This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eupoRVJKVybw0kl7i86Vn7vf6d4.roa
File:                     eupoRVJKVybw0kl7i86Vn7vf6d4.roa (raw, json)
Hash identifier:          hEVA804TvX5/pqG9XVb8EpPGwtFN6qaY/LRqwzmdsEc=
Subject key identifier:   7A:EA:68:45:52:4A:57:26:F0:D2:49:7B:8B:CE:95:9F:BB:DF:E9:DE
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A300EB19E2ABC413487A98FB2CE00A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eupoRVJKVybw0kl7i86Vn7vf6d4.roa
Signing time:             Thu 01 Jan 2026 08:18:27 +0000
ROA not before:           Thu 01 Jan 2026 08:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47969
IP address blocks:        45.9.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:00:eb:19:e2:ab:c4:13:48:7a:98:fb:2c:e0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7aea6845524a5726f0d2497b8bce959fbbdfe9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:05:3f:b0:b0:80:dc:e6:d7:46:96:60:66:
                    f6:e0:87:76:45:5e:05:d7:90:ad:49:4b:db:11:37:
                    31:4b:be:aa:fd:9e:c7:04:a2:5b:60:e4:ab:12:d9:
                    09:79:09:14:0b:5b:86:a1:57:8e:73:5e:39:98:a0:
                    ed:c2:8f:4f:0f:e0:d5:5f:57:34:1f:d7:f9:26:bf:
                    24:ea:2f:d2:f4:41:87:ea:ee:24:3f:90:26:cc:49:
                    bd:a0:aa:31:ea:d6:db:82:e8:35:86:d5:ef:3c:d4:
                    0f:10:a4:3d:69:ad:d4:d1:95:3a:04:96:e1:31:39:
                    ca:cd:d8:e1:48:10:2b:a2:5a:1c:bc:ca:4b:c5:2e:
                    8c:c7:6b:50:d7:82:2e:06:86:e5:f6:4c:8b:86:6a:
                    37:60:31:68:62:41:cd:b4:19:77:43:9a:f2:45:32:
                    04:85:29:19:dd:d8:ff:bc:3d:d8:d8:10:eb:24:42:
                    8d:c4:8b:42:cc:06:45:75:f8:9d:b9:07:21:27:d8:
                    b1:ef:b7:d7:32:48:17:a0:01:b0:bd:f0:df:70:90:
                    cb:60:ea:d9:6d:25:5c:21:a5:d7:cc:dc:93:2b:78:
                    53:4e:e2:f2:37:d7:0d:c4:59:06:2f:56:96:b9:74:
                    c9:6e:0d:0d:26:df:57:c9:8e:58:55:ed:6c:29:f9:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EA:68:45:52:4A:57:26:F0:D2:49:7B:8B:CE:95:9F:BB:DF:E9:DE
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eupoRVJKVybw0kl7i86Vn7vf6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:a2:a0:46:7f:ac:78:9a:43:a3:45:01:54:46:4a:db:d0:
         01:0d:18:94:2c:a0:b5:7a:55:01:83:6b:99:1c:85:f4:e9:5f:
         c0:08:9c:68:0d:de:e1:ac:37:4a:21:72:62:d4:02:c7:c8:c0:
         b7:54:7c:da:a4:5d:97:ec:aa:dc:a1:16:37:ce:6d:6d:9e:ce:
         ba:f4:36:06:10:3a:86:45:4d:31:1b:39:a5:b1:b8:37:0a:ca:
         ed:06:72:58:e9:c0:10:de:38:2a:80:20:a6:65:8c:a1:85:b7:
         47:bc:6b:bd:b0:66:63:66:e2:d9:ed:7f:57:7d:95:3a:42:17:
         1d:d9:a7:1d:bd:15:b6:a0:1a:d9:e4:dd:9c:33:e6:e8:6e:c8:
         25:e4:3a:5c:ee:d2:c8:c9:8d:5a:57:db:85:f2:b2:b5:7f:01:
         b9:a3:ff:a9:ae:0c:95:63:4c:b3:95:0d:eb:33:8b:de:08:77:
         25:99:c2:1e:ae:74:17:7a:bd:79:fd:1a:55:a9:d4:eb:33:a8:
         89:33:94:85:05:d2:1e:37:62:44:60:a9:6e:e2:33:36:77:03:
         6d:51:68:7e:d8:3e:f3:7f:38:34:ca:dc:ec:63:61:6b:ea:ed:
         7b:20:6e:2f:a0:ed:82:ff:04:d6:dc:4e:a5:f1:f5:b7:2a:dd:
         99:1f:d5:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4owDrGeKrxBNIepj7LOAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWVhNjg0NTUyNGE1NzI2ZjBkMjQ5N2I4YmNlOTU5ZmJiZGZlOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4QFP7CwgNzm10aWYGb24Id2RV4F
15CtSUvbETcxS76q/Z7HBKJbYOSrEtkJeQkUC1uGoVeOc145mKDtwo9PD+DVX1c0
H9f5Jr8k6i/S9EGH6u4kP5AmzEm9oKox6tbbgug1htXvPNQPEKQ9aa3U0ZU6BJbh
MTnKzdjhSBArolocvMpLxS6Mx2tQ14IuBobl9kyLhmo3YDFoYkHNtBl3Q5ryRTIE
hSkZ3dj/vD3Y2BDrJEKNxItCzAZFdfiduQchJ9ix77fXMkgXoAGwvfDfcJDLYOrZ
bSVcIaXXzNyTK3hTTuLyN9cNxFkGL1aWuXTJbg0NJt9XyY5YVe1sKfkFvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHrqaEVSSlcm8NJJe4vOlZ+73+neMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZXVwb1JWSktWeWJ3MGtsN2k4NlZuN3ZmNmQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQmeMA0G
CSqGSIb3DQEBCwUAA4IBAQCODqKgRn+seJpDo0UBVEZK29ABDRiULKC1elUBg2uZ
HIX06V/ACJxoDd7hrDdKIXJi1ALHyMC3VHzapF2X7KrcoRY3zm1tns669DYGEDqG
RU0xGzmlsbg3CsrtBnJY6cAQ3jgqgCCmZYyhhbdHvGu9sGZjZuLZ7X9XfZU6Qhcd
2acdvRW2oBrZ5N2cM+bobsgl5Dpc7tLIyY1aV9uF8rK1fwG5o/+prgyVY0yzlQ3r
M4veCHclmcIernQXer15/RpVqdTrM6iJM5SFBdIeN2JEYKlu4jM2dwNtUWh+2D7z
fzg0ytzsY2Fr6u17IG4voO2C/wTW3E6l8fW3Kt2ZH9VP
-----END CERTIFICATE-----
Generated at Fri Jan 2 12:05:22 2026 by rpki-client