This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/SV-k7vOmp78ptABWGmNdtZgKTUE.roa
File:                     SV-k7vOmp78ptABWGmNdtZgKTUE.roa (raw, json)
Hash identifier:          Y6g0l9jHxH9c7iY6DMqcSeYaKKVNRITzYxEL75xHrLg=
Subject key identifier:   49:5F:A4:EE:F3:A6:A7:BF:29:B4:00:56:1A:63:5D:B5:98:0A:4D:41
Certificate issuer:       /CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
Certificate serial:       019B7BA524B59BAE4E5F31BA46502D112EDD
Authority key identifier: A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/SV-k7vOmp78ptABWGmNdtZgKTUE.roa
Signing time:             Thu 01 Jan 2026 22:19:38 +0000
ROA not before:           Thu 01 Jan 2026 22:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201098
IP address blocks:        185.174.84.0/22 maxlen: 22
                          2a0b:9100::/29 maxlen: 29
                          2a0b:9100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:24:b5:9b:ae:4e:5f:31:ba:46:50:2d:11:2e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
        Validity
            Not Before: Jan  1 22:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=495fa4eef3a6a7bf29b400561a635db5980a4d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:77:44:d6:58:b5:6e:de:59:22:20:11:cc:5c:
                    95:d6:3d:37:39:1b:97:56:e9:f7:21:f4:d4:21:5f:
                    c0:8e:23:ce:2e:33:ee:81:4d:b9:0d:fe:65:c4:91:
                    f3:b1:94:3f:52:b7:69:1c:6e:90:45:76:9f:51:41:
                    18:a0:06:44:e2:d1:61:e9:26:89:1b:7b:46:79:e6:
                    3c:49:7d:16:30:45:2a:0d:e9:84:ee:e8:8f:83:80:
                    94:c8:80:89:22:93:f8:d3:5a:15:49:c0:e6:47:7e:
                    30:b5:cb:76:49:bb:36:21:10:2d:8e:90:b1:87:30:
                    01:10:95:f5:47:b3:16:f0:d6:3b:d9:19:25:61:1b:
                    ef:74:0a:55:08:61:44:ce:2f:54:bf:f0:78:e6:f6:
                    5b:63:7d:5c:20:9a:d8:28:0b:e6:50:c8:95:6e:de:
                    d4:22:b6:ba:87:eb:f3:ac:d9:55:4a:16:8f:40:8d:
                    55:55:3e:0e:ed:fd:f4:1a:70:c3:b9:e4:c8:be:f3:
                    90:fc:cc:32:da:ab:56:23:b2:ef:81:4c:b8:25:cf:
                    74:34:a6:35:7b:ff:85:24:d3:de:db:86:14:bb:56:
                    b4:23:b6:da:65:4c:71:9c:ef:9c:47:70:bc:58:95:
                    a8:ec:55:c3:52:6b:50:0b:87:b5:e1:91:91:be:db:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5F:A4:EE:F3:A6:A7:BF:29:B4:00:56:1A:63:5D:B5:98:0A:4D:41
            X509v3 Authority Key Identifier:
                keyid:A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/SV-k7vOmp78ptABWGmNdtZgKTUE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.174.84.0/22
                IPv6:
                  2a0b:9100::/29

    Signature Algorithm: sha256WithRSAEncryption
         9a:1a:df:ac:59:8d:b8:d4:14:95:99:71:5d:fc:6c:b7:54:f6:
         f4:16:63:07:de:d5:04:8d:10:c1:9f:fa:b2:35:c0:d6:48:47:
         12:eb:a3:cb:c1:c9:82:54:dc:d2:1b:93:69:0e:27:18:d7:90:
         fc:f5:ab:25:bc:b3:a6:f3:92:35:ea:19:2d:27:55:44:39:5c:
         7c:40:74:92:9e:29:94:6f:de:e2:14:28:48:d4:3f:e0:f8:92:
         cb:30:20:29:5d:67:74:b8:42:4f:31:ed:e3:50:94:25:20:e9:
         d2:12:f8:85:e0:67:a9:a8:8f:54:e7:55:2a:21:37:06:f1:69:
         ae:9e:9e:bf:e8:80:c1:e4:b9:56:27:f3:60:e0:e8:23:52:67:
         20:e9:ae:2a:0c:46:46:47:a2:f7:67:e5:36:9d:51:92:bb:58:
         24:cd:d8:77:eb:9a:66:f5:74:be:54:22:2e:2f:a1:4c:8e:82:
         bb:24:38:09:3f:68:09:a8:21:00:d9:de:e2:7b:70:77:2f:3d:
         dd:31:4f:a5:fd:9b:67:b6:88:46:45:0d:fb:1c:36:51:e9:00:
         fc:97:81:b1:a9:88:0c:86:98:21:fd:1d:06:c8:b1:67:64:98:
         f7:31:aa:fe:f4:dd:fa:02:3e:b3:72:83:cb:b0:d9:14:ae:84:
         ab:17:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:06 2026 by rpki-client