This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/m7kVx-sKSPUtRod6BBQcaAsqdtY.roa
File:                     m7kVx-sKSPUtRod6BBQcaAsqdtY.roa (raw, json)
Hash identifier:          ySihte+ihW35NP6Gcv6i5fBq39Uu/G8KkgjvNw72U1A=
Subject key identifier:   9B:B9:15:C7:EB:0A:48:F5:2D:46:87:7A:04:14:1C:68:0B:2A:76:D6
Certificate issuer:       /CN=262762b73be226b171999412625acc7270244343
Certificate serial:       019B7F14EC21150FA6D915D104F7BC0B11CF
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/m7kVx-sKSPUtRod6BBQcaAsqdtY.roa
Signing time:             Fri 02 Jan 2026 14:20:36 +0000
ROA not before:           Fri 02 Jan 2026 14:20:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214289
IP address blocks:        185.142.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:ec:21:15:0f:a6:d9:15:d1:04:f7:bc:0b:11:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=262762b73be226b171999412625acc7270244343
        Validity
            Not Before: Jan  2 14:20:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9bb915c7eb0a48f52d46877a04141c680b2a76d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:36:25:47:06:4e:b1:a9:86:26:b2:90:ef:
                    4e:fa:e7:5e:7b:4f:54:2c:78:42:13:7f:e4:81:12:
                    c2:bc:07:89:ca:6a:d0:38:ca:13:ee:00:4a:1c:40:
                    d4:61:b3:9e:df:e8:c8:1a:57:b3:d2:06:e5:04:5f:
                    a7:d2:22:f1:4a:73:c6:be:dc:96:06:da:99:8d:77:
                    94:46:b4:31:ec:29:db:a1:28:59:d3:88:47:1d:54:
                    d6:3d:ac:d3:6b:ca:68:c8:9f:e1:1d:1e:43:4f:f8:
                    2b:f1:b1:98:83:63:f7:87:64:62:57:44:cc:eb:e0:
                    7d:da:be:83:a3:25:10:bf:a0:f9:ef:d5:d0:30:47:
                    5d:63:28:3b:0f:80:50:d4:bf:e7:b1:0e:ee:cf:53:
                    e3:f1:c8:68:18:17:f2:d3:54:b9:98:5d:3a:72:08:
                    ad:de:95:8b:18:ae:d8:6e:af:ff:c7:70:66:6c:8c:
                    03:db:fd:95:6c:03:f5:f3:7f:29:3b:48:5b:7d:5f:
                    68:36:19:3b:d4:82:30:28:ae:52:71:1f:00:22:94:
                    dd:1f:2c:d9:62:3a:20:97:8a:4f:be:cb:a8:37:ce:
                    2d:0d:ce:66:df:da:9e:e3:b8:55:14:6a:c7:fd:25:
                    bc:bf:ae:fc:21:a5:51:e0:07:4f:57:e7:a5:22:72:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B9:15:C7:EB:0A:48:F5:2D:46:87:7A:04:14:1C:68:0B:2A:76:D6
            X509v3 Authority Key Identifier:
                keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/m7kVx-sKSPUtRod6BBQcaAsqdtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:4c:66:a4:d6:64:15:85:1c:f0:e3:5e:c5:b4:d9:02:51:5c:
         eb:11:e6:7f:87:92:03:7b:44:13:52:7e:7c:0f:63:66:f1:d8:
         e1:a2:5b:b8:b2:89:f4:75:10:1d:c4:5c:7d:4a:bd:53:63:5b:
         4a:43:99:0c:90:d2:2e:24:28:c5:15:f1:ce:dd:f7:b0:52:4f:
         07:41:24:2f:73:9a:95:14:da:32:75:58:63:d5:39:9d:f6:21:
         4d:85:09:4f:b6:43:f8:39:8a:2b:07:dc:a6:1f:a8:b3:e0:1c:
         33:c8:31:5f:3b:0e:2e:41:8a:5e:98:5a:14:bb:c7:8f:4d:5b:
         32:dc:52:00:86:9b:38:36:b3:8e:b2:79:cf:f5:98:14:b9:82:
         be:f0:b7:60:37:e7:ee:b7:c3:d8:26:c5:9f:60:0e:5f:17:17:
         c0:f7:cc:31:d1:18:5f:53:24:74:a3:8d:ff:62:32:aa:36:fa:
         4c:ec:f0:fd:ab:f6:f0:f6:a0:80:27:49:59:26:59:14:be:8d:
         de:82:73:5c:d0:ad:22:f0:99:75:0e:3d:19:19:57:79:34:e8:
         42:2d:48:49:81:4e:7b:d2:35:1c:3c:ce:e9:d8:07:e3:42:51:
         c7:a7:5a:af:f6:96:5f:a3:68:af:7c:2b:33:c0:0c:16:f6:32:
         d8:10:1f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:11 2026 by rpki-client