This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa
File:                     EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa (raw, json)
Hash identifier:          sBJGHZRR//ShLKCu0otFo6KYcAN2JoMGd5WaxRgQK80=
Subject key identifier:   10:AC:A7:00:C6:20:3E:3C:34:A0:FB:40:CC:D1:BD:05:FF:F5:8E:BC
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       019B791084913C753459D5C8666055519F1D
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa
Signing time:             Thu 01 Jan 2026 10:18:04 +0000
ROA not before:           Thu 01 Jan 2026 10:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     46746
IP address blocks:        82.112.107.0/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:84:91:3c:75:34:59:d5:c8:66:60:55:51:9f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Jan  1 10:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=10aca700c6203e3c34a0fb40ccd1bd05fff58ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:72:78:a0:96:6d:de:ae:9f:0a:de:ea:6a:
                    b1:c1:33:45:fd:b2:00:31:af:e6:d7:22:92:6d:b9:
                    79:5c:10:04:cf:83:31:36:ab:8f:03:bc:0b:df:65:
                    2f:18:9c:2c:7e:55:d4:42:38:91:51:a4:09:db:cb:
                    58:82:6b:66:1a:28:4a:c8:09:f3:8e:db:6a:d4:d4:
                    59:48:90:0b:48:f4:32:e3:60:d3:89:81:63:18:09:
                    72:ae:a2:6e:2e:85:0a:2a:9c:f6:0e:99:87:30:ef:
                    58:6b:1c:9d:40:08:d2:ec:5f:c5:d4:cc:2d:c1:a5:
                    b9:82:4a:b1:21:44:92:c7:e6:df:a8:74:ca:88:09:
                    68:e2:5f:41:52:0f:70:33:d4:c9:42:b3:07:ad:f7:
                    4e:4b:be:1e:3d:06:77:cb:a6:b2:36:a9:51:1f:ca:
                    67:ce:d9:9d:fb:bc:7e:14:c4:d5:d2:e7:c9:db:25:
                    ee:7a:cf:ff:99:27:02:93:ad:8f:2d:58:5a:8a:36:
                    c2:b9:02:4e:04:0c:98:04:e5:c8:ca:50:aa:67:64:
                    31:2f:7f:24:bc:1d:6d:a0:3a:c9:f7:99:ec:1c:25:
                    f2:16:58:d1:ac:4d:a0:9b:3b:0b:3c:9b:bf:79:08:
                    54:c0:c5:1a:f0:7a:ba:19:be:d1:3e:0b:96:10:24:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AC:A7:00:C6:20:3E:3C:34:A0:FB:40:CC:D1:BD:05:FF:F5:8E:BC
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/EKynAMYgPjw0oPtAzNG9Bf_1jrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.112.107.0/28

    Signature Algorithm: sha256WithRSAEncryption
         9f:75:92:e3:1c:84:db:61:56:ff:a9:6c:7c:4d:d8:03:69:5f:
         cf:b4:0a:32:2d:a6:30:04:e9:3e:2e:d6:5e:12:7c:6c:e0:6f:
         7a:c6:2c:72:01:52:2b:42:96:b5:6a:f7:12:2f:35:db:a4:6c:
         3b:18:54:7c:63:48:e0:25:b0:62:88:69:c4:9a:e3:4c:e0:64:
         46:0f:d8:fb:15:42:b7:d1:0b:00:d8:d5:fe:c4:c5:f1:a5:72:
         9c:12:cd:f0:6e:64:dc:11:34:d9:24:08:8c:37:c2:8a:a9:73:
         1b:51:16:a1:4d:05:de:03:22:2e:f4:7e:58:79:7e:98:b2:89:
         5e:26:ff:e6:15:96:01:1e:62:3e:80:85:28:0b:6f:f2:7c:a0:
         3a:a6:d9:7f:39:13:df:17:67:7a:f7:12:66:60:3c:3d:4f:93:
         30:ee:4b:1a:7c:cf:0f:eb:88:bd:35:c4:1b:27:bd:41:1c:77:
         16:a4:8f:b6:13:8f:76:21:f7:b6:da:38:06:b2:f1:b6:8c:8b:
         e5:7e:7f:70:2f:d9:50:fd:42:e6:97:35:55:1c:c7:f3:67:b8:
         bf:f1:5d:1b:67:bc:33:5c:ca:7f:9e:ea:38:89:12:c6:e5:6c:
         b5:f7:17:e8:5f:19:ab:65:c7:e6:f2:fc:d8:ad:e9:be:5c:26:
         c4:c7:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:14:13 2026 by rpki-client