This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/E7N3AbX4XRe6TtepW4IKz_xhbuk.roa
File:                     E7N3AbX4XRe6TtepW4IKz_xhbuk.roa (raw, json)
Hash identifier:          T0P6XuI3QLOIzu4AgydenL9szcYBu2vZyoMNm8nvA0Y=
Subject key identifier:   13:B3:77:01:B5:F8:5D:17:BA:4E:D7:A9:5B:82:0A:CF:FC:61:6E:E9
Certificate issuer:       /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial:       019B7E38A28012D9C3FAFC5F7B364282AED1
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/E7N3AbX4XRe6TtepW4IKz_xhbuk.roa
Signing time:             Fri 02 Jan 2026 10:19:59 +0000
ROA not before:           Fri 02 Jan 2026 10:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        185.63.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:a2:80:12:d9:c3:fa:fc:5f:7b:36:42:82:ae:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
        Validity
            Not Before: Jan  2 10:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13b37701b5f85d17ba4ed7a95b820acffc616ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:1c:4c:9c:a7:1d:8f:d2:20:98:f1:50:fe:
                    43:a3:f3:b3:9b:ff:0e:84:81:30:3f:33:ee:e7:5f:
                    b4:9b:21:de:f5:71:b0:6e:d5:28:06:8d:9a:99:08:
                    57:25:ab:70:c9:1c:8d:a1:8d:40:fc:28:4a:ee:4e:
                    26:62:bb:f8:9e:14:20:54:fd:83:c6:b5:77:38:a3:
                    9d:07:1b:f4:31:f2:26:09:be:3d:d5:e5:c6:05:ab:
                    03:90:b7:3d:fd:34:e3:63:70:cb:cd:ef:11:3c:ab:
                    f4:2e:95:7d:11:8b:eb:98:d5:7d:d4:08:75:b1:ea:
                    6d:e9:68:98:68:9b:2e:6b:2b:2f:6f:21:1f:5f:c7:
                    37:d1:82:a2:9f:93:c7:eb:3e:b2:ac:2a:3d:a8:95:
                    e4:98:9b:3f:94:a7:e2:bc:c3:ea:60:8b:7e:83:5c:
                    70:cd:d7:5c:8d:c2:81:76:1f:df:e4:7f:06:e7:51:
                    a3:39:17:5a:65:1a:34:72:be:99:0e:e5:96:00:60:
                    9b:a2:b9:82:34:24:a0:fa:44:af:18:84:1e:a2:f6:
                    77:4b:a3:42:80:ff:b7:2c:37:a7:f3:98:0b:3b:bb:
                    e1:72:c4:f5:95:0d:d1:6b:e3:d8:c8:ee:8b:79:26:
                    18:5b:e7:20:0d:f9:9c:a0:17:13:97:2b:b1:56:6a:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B3:77:01:B5:F8:5D:17:BA:4E:D7:A9:5B:82:0A:CF:FC:61:6E:E9
            X509v3 Authority Key Identifier:
                keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/E7N3AbX4XRe6TtepW4IKz_xhbuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.63.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:62:55:bb:42:94:05:36:66:c0:30:24:31:fc:d2:62:ed:
         29:9e:f9:f1:3d:53:e3:2f:13:75:0b:e3:16:a4:d3:de:fc:8d:
         e2:92:94:08:0e:c0:cb:89:b5:e0:d3:ed:d5:24:7a:8e:45:1d:
         7a:24:be:6f:29:f8:08:ba:a8:29:fc:51:48:80:51:d1:96:ce:
         2f:b9:7c:17:3b:fc:a0:cf:39:21:31:e0:5f:f7:48:39:b2:7d:
         f3:f5:02:a7:f8:fe:50:83:3b:04:01:ec:24:8b:0e:88:ad:fb:
         9c:03:17:55:c0:63:db:b2:88:73:56:ee:9e:e1:c0:c4:df:63:
         8e:0a:1b:38:ba:d5:08:c4:1e:5d:db:4e:0b:a8:92:64:22:b3:
         8d:0c:01:71:82:8a:83:a0:63:68:52:a8:f8:14:01:b5:82:ad:
         b1:84:a7:0d:cc:a6:71:be:57:8f:c5:d3:3a:e8:2a:b3:f3:67:
         87:9a:01:c9:d0:68:7c:5e:d5:58:54:0f:c7:cb:b4:90:e3:48:
         91:2f:01:a1:f5:b6:b4:5c:40:88:61:91:03:02:86:98:fe:eb:
         a8:bc:43:1a:e7:83:f9:63:2e:4d:be:9c:96:26:72:4b:dd:d5:
         1c:87:00:29:76:f4:db:97:4a:11:50:b3:38:b4:66:e6:15:e9:
         36:78:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:53:48 2026 by rpki-client