This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/7tiBKXEaHXd2T3JrhotcdPIQdHM.roa
File:                     7tiBKXEaHXd2T3JrhotcdPIQdHM.roa (raw, json)
Hash identifier:          uX2d9uSrsFhlR/nFxsm7FePXc9bNjhHTQMjCrrOLdlo=
Subject key identifier:   EE:D8:81:29:71:1A:1D:77:76:4F:72:6B:86:8B:5C:74:F2:10:74:73
Certificate issuer:       /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial:       019B7834D183BD380BA34B4F27E8B9BC85D6
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/7tiBKXEaHXd2T3JrhotcdPIQdHM.roa
Signing time:             Thu 01 Jan 2026 06:18:06 +0000
ROA not before:           Thu 01 Jan 2026 06:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207564
IP address blocks:        185.115.247.0/24 maxlen: 24
                          2001:4da8:c010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:d1:83:bd:38:0b:a3:4b:4f:27:e8:b9:bc:85:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
        Validity
            Not Before: Jan  1 06:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eed88129711a1d77764f726b868b5c74f2107473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:a2:00:1c:76:46:8c:25:e7:66:76:79:42:
                    24:a1:22:14:75:9a:c9:c5:74:f1:63:f6:a0:df:11:
                    ad:ab:4e:24:5b:8b:be:2b:1a:06:03:9f:8c:bb:6b:
                    dc:fe:65:9a:c2:ee:ad:22:7e:e6:91:3c:db:df:88:
                    32:45:74:6f:64:b8:1a:d3:b3:ad:92:f6:3f:6b:d5:
                    04:ec:fe:6f:d1:5c:d1:1f:36:d8:7c:0a:91:39:df:
                    c0:28:b6:d7:cc:b0:1e:31:43:1e:4e:fd:61:44:43:
                    a5:e1:68:d4:15:e5:e9:f1:14:94:85:d5:0b:e5:6d:
                    f2:c2:6b:6a:3c:ac:38:f8:16:8c:45:df:54:32:23:
                    b7:21:24:f6:56:ee:98:8b:9d:6d:29:f3:97:22:75:
                    81:2c:20:a8:4e:12:5d:df:70:77:26:a8:6f:ba:4f:
                    1a:68:d2:f7:bd:04:9f:f7:10:b1:f4:8c:ac:a5:bf:
                    39:7e:22:33:35:1f:ab:c9:ac:b1:4e:ef:d2:7c:01:
                    aa:e5:27:c4:5d:25:24:fb:91:d2:46:02:d8:2d:e9:
                    62:9f:8e:92:f5:f0:79:59:e7:64:df:0a:ac:86:b8:
                    7b:98:82:62:1d:82:e3:96:01:30:77:3f:34:30:51:
                    77:59:7c:33:1b:c0:6d:03:78:e5:ab:1c:50:f4:79:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:81:29:71:1A:1D:77:76:4F:72:6B:86:8B:5C:74:F2:10:74:73
            X509v3 Authority Key Identifier:
                keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/7tiBKXEaHXd2T3JrhotcdPIQdHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.247.0/24
                IPv6:
                  2001:4da8:c010::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:70:a5:b9:4f:a4:26:42:71:06:5d:a1:81:42:63:87:a9:87:
         97:e4:91:53:63:60:91:5b:ca:75:fa:cf:f4:43:be:7a:de:88:
         e5:de:a0:33:b8:ff:c5:9f:55:d0:d0:65:97:34:9b:41:54:6a:
         c7:de:c6:ae:4c:04:76:f8:6f:12:6b:ab:f5:59:29:0b:dd:9f:
         b6:35:d1:d2:00:d3:f1:95:03:3f:13:9b:40:e9:84:f8:1d:a0:
         f3:1c:8b:7f:e7:3c:0c:97:f7:4c:83:bf:05:03:e8:8f:bb:7b:
         0c:bf:6e:13:2d:fe:1f:4c:19:62:0c:16:e6:52:77:fd:e7:cd:
         c9:9c:b1:45:71:5f:b6:ce:6d:60:94:af:7a:ad:32:6d:01:f3:
         b4:3f:53:94:eb:c4:4f:d9:32:0a:fd:92:5c:09:5e:9e:ca:e5:
         7a:94:4f:4e:8b:76:f0:1f:24:9e:cd:f6:67:8e:7c:ac:83:82:
         69:a3:64:49:49:9b:99:24:9a:cf:25:f1:3b:04:4e:88:de:d6:
         8f:7a:c4:01:09:df:48:19:2f:1e:82:e7:3e:5b:86:bb:65:4d:
         06:88:43:b8:28:05:50:9e:d3:79:f8:45:cc:f6:1b:2b:12:01:
         71:b7:ff:6f:09:f4:2c:a5:17:3b:75:59:5a:aa:c2:32:e6:ba:
         d1:86:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 03:08:55 2026 by rpki-client