This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/7ydENpjQareWHpO9uslcqsis6UA.roa
File:                     7ydENpjQareWHpO9uslcqsis6UA.roa (raw, json)
Hash identifier:          wTeA8bx96xEJxxUYSI6aHxzjGmdwgzhbWWttVJ8dPDw=
Subject key identifier:   EF:27:44:36:98:D0:6A:B7:96:1E:93:BD:BA:C9:5C:AA:C8:AC:E9:40
Certificate issuer:       /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial:       019B7D5C043B7DF8703C8BA35075A5135A7C
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/7ydENpjQareWHpO9uslcqsis6UA.roa
Signing time:             Fri 02 Jan 2026 06:19:00 +0000
ROA not before:           Fri 02 Jan 2026 06:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213093
IP address blocks:        185.184.62.0/24 maxlen: 24
                          185.184.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:04:3b:7d:f8:70:3c:8b:a3:50:75:a5:13:5a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
        Validity
            Not Before: Jan  2 06:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef27443698d06ab7961e93bdbac95caac8ace940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:e8:80:e6:b3:40:ef:30:a8:36:35:a1:60:
                    3d:6b:19:96:10:b0:d7:b1:fd:7e:37:66:bf:87:c7:
                    f0:d3:6f:98:3d:8c:80:5c:83:fd:c6:3a:bb:78:21:
                    88:b3:61:0f:9f:db:2c:f4:b5:2d:be:7d:58:eb:f0:
                    85:8f:13:ef:c8:ee:71:aa:15:38:5b:ef:69:68:a9:
                    90:a5:57:2e:cc:0a:7a:04:d7:8a:dc:7d:8f:83:5f:
                    f3:d1:a4:8b:33:e8:06:f9:b8:73:73:98:0f:d4:68:
                    59:7e:35:e5:fe:f4:22:2c:fd:38:49:eb:7a:5f:be:
                    53:07:4c:33:80:5a:7e:7b:86:d8:0a:bf:9b:06:66:
                    21:ac:24:96:66:31:66:28:49:bf:8a:94:a9:c5:c9:
                    84:ef:46:81:b0:6c:54:f8:61:f4:b1:93:69:b0:83:
                    9e:7c:cf:82:7d:f0:c3:12:15:7a:cb:e3:bd:4e:61:
                    35:5f:a8:a8:54:8b:b8:0c:73:a0:b6:fa:c9:c0:f7:
                    66:b3:70:ba:2c:63:c3:08:8f:f9:27:0e:15:e2:55:
                    67:be:bb:c0:ab:6b:4c:1c:44:82:1d:eb:61:21:71:
                    1d:58:81:31:d8:3b:00:52:e2:7b:8b:4a:09:85:b8:
                    61:e1:b3:2f:fc:30:f2:95:be:a8:b4:a2:35:97:79:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:44:36:98:D0:6A:B7:96:1E:93:BD:BA:C9:5C:AA:C8:AC:E9:40
            X509v3 Authority Key Identifier:
                keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/7ydENpjQareWHpO9uslcqsis6UA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:e7:47:f2:d2:5c:0f:cd:e5:90:19:83:e3:b2:79:29:88:bf:
         94:5e:8a:b9:59:b5:a1:28:59:3e:f0:71:14:13:36:10:31:fc:
         f5:df:44:b6:46:92:6d:3e:cc:2d:77:ef:e4:59:a3:ef:ae:88:
         27:7f:fe:e3:10:40:cd:de:cb:7b:65:e5:e3:29:01:e4:ad:d3:
         9d:83:5c:ad:69:04:8f:ea:fd:6a:8d:cf:14:c2:f2:2f:86:87:
         0e:07:50:59:a3:34:8c:c4:78:0c:e5:e8:59:e0:88:07:a5:70:
         a9:66:86:cb:22:ef:ad:05:19:1a:07:bf:09:d4:0a:ad:79:44:
         8a:9b:2b:98:66:2c:52:33:c7:da:cd:10:b1:8f:cf:c9:dc:a9:
         98:2d:25:f5:4f:8e:79:fe:9e:89:c7:ff:7a:7b:c0:f8:e1:a7:
         1b:55:a1:2a:11:c2:9d:0f:8a:d3:5c:8f:7e:c6:f2:fc:59:29:
         a7:35:15:15:72:e3:cc:73:3e:1c:0c:2e:7c:fe:20:ba:f4:9a:
         91:89:ce:9a:f6:af:e1:81:b7:95:b1:16:69:f2:82:50:e0:37:
         a8:dd:ca:92:88:b1:4d:cb:a0:21:b3:17:1c:55:ea:eb:5e:35:
         87:28:43:1c:a0:92:d8:87:77:ed:30:8b:04:bb:02:1a:6b:9c:
         e3:8e:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:11 2026 by rpki-client