This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9ciSFxfpsFEJtvCxwwKQui6r5zM.roa
File:                     9ciSFxfpsFEJtvCxwwKQui6r5zM.roa (raw, json)
Hash identifier:          QooSkMFERuaO2unvGuJR36695C6QceBrXMuXSVRQ/9s=
Subject key identifier:   F5:C8:92:17:17:E9:B0:51:09:B6:F0:B1:C3:02:90:BA:2E:AB:E7:33
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       019B77C6D0CD4C0F1794D7090B9DE310F382
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9ciSFxfpsFEJtvCxwwKQui6r5zM.roa
Signing time:             Thu 01 Jan 2026 04:17:56 +0000
ROA not before:           Thu 01 Jan 2026 04:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216063
IP address blocks:        88.151.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 06:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:d0:cd:4c:0f:17:94:d7:09:0b:9d:e3:10:f3:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Jan  1 04:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5c8921717e9b05109b6f0b1c30290ba2eabe733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:eb:0b:72:17:d6:cf:7a:a6:59:c3:f2:75:
                    09:98:df:3b:65:ee:f1:58:82:94:7f:69:c0:31:fb:
                    47:ea:ad:0f:5d:07:41:92:21:d6:ee:26:35:ff:55:
                    b7:5b:03:f5:e6:98:c5:5a:ac:22:fa:6d:e6:b2:a4:
                    bf:84:68:29:2e:99:79:e1:3c:52:39:49:5f:62:3e:
                    74:cf:a7:79:ae:35:73:fd:0a:d4:22:71:14:37:8b:
                    b7:a2:77:3d:67:4e:6c:b0:66:5d:1f:1e:12:04:64:
                    ea:6a:42:ff:86:4d:3d:d1:84:30:99:5c:f0:e7:ce:
                    46:e2:92:b4:9b:6e:01:b9:71:2f:27:18:8b:47:5d:
                    ad:db:76:75:ab:c5:73:89:2d:3e:00:71:f6:8d:82:
                    c6:63:9c:da:28:2a:1c:ae:10:03:e0:80:94:c8:19:
                    5f:61:f1:78:03:16:03:a0:f1:26:f8:1b:f0:dc:ad:
                    89:3d:00:e4:b0:19:78:9b:d2:1a:62:db:8e:c0:1f:
                    a3:84:03:38:fc:9a:68:40:4e:e0:62:de:53:e0:11:
                    d5:d5:4b:66:c4:82:a0:7a:21:12:cd:f8:91:04:39:
                    a9:bd:2c:51:08:8b:f6:c2:ff:a2:c7:e1:22:a4:0f:
                    90:84:3a:60:23:f9:f2:10:57:51:e6:49:0f:0e:a9:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C8:92:17:17:E9:B0:51:09:B6:F0:B1:C3:02:90:BA:2E:AB:E7:33
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/9ciSFxfpsFEJtvCxwwKQui6r5zM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:cf:b5:8d:f9:1d:f1:75:70:b5:3d:4f:70:cb:8d:5b:7c:33:
         43:ec:49:12:3f:ac:87:dc:42:a4:2b:18:47:fe:83:8e:0e:02:
         30:d4:f8:09:c7:da:7b:85:f3:0f:54:7f:f6:be:27:e2:bf:50:
         90:42:f9:02:8c:56:03:d5:9a:53:ee:0e:d0:eb:e9:95:e6:9f:
         95:53:b5:a3:19:b4:e9:f9:db:c5:40:8d:f3:6e:19:90:1c:ff:
         7b:44:6d:26:0c:b2:b2:67:ca:be:dc:97:b5:4b:77:54:aa:3a:
         2c:ab:4b:7b:aa:e7:55:b8:72:b0:f7:e1:f0:e1:0e:fe:bf:5f:
         75:95:38:a4:62:3a:1c:b7:24:52:eb:c7:aa:46:8b:22:93:07:
         4d:98:64:f4:ca:6d:7f:59:ac:a3:3c:ce:1e:bc:fe:34:c6:48:
         e5:7a:19:7e:a6:ae:a7:a4:7c:ce:a4:8a:79:83:64:e9:6e:6f:
         d3:0f:bf:1c:9e:35:41:ce:4b:19:16:53:5e:da:9b:1f:8c:ee:
         1e:ca:d1:05:cd:14:bb:fc:50:7a:05:82:64:8b:c3:d9:98:62:
         76:f0:2f:b6:2f:fc:1b:c2:9e:48:67:5c:bc:6f:e1:01:6e:e2:
         e3:a2:99:71:83:20:36:1f:93:4b:a4:68:3d:29:b3:32:50:f9:
         ed:67:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:19:14 2026 by rpki-client