This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/7Xjnrks0V0KJBUvovHU5FPRBPgI.roa
File:                     7Xjnrks0V0KJBUvovHU5FPRBPgI.roa (raw, json)
Hash identifier:          Uj+974AkqjIOmRxxULMnodgkGY00aGKR4YY4cfemHV0=
Subject key identifier:   ED:78:E7:AE:4B:34:57:42:89:05:4B:E8:BC:75:39:14:F4:41:3E:02
Certificate issuer:       /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial:       019B783485288597DA38BB7484025B632727
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/7Xjnrks0V0KJBUvovHU5FPRBPgI.roa
Signing time:             Thu 01 Jan 2026 06:17:46 +0000
ROA not before:           Thu 01 Jan 2026 06:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39563
IP address blocks:        85.8.131.0/24 maxlen: 24
                          185.80.8.0/22 maxlen: 24
                          185.231.16.0/24 maxlen: 24
                          185.231.17.0/24 maxlen: 24
                          185.231.18.0/24 maxlen: 24
                          185.231.19.0/24 maxlen: 24
                          2a0c:3900::/29 maxlen: 36
                          2a0c:3900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:85:28:85:97:da:38:bb:74:84:02:5b:63:27:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
        Validity
            Not Before: Jan  1 06:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed78e7ae4b34574289054be8bc753914f4413e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cc:95:f3:f0:3a:8f:5f:ed:a1:dd:02:b2:92:
                    54:f7:a4:15:d1:6c:cf:33:05:3c:6f:9d:32:14:5c:
                    fd:26:df:9c:b8:2b:e9:ee:f6:32:9b:cb:6a:3b:42:
                    79:3c:64:8d:9d:47:39:77:03:fe:7c:2d:37:d8:9c:
                    f3:fa:9e:1a:ef:c1:09:30:9c:f5:82:cb:e4:df:1a:
                    ab:96:c5:43:69:2a:5e:b8:06:16:ef:47:0f:38:f7:
                    f8:cf:a2:65:f8:f8:f4:25:0c:95:b9:b1:9a:24:cd:
                    fe:7a:6d:a9:a9:5f:39:0e:1b:0f:f0:39:fb:67:35:
                    f0:e5:bf:78:b9:ea:8e:56:bb:4b:dc:56:70:ce:2f:
                    61:68:79:d6:cd:7a:37:57:02:c2:65:72:b0:e9:01:
                    7e:08:55:a0:c2:59:d9:d9:24:13:1f:93:38:ce:bf:
                    ce:13:6d:39:72:a4:d3:d5:33:0e:9a:e0:32:36:3d:
                    4b:a0:ff:8c:86:b4:cb:85:c8:18:70:e2:14:06:a6:
                    ae:fd:d7:5c:24:cc:86:9b:a5:72:80:49:18:e2:6d:
                    7a:89:82:dc:bd:fa:d4:08:4a:b6:12:4f:a4:45:90:
                    01:58:96:9c:12:b2:47:f8:89:a9:ea:fd:a0:f1:94:
                    90:8f:06:96:68:fc:a9:15:17:6a:70:3f:9c:26:85:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:78:E7:AE:4B:34:57:42:89:05:4B:E8:BC:75:39:14:F4:41:3E:02
            X509v3 Authority Key Identifier:
                keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/7Xjnrks0V0KJBUvovHU5FPRBPgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.8.131.0/24
                  185.80.8.0/22
                  185.231.16.0/22
                IPv6:
                  2a0c:3900::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:74:b9:da:6b:5e:3b:e8:d3:55:12:b1:65:b4:e6:c6:26:3e:
         4e:69:5a:10:68:02:a4:af:2d:ea:2c:0d:dc:14:74:78:51:12:
         5b:30:c2:29:8d:59:42:db:f1:72:b2:be:02:c2:b7:15:13:50:
         a0:83:76:ec:e7:d1:63:08:70:a9:be:16:9a:0c:7b:d1:9c:f7:
         4c:3a:07:1e:20:2b:d0:5a:f5:57:01:df:b4:27:8f:2f:5f:0a:
         2e:fa:f4:b8:83:d2:0b:fc:d4:05:0b:d3:e8:91:38:83:76:dc:
         fc:8c:ef:04:61:db:1c:bc:b5:7f:07:2e:71:43:8b:5e:ef:86:
         69:c3:c1:f8:72:84:57:f7:2a:6a:2e:55:1a:fc:88:71:03:66:
         d6:ad:4b:73:85:3a:6d:f3:72:05:d3:31:3e:32:5f:57:2e:62:
         0f:97:c1:1f:35:1a:f7:35:64:5d:d3:70:80:3c:a6:41:32:da:
         ab:52:90:c0:13:24:37:c3:b5:dc:3b:7e:70:15:98:30:c2:6b:
         bb:4b:9e:14:31:36:71:7b:43:00:25:31:6b:7c:e2:95:26:2d:
         f3:ee:29:1e:b3:07:c5:ae:c0:09:32:4f:96:b3:94:da:84:99:
         4f:f3:c0:69:7c:a4:d9:a7:09:14:79:ac:21:f7:60:d7:6d:cf:
         51:8d:84:ba
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZt4NIUohZfaOLt0hAJbYycnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDgwYmFiNTViZjM0NzMxODhjMjBjNzM2NmE2Y2IwNDRj
NzE5NWMwHhcNMjYwMTAxMDYxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDc4ZTdhZTRiMzQ1NzQyODkwNTRiZThiYzc1MzkxNGY0NDEzZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8yV8/A6j1/tod0CspJU96QV0WzP
MwU8b50yFFz9Jt+cuCvp7vYym8tqO0J5PGSNnUc5dwP+fC032Jzz+p4a78EJMJz1
gsvk3xqrlsVDaSpeuAYW70cPOPf4z6Jl+Pj0JQyVubGaJM3+em2pqV85DhsP8Dn7
ZzXw5b94ueqOVrtL3FZwzi9haHnWzXo3VwLCZXKw6QF+CFWgwlnZ2SQTH5M4zr/O
E205cqTT1TMOmuAyNj1LoP+MhrTLhcgYcOIUBqau/ddcJMyGm6VygEkY4m16iYLc
vfrUCEq2Ek+kRZABWJacErJH+Imp6v2g8ZSQjwaWaPypFRdqcD+cJoV/rwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFO14565LNFdCiQVL6Lx1ORT0QT4CMB8GA1UdIwQY
MBaAFH4IC6tVvzRzGIwgxzZqbLBExxlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMt
NjMwYmQ3M2NlMjY3LzEvN1hqbnJrczBWMEtKQlV2b3ZIVTVGUFJCUGdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMtNjMwYmQ3M2NlMjY3
LzEvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAVQiDAwQC
uVAIAwQCuecQMA0EAgACMAcDBQMqDDkAMA0GCSqGSIb3DQEBCwUAA4IBAQAkdLna
a1476NNVErFltObGJj5OaVoQaAKkry3qLA3cFHR4URJbMMIpjVlC2/Fysr4CwrcV
E1Cgg3bs59FjCHCpvhaaDHvRnPdMOgceICvQWvVXAd+0J48vXwou+vS4g9IL/NQF
C9PokTiDdtz8jO8EYdscvLV/By5xQ4te74Zpw8H4coRX9ypqLlUa/IhxA2bWrUtz
hTpt83IF0zE+Ml9XLmIPl8EfNRr3NWRd03CAPKZBMtqrUpDAEyQ3w7XcO35wFZgw
wmu7S54UMTZxe0MAJTFrfOKVJi3z7ikeswfFrsAJMk+Ws5TahJlP88BpfKTZpwkU
eawh92DXbc9RjYS6
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:57 2026 by rpki-client