This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/7IcPHrXROTuNTf_SahmIzDpYk_c.roa
File:                     7IcPHrXROTuNTf_SahmIzDpYk_c.roa (raw, json)
Hash identifier:          L5UDzTnOOmL94lsJB5GitXxrT2tqiHBlNusXsGvxUwU=
Subject key identifier:   EC:87:0F:1E:B5:D1:39:3B:8D:4D:FF:D2:6A:19:88:CC:3A:58:93:F7
Certificate issuer:       /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial:       019C2CFB0134BD5EFF64015FA1B58DCA2B6C
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/7IcPHrXROTuNTf_SahmIzDpYk_c.roa
Signing time:             Thu 05 Feb 2026 08:46:13 +0000
ROA not before:           Thu 05 Feb 2026 08:46:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205537
IP address blocks:        91.235.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2c:fb:01:34:bd:5e:ff:64:01:5f:a1:b5:8d:ca:2b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
        Validity
            Not Before: Feb  5 08:46:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec870f1eb5d1393b8d4dffd26a1988cc3a5893f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:9c:89:f1:30:08:0f:54:34:61:fc:9e:ae:
                    13:ff:19:ae:e7:cb:b4:7d:d1:08:4d:fe:2c:57:e4:
                    94:80:2c:8a:cc:ff:46:21:cb:a2:0b:c4:ca:9c:36:
                    46:e7:bb:4d:cb:0c:42:48:08:26:da:81:22:e7:70:
                    46:79:91:9a:21:8b:2c:ce:af:eb:0e:0c:2e:dd:64:
                    8f:68:b8:ae:1a:b6:53:14:bb:1c:88:59:ac:49:4e:
                    f7:ec:f3:5f:1f:0d:73:9e:49:8d:9a:06:08:72:7b:
                    c7:ac:b0:da:17:0f:98:09:dd:04:13:d8:b6:0a:3d:
                    f7:93:a6:6f:23:a6:e7:46:b8:a0:64:61:02:b0:c7:
                    f6:2c:25:20:34:5f:a0:95:e6:cb:18:94:8a:f9:15:
                    48:d0:59:24:11:ca:c6:9b:54:f2:75:4c:9b:0a:d1:
                    b1:44:fe:53:71:01:38:f0:8b:c7:04:17:01:7e:a3:
                    08:4c:46:f4:ea:cd:67:eb:44:28:2d:87:b8:84:f4:
                    3e:03:06:fb:af:6c:36:6c:c0:88:a3:86:5a:2f:f0:
                    e7:9d:75:4b:49:93:03:72:37:12:f4:ae:d6:c9:d2:
                    eb:e0:19:14:1b:55:ed:28:b7:1e:1d:f3:61:86:25:
                    d4:38:69:89:a6:2f:32:44:11:9e:b8:da:da:dd:23:
                    b9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:87:0F:1E:B5:D1:39:3B:8D:4D:FF:D2:6A:19:88:CC:3A:58:93:F7
            X509v3 Authority Key Identifier:
                keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/7IcPHrXROTuNTf_SahmIzDpYk_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.235.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f2:9e:a8:9f:f6:dc:ed:8b:4c:de:72:a5:17:1a:30:59:83:
         ab:79:c7:d3:dc:81:0c:73:71:97:72:28:db:07:72:19:7d:8b:
         92:18:e4:33:5b:dd:c5:2d:ed:22:22:cd:ad:88:04:c0:68:bc:
         aa:44:dd:05:cd:56:c2:25:bd:01:99:62:b0:4c:8b:ed:56:58:
         91:2a:b4:55:49:5c:cb:94:48:e3:e8:e2:74:2f:af:f8:06:a6:
         d5:1b:3e:0c:ab:4d:4e:21:bc:f3:64:2f:92:de:f7:97:f3:c9:
         e6:bc:3c:5d:fd:53:95:75:13:52:a3:83:91:01:c4:81:27:e2:
         1c:a2:8b:01:94:8a:7b:e1:fa:3d:64:49:5d:03:9f:ce:01:1d:
         40:49:62:2a:49:9f:05:a5:c6:a5:5e:c4:48:db:2d:39:7d:ae:
         8f:56:87:f5:26:e5:19:5a:4a:e0:3c:c6:e1:77:66:0c:8f:24:
         cd:47:57:55:9a:b9:59:cd:69:50:f5:61:d4:1b:ac:52:e6:f8:
         31:95:b3:b4:d9:c5:5d:27:2b:b9:59:ce:16:cf:45:4e:cb:9e:
         04:e0:03:aa:0e:b2:cd:1c:fd:7d:d0:fe:0f:3c:a6:8b:29:9d:
         26:cb:cd:92:e7:4d:d3:9f:88:fa:6e:26:20:2f:68:0f:96:8a:
         ab:0d:8b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:57 2026 by rpki-client