This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/759EZZ7sNbintfo3VxNnHUcoDHw.roa
File:                     759EZZ7sNbintfo3VxNnHUcoDHw.roa (raw, json)
Hash identifier:          m15W6uTHGDBUqzkZ4aLR/GyVbfgOe0pjk7+WPyqtkds=
Subject key identifier:   EF:9F:44:65:9E:EC:35:B8:A7:B5:FA:37:57:13:67:1D:47:28:0C:7C
Certificate issuer:       /CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca
Certificate serial:       019B7F808295C17B0211FDA56F27E16B1547
Authority key identifier: 1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/759EZZ7sNbintfo3VxNnHUcoDHw.roa
Signing time:             Fri 02 Jan 2026 16:18:07 +0000
ROA not before:           Fri 02 Jan 2026 16:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204065
IP address blocks:        185.254.244.0/22 maxlen: 22
                          2a0c:54c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:80:82:95:c1:7b:02:11:fd:a5:6f:27:e1:6b:15:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebec6e548c1d2c68319c8d29a35fc06d05c5ca
        Validity
            Not Before: Jan  2 16:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef9f44659eec35b8a7b5fa375713671d47280c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8f:ba:de:70:9f:0b:4b:fb:12:4e:6d:e5:d5:
                    99:43:70:24:0d:51:98:44:68:29:b5:7d:c9:f4:c9:
                    3e:48:d6:15:9d:a0:24:02:1c:e6:db:4e:26:c2:40:
                    15:07:25:c1:30:3f:ed:95:14:6e:51:91:c8:49:4c:
                    15:02:95:d5:95:30:da:e6:db:43:04:4d:32:fa:0e:
                    e1:2a:66:2c:53:ae:fd:33:8f:b7:e6:1a:46:08:f5:
                    f8:36:60:85:09:40:08:07:48:8e:96:ee:1f:ef:ff:
                    55:b3:ac:6c:18:79:28:7e:79:18:e0:e3:33:86:ec:
                    01:ac:b6:dd:d5:8e:ff:cd:00:04:84:d5:67:45:99:
                    cb:71:25:cd:08:13:0d:fc:63:24:59:bc:50:2b:90:
                    e0:3b:a8:b5:8f:02:4f:ec:ce:79:9b:da:61:77:30:
                    9a:f5:73:f9:07:09:c8:8e:2e:2c:72:55:86:54:7c:
                    36:6b:e7:35:b9:c4:77:e3:30:56:79:14:98:18:f7:
                    ed:75:e3:70:01:d2:dc:e3:e0:46:85:c9:41:d9:b4:
                    f5:27:f0:37:8e:46:3a:88:26:93:d3:ad:3a:44:8b:
                    89:73:ff:8f:3b:8b:d0:93:72:3e:dd:9f:15:e8:3b:
                    12:be:a7:24:63:be:77:39:3c:0d:53:0b:b0:cf:8d:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9F:44:65:9E:EC:35:B8:A7:B5:FA:37:57:13:67:1D:47:28:0C:7C
            X509v3 Authority Key Identifier:
                keyid:1B:EB:EC:6E:54:8C:1D:2C:68:31:9C:8D:29:A3:5F:C0:6D:05:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vsblSMHSxoMZyNKaNfwG0Fxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/759EZZ7sNbintfo3VxNnHUcoDHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f85a54-7f8d-4b2f-8cbc-2a2bbcc2103f/1/G-vsblSMHSxoMZyNKaNfwG0Fxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.244.0/22
                IPv6:
                  2a0c:54c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:67:78:ec:6b:fc:b0:14:4e:01:c5:bd:71:7f:96:8a:ae:c8:
         46:93:e0:e7:67:89:8d:fb:3e:66:77:33:42:9a:19:1b:71:5b:
         fe:12:31:99:05:59:83:2b:dc:f9:6d:38:3e:35:df:ab:4e:b3:
         3e:41:85:79:15:f8:18:4d:d1:bd:b9:ef:8e:35:8f:d3:e4:ec:
         78:80:ed:3d:2b:03:e2:ed:ab:e0:11:b2:59:44:47:0b:80:cb:
         c3:6a:47:d2:c6:2f:0b:23:fd:ad:5e:92:d8:90:20:71:c9:56:
         ec:66:33:5f:e2:26:5c:58:a2:1a:3c:74:56:31:3f:d3:a1:0b:
         f4:e6:48:78:d4:b4:df:3a:21:36:22:1d:30:ef:6c:ce:76:00:
         89:bb:15:f0:ce:6d:0a:51:f6:5e:cc:82:9c:01:f9:ae:8f:ec:
         c4:99:9d:ff:12:00:1d:8e:d5:88:4a:f8:4c:87:79:d5:3a:fe:
         f3:c1:3d:5f:34:08:5b:cc:ad:19:63:f4:c7:6f:66:5d:a9:d2:
         5e:65:4a:1d:f6:f4:14:80:72:17:69:48:c2:6d:46:b4:e1:c8:
         4d:9a:7a:b7:bf:4b:ec:3d:0f:46:ff:7a:63:9a:69:c2:42:2e:
         2f:44:6c:1f:9c:81:2e:6c:2d:5d:5f:8d:9a:a9:60:41:3d:b4:
         ad:e2:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:25 2026 by rpki-client