This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/d7BZIUUqBrS52FwlH2ljflWbZ_A.roa
File:                     d7BZIUUqBrS52FwlH2ljflWbZ_A.roa (raw, json)
Hash identifier:          9mI4zy/olh2ONX+uGlVWvbZVvFWOt7oaz33dGchSk8s=
Subject key identifier:   77:B0:59:21:45:2A:06:B4:B9:D8:5C:25:1F:69:63:7E:55:9B:67:F0
Certificate issuer:       /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial:       019C2DA80D6001B14AC627E355891E6E4BF0
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/d7BZIUUqBrS52FwlH2ljflWbZ_A.roa
Signing time:             Thu 05 Feb 2026 11:55:13 +0000
ROA not before:           Thu 05 Feb 2026 11:55:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3257
IP address blocks:        146.19.50.0/24 maxlen: 24
                          185.214.166.0/24 maxlen: 24
                          194.26.218.0/24 maxlen: 24
                          213.134.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2d:a8:0d:60:01:b1:4a:c6:27:e3:55:89:1e:6e:4b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
        Validity
            Not Before: Feb  5 11:55:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77b05921452a06b4b9d85c251f69637e559b67f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:42:80:2e:ac:21:7e:59:6e:cf:3a:30:60:00:
                    3c:f1:79:1d:e0:e6:2d:be:67:50:54:50:fe:0d:84:
                    a3:cc:c8:d2:e1:16:1d:b3:f9:25:14:74:c4:00:96:
                    7a:4c:55:ef:8e:19:14:7c:08:e2:f7:6a:91:b8:64:
                    6e:94:7c:b3:54:08:58:07:3a:05:b5:bc:33:25:4d:
                    24:59:28:b4:5a:c3:7f:4b:a0:1c:4f:03:c6:0d:8c:
                    83:8a:89:f3:3f:25:e7:5b:4d:84:b4:fe:03:52:1a:
                    2a:fc:bf:d9:38:4c:b2:e8:70:d5:d0:03:c3:ba:ac:
                    47:dd:41:d7:33:6f:b7:c6:ce:0b:26:81:a2:86:57:
                    49:3d:ef:0e:99:0d:de:c9:a1:cf:27:0b:69:44:a8:
                    9d:11:4d:f2:07:9a:ed:20:91:0e:e0:ab:85:b2:ed:
                    29:bb:ab:bb:30:5f:57:ea:e8:ae:6f:bd:fe:4a:67:
                    29:4a:50:f3:01:20:d6:6e:51:30:ea:a4:01:ae:5b:
                    9c:b9:d5:e8:1b:77:50:b8:47:75:33:7b:a5:b6:4a:
                    bd:50:7f:61:18:1a:c1:c6:0a:f6:4a:df:64:cd:c9:
                    27:36:75:61:53:8c:b7:f5:f3:97:0b:6d:08:8e:88:
                    e6:96:88:03:fd:28:e4:2e:ee:d3:12:f6:78:53:e4:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B0:59:21:45:2A:06:B4:B9:D8:5C:25:1F:69:63:7E:55:9B:67:F0
            X509v3 Authority Key Identifier:
                keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/d7BZIUUqBrS52FwlH2ljflWbZ_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.50.0/24
                  185.214.166.0/24
                  194.26.218.0/24
                  213.134.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:7b:02:06:00:54:45:2c:60:27:38:a0:3a:af:e3:0c:e4:
         cf:c2:56:77:39:b5:c2:c9:76:1a:ae:2c:a3:63:27:42:b8:1a:
         55:7e:37:8c:ab:93:f0:e4:55:74:4f:6f:40:dd:32:cc:a2:7f:
         36:68:37:04:f6:8e:90:af:2f:50:15:96:1e:1c:7b:d0:8f:1f:
         46:56:d2:2b:36:5e:60:b5:dc:3a:ac:3f:9f:8c:06:15:3b:08:
         11:cf:bf:d6:b4:df:73:77:eb:2f:04:f1:53:82:33:4b:c4:34:
         45:a7:de:9a:a1:f6:62:af:3b:4f:71:73:4d:43:9d:da:d9:04:
         5b:31:61:5a:65:55:c9:9f:1a:0b:0a:f4:0d:b4:91:bc:16:fc:
         53:b8:3b:65:0b:97:ba:cb:15:45:b1:50:cb:86:18:1f:63:49:
         91:3c:67:07:b3:f9:b7:1d:04:53:1b:77:b1:2a:63:14:f8:23:
         40:20:1d:2f:2c:b1:45:30:6e:cb:f0:db:56:3c:ca:6e:54:34:
         a7:49:2b:ac:04:14:f9:2b:0e:70:d8:db:d2:10:af:cc:bb:cd:
         cf:01:90:d2:14:5f:c7:83:54:c1:ed:2e:7a:e0:44:11:0e:fc:
         fa:58:b4:87:01:ec:0b:a2:2a:96:2e:39:7e:32:37:a5:e2:c4:
         c9:fe:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:39 2026 by rpki-client