This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa
File:                     a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (raw, json)
Hash identifier:          S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=
Subject key identifier:   6B:4C:44:89:58:F3:59:86:56:03:A9:85:9B:DC:54:4A:07:8A:D4:06
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019B7A5B005E4397A8E234686AF71797D14F
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa
Signing time:             Thu 01 Jan 2026 16:19:02 +0000
ROA not before:           Thu 01 Jan 2026 16:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57494
IP address blocks:        81.31.247.0/24 maxlen: 24
                          185.84.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:00:5e:43:97:a8:e2:34:68:6a:f7:17:97:d1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jan  1 16:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b4c448958f359865603a9859bdc544a078ad406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:1e:10:83:2e:81:63:19:eb:be:33:5b:be:
                    2f:67:bb:1c:8a:5f:f1:e5:cd:11:38:73:7f:a6:42:
                    9f:43:f7:06:34:1b:d9:b0:cd:a9:dc:4e:fe:87:2a:
                    8f:e0:cc:c8:03:40:32:b0:2a:95:46:1a:fd:eb:64:
                    ad:82:7c:c6:43:61:32:75:e3:59:ab:19:ca:70:29:
                    21:dc:cc:ca:d4:55:3e:00:64:f9:88:55:b6:35:e0:
                    53:15:2d:c6:09:c1:a3:d1:c3:a1:aa:62:60:d5:01:
                    1a:78:ad:b6:43:b8:ae:59:16:e3:c0:82:da:78:a4:
                    6f:f4:d9:09:b3:ca:56:f9:c8:c9:a3:63:f3:f2:14:
                    14:d5:88:6b:c0:9f:42:88:4d:4f:3b:aa:fc:89:5c:
                    bd:91:48:72:f3:3b:da:60:47:b8:1b:6c:b9:d1:99:
                    26:6d:a3:1e:b2:c1:7f:cb:ee:ac:69:ee:08:b6:99:
                    31:15:6a:c3:76:c6:71:5b:15:02:1e:9f:07:1f:b8:
                    7a:26:cd:b8:b1:90:68:ca:66:59:dd:fd:40:3e:a2:
                    d6:6d:2d:ad:91:01:24:7f:c9:05:54:15:64:8f:6f:
                    54:9a:4e:20:29:d6:18:6b:20:41:de:6f:6c:ed:53:
                    7b:31:59:d4:3c:3b:0c:d1:ef:47:31:a4:2b:eb:af:
                    66:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:44:89:58:F3:59:86:56:03:A9:85:9B:DC:54:4A:07:8A:D4:06
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.247.0/24
                  185.84.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:c5:38:aa:c7:ed:d5:d6:47:f2:ce:4b:e9:39:a9:bb:23:bc:
         4f:da:d6:f6:cd:96:3d:be:5d:17:92:0b:c0:e2:a3:e1:41:1c:
         bb:d3:b6:20:61:14:97:f8:9f:16:7b:28:f5:85:83:23:03:42:
         c8:df:11:d4:85:e8:a7:b2:ea:3c:d8:40:71:5f:9b:e2:b7:21:
         8b:8e:6c:76:02:e6:9b:76:37:d8:30:1b:18:68:2d:40:2e:a8:
         6f:9c:35:d9:a8:c2:46:ea:ec:1a:cb:52:67:e0:3b:8d:89:e9:
         54:e5:ca:58:86:53:eb:b2:78:60:a4:5f:d9:4f:72:34:26:b7:
         fd:97:2f:93:1d:1a:e4:35:ff:8e:c9:60:42:eb:44:a3:d9:7f:
         5d:51:94:c4:65:87:90:85:8f:5a:cf:6a:35:79:aa:eb:57:d3:
         e9:6a:b8:d2:cb:3c:92:c5:9b:e7:57:ed:8a:b9:bb:72:7b:a1:
         77:97:4b:33:67:f5:43:e4:b0:b1:f8:46:df:45:ba:f2:6c:98:
         f5:21:26:d5:bf:18:bb:de:49:35:de:65:34:69:b1:0d:89:3b:
         a4:ed:41:ed:e1:51:fe:0c:83:06:56:64:0d:59:a6:b7:07:b1:
         53:97:f0:17:23:78:36:6a:d5:85:59:4a:88:fd:48:07:4c:25:
         f6:57:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 16:21:01 2026 by rpki-client