This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa
File:                     7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa (raw, json)
Hash identifier:          yBmho6Hc+8S+AZOf8tb5d8VX1stt/f9ql0bZ3I/nuA4=
Subject key identifier:   EF:EC:16:56:1D:92:86:A3:A3:5D:15:37:0B:9F:E7:2C:25:7C:4D:AC
Certificate issuer:       /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial:       019B7A5ABD1722EB76E5E00E876A5B8B5C3E
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa
Signing time:             Thu 01 Jan 2026 16:18:45 +0000
ROA not before:           Thu 01 Jan 2026 16:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60781
IP address blocks:        176.103.222.0/23 maxlen: 23
                          194.169.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:bd:17:22:eb:76:e5:e0:0e:87:6a:5b:8b:5c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
        Validity
            Not Before: Jan  1 16:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efec16561d9286a3a35d15370b9fe72c257c4dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:f7:3c:6c:27:b5:22:7e:ae:0b:97:f8:91:
                    6e:d5:c2:89:ed:51:ab:54:a3:e0:d1:d8:92:98:93:
                    73:13:10:0e:e1:56:05:80:4d:56:69:74:fd:48:87:
                    fc:0c:54:73:9c:ca:f4:4a:78:cf:15:64:fc:1c:2f:
                    b6:c9:8c:70:a4:8a:23:44:fb:4c:78:fe:bb:1e:d1:
                    c3:c4:59:48:72:58:91:4c:17:af:cf:fa:b6:17:2b:
                    f8:1c:17:4e:32:fe:bf:03:9e:53:42:45:fc:06:33:
                    6a:5e:10:b4:19:8f:96:ee:db:2c:e3:80:c6:3c:cb:
                    02:ed:56:2e:1d:56:c7:c2:4b:c5:13:44:e5:70:3e:
                    f9:9f:46:aa:e1:32:75:7d:67:b9:a1:e4:40:f5:6b:
                    1d:25:f7:c7:50:cc:b8:09:7d:fb:5b:4a:92:17:73:
                    98:ed:3e:dc:47:ac:9c:92:c5:77:da:31:88:1b:ce:
                    b0:f8:da:3f:e4:7b:da:ea:81:c7:67:00:f5:58:e8:
                    d8:92:1f:db:fb:93:9a:f0:1d:53:4a:48:d5:a9:74:
                    03:8f:42:b0:42:55:be:65:ff:af:05:87:28:14:dd:
                    19:ac:09:2a:84:cb:08:12:a2:0c:33:b6:e2:ce:28:
                    db:1e:85:8c:a9:c6:cb:2e:43:cb:f3:a3:7f:62:95:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EC:16:56:1D:92:86:A3:A3:5D:15:37:0B:9F:E7:2C:25:7C:4D:AC
            X509v3 Authority Key Identifier:
                keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/7-wWVh2ShqOjXRU3C5_nLCV8Taw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.222.0/23
                  194.169.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:29:98:ce:bd:6b:bc:8f:ac:00:b9:b0:e2:fc:66:b5:89:
         08:09:b5:ce:bf:b4:bd:41:02:ce:11:33:7a:f8:ab:61:2d:64:
         1b:09:2d:ee:21:83:4d:42:d3:6c:96:16:ab:24:ad:87:4d:1d:
         1f:ff:31:f7:03:d9:d6:9a:8e:f4:b3:3c:74:d7:2d:8a:a9:25:
         d1:d7:91:34:f8:63:cc:95:31:a7:2e:39:6e:3c:81:9c:f9:c2:
         cd:32:75:f7:c5:8c:df:34:0d:f6:75:7a:51:fe:85:c0:54:bd:
         a5:11:e4:40:94:d9:bf:61:40:66:2f:a7:95:60:4e:52:ad:4f:
         0a:52:71:b9:77:8f:2e:8f:1f:df:23:fd:5e:ce:fe:0d:03:fe:
         2f:76:b9:d5:e2:b3:52:17:63:f5:36:59:b2:e3:32:5a:a9:57:
         57:4e:f8:07:3f:e8:6b:3f:03:4a:9f:3d:23:f1:f1:05:8f:a8:
         e7:2f:ad:53:40:29:49:5a:ec:94:8c:d7:5a:41:2a:72:07:dc:
         fa:51:18:35:56:c4:9b:43:75:85:5c:47:dc:aa:4e:39:8d:c2:
         c1:a1:65:4c:65:69:3e:94:c6:f1:bf:37:aa:ba:c8:38:55:73:
         f0:fb:af:f4:57:b2:99:0f:13:a7:a8:49:cc:0c:22:63:4f:fe:
         70:74:45:92
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt6Wr0XIut25eAOh2pbi1w+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYmRjMjZjZGRjMGJiY2ZhMzU0ZjExYTAxZTZmZjAxMjk2
YjNjN2IwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmVjMTY1NjFkOTI4NmEzYTM1ZDE1MzcwYjlmZTcyYzI1N2M0ZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsn3PGwntSJ+rguX+JFu1cKJ7VGr
VKPg0diSmJNzExAO4VYFgE1WaXT9SIf8DFRznMr0SnjPFWT8HC+2yYxwpIojRPtM
eP67HtHDxFlIcliRTBevz/q2Fyv4HBdOMv6/A55TQkX8BjNqXhC0GY+W7tss44DG
PMsC7VYuHVbHwkvFE0TlcD75n0aq4TJ1fWe5oeRA9WsdJffHUMy4CX37W0qSF3OY
7T7cR6ycksV32jGIG86w+No/5Hva6oHHZwD1WOjYkh/b+5Oa8B1TSkjVqXQDj0Kw
QlW+Zf+vBYcoFN0ZrAkqhMsIEqIMM7bizijbHoWMqcbLLkPL86N/YpUWVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO/sFlYdkoajo10VNwuf5ywlfE2sMB8GA1UdIwQY
MBaAFIq9wmzdwLvPo1TxGgHm/wEpazx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2Qt
ZDNhNThiNWNiMGMwLzEvNy13V1ZoMlNocU9qWFJVM0M1X25MQ1Y4VGF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2QtZDNhNThiNWNiMGMw
LzEvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsGfeAwQA
wqn1MA0GCSqGSIb3DQEBCwUAA4IBAQAi4CmYzr1rvI+sALmw4vxmtYkICbXOv7S9
QQLOETN6+KthLWQbCS3uIYNNQtNslharJK2HTR0f/zH3A9nWmo70szx01y2KqSXR
15E0+GPMlTGnLjluPIGc+cLNMnX3xYzfNA32dXpR/oXAVL2lEeRAlNm/YUBmL6eV
YE5SrU8KUnG5d48ujx/fI/1ezv4NA/4vdrnV4rNSF2P1Nlmy4zJaqVdXTvgHP+hr
PwNKnz0j8fEFj6jnL61TQClJWuyUjNdaQSpyB9z6URg1VsSbQ3WFXEfcqk45jcLB
oWVMZWk+lMbxvzequsg4VXPw+6/0V7KZDxOnqEnMDCJjT/5wdEWS
-----END CERTIFICATE-----
Generated at Mon Jan 19 16:54:20 2026 by rpki-client