This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/7T34cJ5eXiFw90xTsWzMsemczZ8.roa
File:                     7T34cJ5eXiFw90xTsWzMsemczZ8.roa (raw, json)
Hash identifier:          NcAToPYCid0elghK3kb2vGJyDpECmqdoqEPgawgtyeg=
Subject key identifier:   ED:3D:F8:70:9E:5E:5E:21:70:F7:4C:53:B1:6C:CC:B1:E9:9C:CD:9F
Certificate issuer:       /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial:       019B775929DECE85EDDEE9AAF3D7FBB40F9A
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/7T34cJ5eXiFw90xTsWzMsemczZ8.roa
Signing time:             Thu 01 Jan 2026 02:18:10 +0000
ROA not before:           Thu 01 Jan 2026 02:18:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     10991
IP address blocks:        192.113.65.0/24 maxlen: 24
                          192.113.66.0/24 maxlen: 24
                          192.113.67.0/24 maxlen: 24
                          192.113.68.0/24 maxlen: 24
                          192.113.69.0/24 maxlen: 24
                          192.113.70.0/24 maxlen: 24
                          192.113.71.0/24 maxlen: 24
                          192.113.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:29:de:ce:85:ed:de:e9:aa:f3:d7:fb:b4:0f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
        Validity
            Not Before: Jan  1 02:18:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed3df8709e5e5e2170f74c53b16cccb1e99ccd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:8a:b7:30:f4:2f:02:97:5d:29:e6:a3:86:
                    ca:d8:75:6e:aa:8d:f2:2f:78:47:e5:b4:d6:96:ce:
                    06:4d:3a:68:b4:fe:96:8b:9c:67:b2:a6:0d:74:42:
                    e6:66:52:8a:c4:f0:ea:f3:c3:90:3a:d4:42:81:bb:
                    a0:e6:69:44:3a:db:09:48:61:f7:08:d0:e0:f2:f8:
                    d1:70:b6:b1:6d:c8:9b:a3:c9:76:ef:b5:d0:5d:ea:
                    48:8f:b8:20:16:e2:a2:21:96:0e:70:22:52:bb:b6:
                    09:7e:f2:f9:cc:58:f1:95:9c:42:22:73:57:4c:aa:
                    63:48:3b:f1:b1:7a:89:e1:92:75:d8:38:e2:8b:44:
                    20:92:57:87:c0:47:21:ec:dd:9d:35:f3:0a:2f:a7:
                    b6:cf:79:bc:4a:30:ba:a9:94:32:09:c3:45:df:86:
                    c2:16:c7:3d:fa:b6:57:74:d6:f4:fd:9f:c3:8f:6a:
                    1e:37:0b:34:fb:bc:42:e6:b4:6f:56:b3:73:3f:12:
                    0f:32:e4:3b:30:eb:26:13:ce:6f:a6:83:fa:d2:99:
                    0e:e8:2a:75:5a:dd:c5:0f:f2:0f:79:88:b7:f2:fa:
                    9e:0d:0c:30:fc:45:6c:fa:e8:13:49:6f:c3:95:e8:
                    f1:5e:32:47:69:ba:25:06:5c:d8:c0:37:e0:c3:97:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3D:F8:70:9E:5E:5E:21:70:F7:4C:53:B1:6C:CC:B1:E9:9C:CD:9F
            X509v3 Authority Key Identifier:
                keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/7T34cJ5eXiFw90xTsWzMsemczZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.113.65.0-192.113.72.255

    Signature Algorithm: sha256WithRSAEncryption
         2e:ff:24:1d:e3:2a:9c:21:36:3e:2f:81:19:dd:bc:f2:be:33:
         6d:f6:dd:d1:7c:f6:79:e9:74:2b:fe:e7:b2:f4:d8:f1:65:b0:
         93:4d:5d:44:64:93:ac:f6:57:74:af:09:3f:76:ce:c4:65:8a:
         0a:02:d6:a3:6b:c4:16:ca:1d:1c:bf:5d:34:db:e0:32:a1:ee:
         8d:86:de:43:01:4f:e7:e7:5a:fc:65:0b:ab:cc:95:67:51:1b:
         4a:cf:e3:78:69:25:4b:55:7e:b8:4b:5a:3a:e5:f6:1e:a5:1d:
         d4:9b:d2:e2:ad:ae:17:2b:33:b0:6a:d9:c7:25:24:d1:4b:41:
         b7:95:ea:d8:40:f3:f1:ad:eb:89:2f:9c:ae:83:31:72:19:56:
         96:17:39:2f:da:0c:22:ba:6e:3e:53:9e:bc:66:14:dc:c4:fd:
         10:ba:98:6f:20:96:83:ce:5f:77:69:13:29:af:9a:a7:0d:47:
         68:54:6e:60:dd:a5:26:21:57:5e:b3:ce:70:67:85:43:b3:eb:
         d3:8e:4f:de:45:8f:56:54:48:5e:e9:ba:66:e4:80:74:d3:25:
         f2:08:c0:82:c7:7a:fc:7a:26:fd:01:2d:c6:be:a2:86:3c:d3:
         f7:91:36:19:95:ee:e9:63:ae:cb:3b:14:b3:7b:e1:c1:c5:a4:
         7a:98:c0:b1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZt3WSnezoXt3umq89f7tA+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRlYzk5ZDg5NTY1YTYzNGE3YjJjNTQwMWZlZDdhYzQ3
YmYyMzIwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDNkZjg3MDllNWU1ZTIxNzBmNzRjNTNiMTZjY2NiMWU5OWNjZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAmKtzD0LwKXXSnmo4bK2HVuqo3y
L3hH5bTWls4GTTpotP6Wi5xnsqYNdELmZlKKxPDq88OQOtRCgbug5mlEOtsJSGH3
CNDg8vjRcLaxbcibo8l277XQXepIj7ggFuKiIZYOcCJSu7YJfvL5zFjxlZxCInNX
TKpjSDvxsXqJ4ZJ12Djii0QgkleHwEch7N2dNfMKL6e2z3m8SjC6qZQyCcNF34bC
Fsc9+rZXdNb0/Z/Dj2oeNws0+7xC5rRvVrNzPxIPMuQ7MOsmE85vpoP60pkO6Cp1
Wt3FD/IPeYi38vqeDQww/EVs+ugTSW/DlejxXjJHabolBlzYwDfgw5dUOwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFO09+HCeXl4hcPdMU7FszLHpnM2fMB8GA1UdIwQY
MBaAFCa97JnYlWWmNKeyxUAf7XrEe/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5Yzct
N2YyMDEyMTJkODgzLzEvN1QzNGNKNWVYaUZ3OTB4VHNXek1zZW1jelo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5YzctN2YyMDEyMTJkODgz
LzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAcUED
BADAcUgwDQYJKoZIhvcNAQELBQADggEBAC7/JB3jKpwhNj4vgRndvPK+M2323dF8
9nnpdCv+57L02PFlsJNNXURkk6z2V3SvCT92zsRligoC1qNrxBbKHRy/XTTb4DKh
7o2G3kMBT+fnWvxlC6vMlWdRG0rP43hpJUtVfrhLWjrl9h6lHdSb0uKtrhcrM7Bq
2cclJNFLQbeV6thA8/Gt64kvnK6DMXIZVpYXOS/aDCK6bj5TnrxmFNzE/RC6mG8g
loPOX3dpEymvmqcNR2hUbmDdpSYhV16zznBnhUOz69OOT95Fj1ZUSF7pumbkgHTT
JfIIwILHevx6Jv0BLca+ooY80/eRNhmV7uljrss7FLN74cHFpHqYwLE=
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:42:01 2026 by rpki-client