This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/9s7Z0kbqXD8kMrOscbviyqc_bvg.roa
File:                     9s7Z0kbqXD8kMrOscbviyqc_bvg.roa (raw, json)
Hash identifier:          5KRTzHrVO9bh3V7iu0nkUKaInske11yP7Ccj66neaB8=
Subject key identifier:   F6:CE:D9:D2:46:EA:5C:3F:24:32:B3:AC:71:BB:E2:CA:A7:3F:6E:F8
Certificate issuer:       /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial:       019B263A80907C7C2C223FBFE007D3D1452A
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/9s7Z0kbqXD8kMrOscbviyqc_bvg.roa
Signing time:             Tue 16 Dec 2025 08:15:26 +0000
ROA not before:           Tue 16 Dec 2025 08:15:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41720
IP address blocks:        195.182.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:26:3a:80:90:7c:7c:2c:22:3f:bf:e0:07:d3:d1:45:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
        Validity
            Not Before: Dec 16 08:15:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f6ced9d246ea5c3f2432b3ac71bbe2caa73f6ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:35:e2:cc:4c:f3:c6:68:f6:fe:f2:37:3d:
                    ea:9f:44:2a:bf:9c:a5:8a:7b:7f:48:89:df:fc:5a:
                    95:02:3d:23:0f:9a:10:87:5f:32:7d:60:ec:af:1d:
                    11:50:46:cf:65:0b:22:a8:70:38:70:ea:08:4c:e4:
                    6c:5c:ad:97:fa:33:6b:2d:b6:f2:57:d5:43:6c:3d:
                    81:77:bb:31:1e:52:7a:51:09:73:dc:2e:9b:da:8d:
                    f8:da:0e:23:1c:37:c0:c0:72:96:16:d6:0a:e5:ee:
                    a4:4a:1f:eb:41:56:d9:4b:24:16:8e:a0:2c:38:5d:
                    95:18:ab:6f:e5:e6:41:e8:04:50:5e:ad:9a:6b:03:
                    7e:f6:b3:07:53:22:86:4d:37:2c:d8:ba:11:fa:48:
                    2f:d2:99:a0:93:95:37:25:10:00:9c:8b:7e:39:15:
                    0d:70:1d:15:62:31:66:82:58:d0:c9:64:fe:80:e6:
                    86:9f:8b:64:15:f6:90:44:ec:b8:04:bf:6b:a4:30:
                    4f:96:b9:f4:33:cb:08:3e:73:4b:5b:26:0f:80:86:
                    c1:5b:f9:36:54:36:98:e8:d2:59:b2:ce:8b:b1:40:
                    be:cc:4b:22:da:b5:29:14:0c:45:88:5b:99:e3:ef:
                    24:eb:fa:f5:b2:91:b2:d0:cc:ec:56:3d:71:42:8f:
                    a1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:D9:D2:46:EA:5C:3F:24:32:B3:AC:71:BB:E2:CA:A7:3F:6E:F8
            X509v3 Authority Key Identifier:
                keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/9s7Z0kbqXD8kMrOscbviyqc_bvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.182.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:1c:28:fc:ec:a3:ea:47:b0:01:ad:49:b3:e9:95:59:41:62:
         53:d8:7a:96:27:f1:54:13:39:1d:3e:f6:35:37:9a:e1:f1:e0:
         32:98:26:cd:fc:31:8e:46:c8:9b:85:96:ba:8a:d7:ea:32:aa:
         21:8c:68:e9:d8:38:4b:cd:ee:30:67:2b:42:d1:c2:6d:1e:9e:
         69:26:30:9a:fe:33:17:e3:d5:a7:36:1f:d5:06:18:3c:44:c3:
         f0:17:e2:50:4a:26:a2:1b:8b:27:a6:22:56:93:c1:a9:f5:a1:
         de:99:04:aa:27:8e:0a:d3:d3:ac:da:8f:2f:90:3f:48:e8:e7:
         b1:68:0d:b8:2b:fb:04:2c:70:a3:bc:37:1c:86:1c:9a:25:38:
         49:45:44:a7:04:6d:d1:3a:90:ef:91:a1:8e:91:c3:98:fc:e8:
         97:73:15:e0:0a:18:b9:d3:12:fa:8b:e5:76:25:e0:31:ab:1b:
         10:5c:60:97:c2:41:78:5e:0b:83:0b:59:bc:96:0c:40:a4:44:
         f0:cb:b3:94:c6:0b:59:bc:05:66:40:e2:85:d5:54:3e:59:c4:
         23:07:39:0b:38:08:66:3c:e4:ea:17:54:30:08:14:23:c5:b0:
         01:57:91:b3:95:22:cd:7b:47:30:52:e8:0b:f2:b8:79:6b:79:
         85:62:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 14:36:58 2025 by rpki-client