This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7MuEDWXrRgBxesly0Iaui8g6aQI.roa
File:                     7MuEDWXrRgBxesly0Iaui8g6aQI.roa (raw, json)
Hash identifier:          VPbMT9bi9J8flAIPiBY1KjbbV6ewd/tDm3EkqpXbXSc=
Subject key identifier:   EC:CB:84:0D:65:EB:46:00:71:7A:C9:72:D0:86:AE:8B:C8:3A:69:02
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       019B7C138031CB81712DE97137590C4B83DB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7MuEDWXrRgBxesly0Iaui8g6aQI.roa
Signing time:             Fri 02 Jan 2026 00:20:11 +0000
ROA not before:           Fri 02 Jan 2026 00:20:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198193
IP address blocks:        185.246.56.0/23 maxlen: 23
                          185.246.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 19:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:80:31:cb:81:71:2d:e9:71:37:59:0c:4b:83:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Jan  2 00:20:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eccb840d65eb4600717ac972d086ae8bc83a6902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:af:4d:ae:70:27:2a:64:0c:88:3e:de:63:
                    18:9e:da:4f:34:49:af:72:3e:c2:44:cb:c1:ec:0c:
                    90:3e:43:5f:36:49:33:71:32:62:05:95:cd:11:b1:
                    45:74:e8:20:b1:09:dd:59:0d:3a:87:f8:24:ee:81:
                    a1:25:16:ba:e8:2d:ea:e3:01:f2:29:60:8d:bd:7b:
                    dd:56:95:bf:76:a7:e3:63:c3:1a:6a:85:9c:f3:b8:
                    83:61:66:78:a8:0f:1d:88:00:00:8a:12:72:ca:22:
                    f3:1b:06:35:eb:f4:06:89:29:32:39:f0:59:7b:00:
                    d8:d2:d8:30:f8:96:4b:01:6e:6a:b8:0a:f4:1b:ae:
                    01:7a:81:71:95:e2:dd:f0:05:94:f1:56:ff:57:96:
                    ab:78:8c:be:dd:e7:c2:43:2e:d3:8b:a9:ec:74:37:
                    0b:ff:28:3a:f2:22:30:9b:9d:c7:d3:52:8e:dd:47:
                    ab:7c:03:3e:55:5f:ae:78:4e:1b:ff:ca:e6:bb:db:
                    3c:93:e0:13:41:e8:07:10:42:a5:d7:ec:e1:dc:18:
                    2f:60:c5:19:e3:dd:c6:7e:e5:85:69:b4:c4:c2:a2:
                    bb:a1:73:63:bb:41:7a:ee:e1:4c:4c:99:04:93:25:
                    c1:f0:84:f3:58:cc:4b:94:0d:26:fd:bd:6f:3f:90:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CB:84:0D:65:EB:46:00:71:7A:C9:72:D0:86:AE:8B:C8:3A:69:02
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7MuEDWXrRgBxesly0Iaui8g6aQI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:86:e8:e3:1d:80:a3:39:10:1c:3c:e3:9b:c7:4d:25:92:
         b0:fa:98:b5:c4:26:82:3d:1e:3f:7c:da:27:a2:4f:84:41:a3:
         50:83:2e:64:69:21:c8:af:19:21:1d:ff:cd:52:c3:59:da:c7:
         9b:8d:c9:a5:53:17:28:5a:da:2c:d3:d5:f5:80:cf:d9:b5:95:
         3d:9b:5c:98:b9:24:94:58:44:2b:24:a6:8c:ee:f7:df:68:d2:
         97:25:f9:10:a4:ba:28:f9:30:ea:28:15:01:bf:ca:a6:30:31:
         72:10:19:1f:5b:69:03:7b:41:51:6d:ea:10:8c:9b:68:2b:2e:
         87:7f:70:82:95:63:61:e4:d7:2d:fe:34:4e:e0:e9:f0:f6:fe:
         a8:1c:64:6c:15:7f:38:eb:2f:cc:fb:90:2e:81:88:16:64:7c:
         49:57:94:6e:9f:bd:78:ab:d2:cd:bc:35:ed:5e:8b:c1:6b:87:
         fe:58:fe:16:2d:d8:cb:d7:9c:75:01:e9:01:12:e4:95:14:26:
         19:92:af:3d:cf:b5:3d:33:cb:ea:25:e6:35:30:87:cb:b9:9e:
         6c:d9:22:12:0d:fd:35:b5:0f:50:40:56:b1:90:e6:fc:ab:65:
         8b:6a:64:7f:93:8a:7f:6d:fa:6a:b7:ba:1d:92:d2:db:95:ac:
         33:df:11:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8E4Axy4FxLelxN1kMS4PbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwMTAyMDAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2NiODQwZDY1ZWI0NjAwNzE3YWM5NzJkMDg2YWU4YmM4M2E2OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodSvTa5wJypkDIg+3mMYntpPNEmv
cj7CRMvB7AyQPkNfNkkzcTJiBZXNEbFFdOggsQndWQ06h/gk7oGhJRa66C3q4wHy
KWCNvXvdVpW/dqfjY8MaaoWc87iDYWZ4qA8diAAAihJyyiLzGwY16/QGiSkyOfBZ
ewDY0tgw+JZLAW5quAr0G64BeoFxleLd8AWU8Vb/V5areIy+3efCQy7Ti6nsdDcL
/yg68iIwm53H01KO3UerfAM+VV+ueE4b/8rmu9s8k+ATQegHEEKl1+zh3BgvYMUZ
493GfuWFabTEwqK7oXNju0F67uFMTJkEkyXB8ITzWMxLlA0m/b1vP5BbcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOzLhA1l60YAcXrJctCGrovIOmkCMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvN011RURXWHJSZ0J4ZXNseTBJYXVpOGc2YVFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufY4MA0G
CSqGSIb3DQEBCwUAA4IBAQA/AYbo4x2AozkQHDzjm8dNJZKw+pi1xCaCPR4/fNon
ok+EQaNQgy5kaSHIrxkhHf/NUsNZ2sebjcmlUxcoWtos09X1gM/ZtZU9m1yYuSSU
WEQrJKaM7vffaNKXJfkQpLoo+TDqKBUBv8qmMDFyEBkfW2kDe0FRbeoQjJtoKy6H
f3CClWNh5Nct/jRO4Onw9v6oHGRsFX846y/M+5AugYgWZHxJV5Run714q9LNvDXt
XovBa4f+WP4WLdjL15x1AekBEuSVFCYZkq89z7U9M8vqJeY1MIfLuZ5s2SISDf01
tQ9QQFaxkOb8q2WLamR/k4p/bfpqt7odktLblawz3xHP
-----END CERTIFICATE-----
Generated at Fri Jan 2 23:48:17 2026 by rpki-client