This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/i7zxXmP3XzYJwJEU_15zW59SCTc.roa
File:                     i7zxXmP3XzYJwJEU_15zW59SCTc.roa (raw, json)
Hash identifier:          yrt7UH4SWPcCzRagghuKP9FdTtwWfWz6NVniBPL/djQ=
Subject key identifier:   8B:BC:F1:5E:63:F7:5F:36:09:C0:91:14:FF:5E:73:5B:9F:52:09:37
Certificate issuer:       /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial:       019B7835436D68D117A5316045298AE6DAFC
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/i7zxXmP3XzYJwJEU_15zW59SCTc.roa
Signing time:             Thu 01 Jan 2026 06:18:35 +0000
ROA not before:           Thu 01 Jan 2026 06:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39617
IP address blocks:        194.50.88.0/24 maxlen: 24
                          2001:678:5ec::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:43:6d:68:d1:17:a5:31:60:45:29:8a:e6:da:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
        Validity
            Not Before: Jan  1 06:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8bbcf15e63f75f3609c09114ff5e735b9f520937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:ea:bf:00:4b:85:ef:49:0e:96:e5:3e:37:
                    60:b0:e0:e2:32:b9:04:eb:24:be:ba:0b:94:d1:69:
                    a9:b3:b6:1a:c8:cf:4b:7e:d9:0c:61:84:03:f7:f2:
                    30:13:e7:74:be:b1:61:6a:2f:16:d5:ac:6c:3a:f5:
                    f9:db:0a:1d:53:38:be:20:f0:d8:63:ec:9f:17:a7:
                    52:f2:41:fe:8e:49:02:06:5d:9c:31:21:ee:b6:9d:
                    9e:4a:ed:5d:0d:15:6c:e3:b4:6b:76:62:55:5c:2e:
                    aa:ec:57:e6:d9:18:87:45:1d:12:5e:58:70:5e:4b:
                    ee:b8:2a:23:f4:01:1c:7c:ff:6c:0c:7d:9f:2d:ac:
                    9d:47:87:ed:53:9f:9c:ab:ce:80:fe:eb:8b:3b:c6:
                    39:1b:94:1f:e1:40:4c:c1:99:84:6c:cd:ec:b8:0b:
                    96:99:bf:ee:91:a7:5b:e2:54:ee:86:ff:84:f4:d1:
                    1a:f0:9a:e5:18:16:a1:45:11:cd:42:42:6c:3f:89:
                    74:13:99:87:ca:23:1a:11:9c:f5:f9:2c:df:cc:44:
                    ae:a1:b4:11:19:13:7e:e0:17:0f:22:b8:c8:79:1a:
                    a0:60:73:12:df:3b:12:fe:23:e7:c7:4f:2b:17:ea:
                    dd:d3:77:91:5d:6d:41:01:2e:13:56:65:4a:dd:33:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BC:F1:5E:63:F7:5F:36:09:C0:91:14:FF:5E:73:5B:9F:52:09:37
            X509v3 Authority Key Identifier:
                keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/i7zxXmP3XzYJwJEU_15zW59SCTc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.88.0/24
                IPv6:
                  2001:678:5ec::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:7a:b3:f0:5e:46:50:86:bf:7e:e0:2d:0d:08:51:24:ec:
         18:6f:2f:f3:10:3f:6c:60:1c:d5:4d:f2:6e:85:b4:22:2a:4f:
         8f:c7:2d:00:f9:d8:91:b4:d4:77:1f:44:ee:21:55:49:88:a5:
         e8:65:27:ce:63:a2:f7:80:7d:47:9b:2f:80:09:3f:e1:d1:6d:
         00:39:e3:12:06:60:ef:a0:40:a3:ea:78:d3:3b:e0:40:71:23:
         1d:b8:0f:99:30:42:2a:26:9e:8b:6c:a1:2d:8a:ac:00:f6:65:
         43:9e:5c:e7:03:fb:1b:99:4a:ad:92:fc:96:17:ac:c1:d7:68:
         dd:9f:51:f7:b1:8a:de:b0:ca:9d:14:2b:67:18:92:f4:25:c8:
         e0:15:30:a6:1f:1d:51:20:2a:ae:ae:5c:48:74:f1:50:97:8d:
         9b:67:73:66:db:0c:27:a0:6e:a9:e9:e6:61:80:4d:28:07:8f:
         36:eb:0e:a5:99:6f:be:e6:29:20:86:d7:58:0e:61:7a:7b:37:
         18:68:c1:71:75:cc:74:50:f8:8e:49:97:df:86:54:59:ce:f1:
         06:f7:46:05:10:13:2e:1d:5a:8e:e9:1e:a3:18:69:83:25:4e:
         06:f9:8b:cb:3f:a8:d1:1a:e4:65:71:91:15:9c:65:f7:6e:a0:
         86:73:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:15 2026 by rpki-client