This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa
File:                     bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa (raw, json)
Hash identifier:          9tpXPxjrcGnuiYj+mPBltbwiQGnnVBk/rVL0p+GtkMk=
Subject key identifier:   6C:CC:3F:B4:C8:04:17:72:63:91:67:65:23:F9:1B:CA:19:A2:64:1F
Certificate issuer:       /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial:       019B7E38D6E45EF5F20294F969C8A3DE461F
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa
Signing time:             Fri 02 Jan 2026 10:20:12 +0000
ROA not before:           Fri 02 Jan 2026 10:20:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47474
IP address blocks:        193.110.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:d6:e4:5e:f5:f2:02:94:f9:69:c8:a3:de:46:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
        Validity
            Not Before: Jan  2 10:20:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ccc3fb4c80417726391676523f91bca19a2641f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:e4:0b:69:40:73:03:56:48:ab:89:14:0a:
                    8b:04:49:19:ab:6a:eb:2f:2f:65:a0:c6:3e:f8:a0:
                    7f:4f:15:69:aa:68:09:1d:47:72:da:1a:f2:c4:17:
                    8c:02:6e:1a:76:1f:aa:74:1c:17:9f:2d:44:19:99:
                    fb:28:56:54:d9:1f:32:39:10:5b:d4:60:46:f9:c2:
                    89:9b:4f:11:5a:b7:b2:9c:42:86:fc:70:29:1b:08:
                    6b:15:f8:96:0a:4a:d6:f4:1c:47:58:7d:d7:8a:c3:
                    cd:ac:43:72:84:46:00:6b:fb:00:fc:bf:5c:2b:9a:
                    0d:f6:65:d6:34:55:01:2e:81:df:5d:b5:f9:d1:58:
                    00:3b:04:65:ca:e7:fb:bc:57:20:e3:8d:1c:84:29:
                    2c:8c:73:83:66:93:3b:32:e8:f7:5e:00:ce:33:6c:
                    a4:6d:85:10:3b:db:9c:b2:93:ce:f3:9a:a8:d9:08:
                    e2:41:27:7c:0f:87:6b:35:17:77:a3:91:e0:51:c3:
                    ac:44:7e:f2:82:fa:fc:f2:bd:de:bb:3e:66:b2:f1:
                    f0:56:2e:7f:f8:dc:53:98:e8:34:d2:b1:be:ea:3e:
                    3f:ee:03:c4:22:4b:55:7a:41:b8:3a:4b:c8:76:f2:
                    80:0c:81:dd:95:85:08:a4:b6:a0:f1:35:a0:30:bb:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CC:3F:B4:C8:04:17:72:63:91:67:65:23:F9:1B:CA:19:A2:64:1F
            X509v3 Authority Key Identifier:
                keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:5e:21:5d:61:08:7d:21:83:76:e1:41:ed:fd:61:ff:30:
         45:66:c1:d4:c9:a9:23:a4:9d:12:51:eb:0a:1e:11:60:5b:f3:
         fd:f5:75:7e:fa:68:7c:ce:7c:63:c2:f2:ad:e6:56:a7:79:3f:
         61:b9:94:7f:57:71:bd:ea:cb:20:e8:5c:2d:28:43:ce:ea:8e:
         61:6f:6a:c6:9a:8a:59:06:7d:11:30:44:16:fd:d8:c3:1a:97:
         ba:ff:38:95:57:49:ff:0a:4f:94:3d:a9:e7:e5:67:5c:4a:67:
         7b:15:c3:84:d9:81:57:ee:a9:f2:0f:24:75:14:51:ed:8b:69:
         a7:24:3f:2c:9f:db:a4:39:53:bf:f5:e6:d7:0a:dd:5a:58:35:
         7d:3f:72:22:8d:1e:6e:55:8f:45:95:62:d7:f1:b7:d4:5e:d7:
         51:a0:a6:41:d9:f2:87:95:a9:d3:3e:a8:ce:f8:73:5e:46:85:
         8b:b6:be:b0:de:55:b9:ba:12:1e:34:b3:8e:c0:9a:1a:3e:f2:
         5e:6d:81:a7:e2:6a:8e:b8:e9:b6:85:8b:45:db:cf:9e:c2:a7:
         71:8a:8c:87:60:6c:5c:5a:66:d4:f2:4b:35:f8:38:01:dc:ec:
         c9:8d:50:f7:f2:58:ec:92:bb:f2:9e:ee:2d:27:d3:d2:76:1f:
         9b:22:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:13 2026 by rpki-client