This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/7YQffxRE0rSLQxPURshHecG_JTc.roa
File:                     7YQffxRE0rSLQxPURshHecG_JTc.roa (raw, json)
Hash identifier:          uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=
Subject key identifier:   ED:84:1F:7F:14:44:D2:B4:8B:43:13:D4:46:C8:47:79:C1:BF:25:37
Certificate issuer:       /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial:       019B7D5C77458D7C9BAF47A3DA93CC8CED18
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/7YQffxRE0rSLQxPURshHecG_JTc.roa
Signing time:             Fri 02 Jan 2026 06:19:30 +0000
ROA not before:           Fri 02 Jan 2026 06:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42681
IP address blocks:        193.142.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:77:45:8d:7c:9b:af:47:a3:da:93:cc:8c:ed:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
        Validity
            Not Before: Jan  2 06:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed841f7f1444d2b48b4313d446c84779c1bf2537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:5a:e0:ca:c0:5b:85:7c:ec:58:57:bd:3a:
                    e7:e1:9c:62:44:f5:79:a1:a4:a7:7b:bb:e0:cb:1b:
                    d8:c1:bb:1d:8f:7a:96:36:4a:f6:f3:d0:80:0d:83:
                    b5:60:47:47:d2:d0:4d:eb:51:1e:2c:a3:57:7e:58:
                    77:6c:f9:77:12:25:4e:66:14:dc:c1:07:1f:9d:fc:
                    f8:71:a9:3c:08:bc:13:f5:ec:f0:f6:e6:56:87:16:
                    34:0b:39:73:72:83:16:51:03:a6:78:cc:76:e5:fc:
                    4e:f2:d3:b4:1b:3e:d6:52:0c:96:60:f8:32:e6:55:
                    33:51:36:4e:28:c8:45:1a:bf:d6:1a:f4:1e:2e:9d:
                    ea:5a:a7:95:05:9c:5f:5a:d0:57:00:3f:cd:57:cb:
                    b2:86:97:92:c9:26:33:f9:a3:52:c0:64:5c:b3:24:
                    5b:ce:92:60:ff:be:16:44:45:29:9c:96:12:a2:ec:
                    f0:ad:fd:ed:c0:bb:97:c7:e0:75:bc:e7:d1:44:6f:
                    c3:80:28:15:57:1c:3c:26:97:2b:f4:16:5c:63:c3:
                    64:29:05:fb:a4:bb:3c:fb:a0:79:97:4e:d4:36:62:
                    e7:65:ae:cc:29:64:77:b2:81:35:76:8e:b9:04:8f:
                    7c:af:8e:13:8f:aa:7c:f7:30:3a:ac:07:b0:5d:fe:
                    52:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:84:1F:7F:14:44:D2:B4:8B:43:13:D4:46:C8:47:79:C1:BF:25:37
            X509v3 Authority Key Identifier:
                keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/7YQffxRE0rSLQxPURshHecG_JTc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b3:67:c0:30:25:08:98:db:1a:6c:3a:d2:71:6b:e1:a5:1b:
         22:ea:9a:e0:12:7e:51:fc:eb:37:01:a5:99:b1:67:b5:2b:ab:
         52:23:ba:0a:a9:5c:e8:70:9b:5d:80:e3:67:fb:b9:36:71:1d:
         46:94:0d:8e:ba:90:44:bc:9c:95:4a:fd:07:b6:ae:b4:20:e0:
         cb:ed:1e:38:94:0e:5f:45:9e:be:6d:f3:08:c9:4f:ee:23:3b:
         f9:2c:c7:2a:45:a5:a8:eb:72:db:3c:9d:40:72:96:15:ac:c7:
         82:f9:6e:51:9c:6e:86:43:51:d5:15:00:75:e6:ec:f5:02:f0:
         5b:98:4a:70:d0:22:77:d4:24:3d:38:e3:36:17:87:5a:d3:56:
         29:d3:3a:d8:8b:26:4d:93:43:01:b9:9d:71:86:de:ba:31:64:
         19:67:28:e5:eb:3c:da:26:de:44:b4:75:77:d8:48:ed:5a:a5:
         92:23:79:b2:49:36:c2:82:27:a6:92:a0:2d:f1:a8:3d:5c:69:
         77:c5:04:e3:63:27:4f:1e:97:0d:13:e5:ec:9a:b9:c7:db:e7:
         e9:9a:fc:30:68:84:bb:0e:e1:5e:d4:74:45:df:a1:66:fe:9d:
         00:69:8b:d2:ce:78:9a:44:ef:2d:99:b4:c4:84:e9:41:d5:c2:
         f5:88:90:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XHdFjXybr0ej2pPMjO0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw
NGIzMTYwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDg0MWY3ZjE0NDRkMmI0OGI0MzEzZDQ0NmM4NDc3OWMxYmYyNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdNa4MrAW4V87FhXvTrn4ZxiRPV5
oaSne7vgyxvYwbsdj3qWNkr289CADYO1YEdH0tBN61EeLKNXflh3bPl3EiVOZhTc
wQcfnfz4cak8CLwT9ezw9uZWhxY0CzlzcoMWUQOmeMx25fxO8tO0Gz7WUgyWYPgy
5lUzUTZOKMhFGr/WGvQeLp3qWqeVBZxfWtBXAD/NV8uyhpeSySYz+aNSwGRcsyRb
zpJg/74WREUpnJYSouzwrf3twLuXx+B1vOfRRG/DgCgVVxw8Jpcr9BZcY8NkKQX7
pLs8+6B5l07UNmLnZa7MKWR3soE1do65BI98r44Tj6p89zA6rAewXf5S8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2EH38URNK0i0MT1EbIR3nBvyU3MB8GA1UdIwQY
MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt
YjQyNTIyZDA1ODk1LzEvN1lRZmZ4UkUwclNMUXhQVVJzaEhlY0dfSlRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1
LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY50MA0G
CSqGSIb3DQEBCwUAA4IBAQB9s2fAMCUImNsabDrScWvhpRsi6prgEn5R/Os3AaWZ
sWe1K6tSI7oKqVzocJtdgONn+7k2cR1GlA2OupBEvJyVSv0Htq60IODL7R44lA5f
RZ6+bfMIyU/uIzv5LMcqRaWo63LbPJ1AcpYVrMeC+W5RnG6GQ1HVFQB15uz1AvBb
mEpw0CJ31CQ9OOM2F4da01Yp0zrYiyZNk0MBuZ1xht66MWQZZyjl6zzaJt5EtHV3
2EjtWqWSI3mySTbCgiemkqAt8ag9XGl3xQTjYydPHpcNE+XsmrnH2+fpmvwwaIS7
DuFe1HRF36Fm/p0AaYvSzniaRO8tmbTEhOlB1cL1iJAX
-----END CERTIFICATE-----
Generated at Tue Jan 27 06:05:19 2026 by rpki-client