:5e:f0:31:0b:ab:
                    e6:c8:63:51:91:61:a0:0c:f9:13:e3:5b:1c:26:33:
                    c8:84:ec:9d:60:49:e3:f1:fb:43:e6:22:f1:ea:5c:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:91:23:2D:0A:EB:B7:15:6A:8A:9C:97:2A:20:BF:54:49:2C:90:2D
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OZEjLQrrtxVqipyXKiC_VEkskC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:17:e8:64:35:fb:8d:fe:79:46:7b:75:6a:ac:a2:e3:b3:0b:
         5e:2d:71:95:08:23:be:35:ae:dc:58:98:b8:5c:8f:07:62:22:
         ef:3b:5e:72:19:13:e2:6b:9b:e9:c3:08:78:8e:e1:b7:a7:15:
         1e:77:26:71:7b:61:db:e6:f2:45:fc:b8:bd:4d:df:b6:47:4a:
         d8:4d:6f:33:06:14:0a:e3:6f:85:73:39:64:87:cf:52:d1:c6:
         cf:48:4d:e5:d3:98:29:30:49:c0:ab:3f:9e:c7:ae:78:21:82:
         ec:e1:c8:6c:44:dd:a4:7e:6f:1b:58:c7:5a:3b:df:84:8e:de:
         ab:50:43:17:9c:e2:cc:52:67:c8:2d:b1:8d:28:38:6f:f0:31:
         be:05:09:07:68:4d:e2:07:78:58:22:ba:da:93:df:3f:55:2e:
         0f:aa:8a:ed:4c:8c:84:09:8b:a5:4c:b7:f1:bc:e9:c7:e4:1a:
         ed:f0:74:d1:ce:48:34:87:ef:6a:cf:ce:99:c7:5d:81:99:eb:
         81:7c:34:21:a8:9f:6c:4d:c9:fc:1b:22:5c:12:33:11:a7:9a:
         0e:c1:25:bd:81:3c:0b:b0:24:4a:4a:c7:d4:f5:1c:3b:c6:0e:
         8a:8e:ee:5f:21:e1:66:5c:5f:7f:7b:d9:83:5d:e1:49:71:04:
         13:ee:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:07:48 2026 by rpki-client