This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa
File:                     oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (raw, json)
Hash identifier:          sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=
Subject key identifier:   A2:29:7B:37:E0:AE:F4:1A:7F:0E:63:DD:13:F8:FD:21:92:F4:3B:3A
Certificate issuer:       /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial:       019B7B35B6E0DFDA5FB3952EF43E1CC6AB8E
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa
Signing time:             Thu 01 Jan 2026 20:17:56 +0000
ROA not before:           Thu 01 Jan 2026 20:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204555
IP address blocks:        94.125.143.0/24 maxlen: 24
                          193.176.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:b6:e0:df:da:5f:b3:95:2e:f4:3e:1c:c6:ab:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
        Validity
            Not Before: Jan  1 20:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a2297b37e0aef41a7f0e63dd13f8fd2192f43b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:7d:21:28:df:dd:51:97:fd:49:3c:bf:7f:
                    6b:dc:42:93:af:c2:78:e5:f7:03:fc:f2:9a:8d:72:
                    33:0f:ab:d0:9d:fd:d8:88:bb:1d:6d:91:07:c1:2c:
                    f1:6d:d2:07:eb:22:d7:6b:4d:65:0b:81:27:16:f8:
                    0a:3a:22:a5:54:f1:66:96:fa:81:67:47:fb:b5:59:
                    cf:f0:08:eb:5b:f8:38:cb:24:2c:c1:da:e9:94:c9:
                    c5:1a:f3:a5:a6:b3:82:16:ba:9d:cf:d1:b4:f5:94:
                    d8:72:9b:1f:65:6c:f6:02:89:91:ab:a1:92:de:8f:
                    e4:6b:de:b8:5a:82:19:e8:97:46:ab:a1:7d:97:22:
                    dc:c5:86:56:00:b7:44:35:dd:11:78:2f:f9:ab:7d:
                    55:6a:c1:c8:b0:77:2a:2f:7b:63:2b:bc:88:1d:24:
                    aa:6a:61:58:de:58:2d:7f:66:29:35:fe:f5:54:71:
                    12:25:1a:76:45:f1:3d:e5:f4:82:56:9e:6b:f8:27:
                    a8:30:54:78:a2:46:65:60:22:83:8a:a8:3a:37:0a:
                    88:b4:7b:f2:34:48:3d:72:35:69:d3:8f:e6:50:9f:
                    7b:bf:28:d3:94:42:4f:83:90:49:77:be:13:67:4a:
                    21:c3:25:1d:aa:05:11:9e:44:ee:7f:41:62:ac:1c:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:29:7B:37:E0:AE:F4:1A:7F:0E:63:DD:13:F8:FD:21:92:F4:3B:3A
            X509v3 Authority Key Identifier:
                keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.125.143.0/24
                  193.176.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:6c:77:56:de:c0:60:39:48:55:ca:b4:ba:6b:68:76:d4:8e:
         b3:72:96:7c:0b:21:a7:6a:30:45:3a:2c:80:b8:23:58:5c:80:
         e1:2f:fa:5b:71:4d:50:51:f9:1a:b1:36:68:3e:34:f4:a8:3b:
         83:0d:9f:77:09:ca:e1:9a:96:00:51:5d:c2:80:0e:8e:d2:92:
         b8:a1:21:97:e2:4e:c7:f5:9d:9b:60:c0:41:e5:17:ca:d6:43:
         1e:83:55:80:1c:bb:20:71:f8:40:4e:5f:46:cc:4a:3c:9f:8d:
         90:19:40:36:45:5f:95:92:04:59:e5:54:f2:66:84:7a:13:cb:
         45:33:e0:f3:0a:3d:b3:1d:14:cf:3d:6d:0b:db:0b:c8:2a:ca:
         9b:19:ba:d8:de:e6:88:db:08:be:c6:05:c1:db:6b:1d:df:c7:
         7e:cd:9c:47:43:67:0b:64:1e:96:54:c5:59:04:d1:67:3c:09:
         3f:c7:d7:75:3c:cc:a1:5a:ed:52:eb:42:28:23:00:09:ab:67:
         35:35:a2:4f:93:ab:be:94:47:0e:ad:cf:6c:f0:d5:c4:71:08:
         dd:e3:37:36:af:ce:61:94:cf:9b:96:49:f1:df:f5:6f:e7:ad:
         88:69:25:80:22:f4:d6:5c:3d:72:b4:94:c7:3c:b8:08:44:7e:
         f7:27:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:24 2026 by rpki-client