This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/xeqelJo79Mi4ptPjtrax6cg2B_s.roa
File:                     xeqelJo79Mi4ptPjtrax6cg2B_s.roa (raw, json)
Hash identifier:          t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=
Subject key identifier:   C5:EA:9E:94:9A:3B:F4:C8:B8:A6:D3:E3:B6:B6:B1:E9:C8:36:07:FB
Certificate issuer:       /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial:       019B7CEDDCE01EB1B7DFD9B1E43860449B3D
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/xeqelJo79Mi4ptPjtrax6cg2B_s.roa
Signing time:             Fri 02 Jan 2026 04:18:41 +0000
ROA not before:           Fri 02 Jan 2026 04:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        194.42.48.0/24 maxlen: 32
                          2001:7f8:c::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:dc:e0:1e:b1:b7:df:d9:b1:e4:38:60:44:9b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
        Validity
            Not Before: Jan  2 04:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c5ea9e949a3bf4c8b8a6d3e3b6b6b1e9c83607fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7a:11:ca:0a:f8:af:eb:33:73:7e:b4:4a:9a:
                    8f:d4:c3:77:77:fd:33:51:35:7e:71:fd:43:5e:dc:
                    a7:37:dc:0f:d9:62:87:de:4b:b1:93:ac:21:cb:64:
                    a6:c9:31:82:2b:1c:20:a1:6a:f9:4f:89:af:e6:2a:
                    a4:14:de:a6:52:ac:99:3a:75:ef:d2:bf:f8:37:9e:
                    5a:85:b4:c0:39:77:67:59:bc:bd:4a:6b:29:4e:0c:
                    f5:28:63:30:95:63:ee:03:77:5e:f9:f0:a4:55:cf:
                    02:41:82:21:33:10:42:5d:22:fe:35:e5:08:c4:1c:
                    1c:d0:ad:0b:07:4a:0a:60:50:55:5c:d4:87:2e:9e:
                    dd:43:23:e9:b3:56:b9:08:10:c0:2c:6a:5e:99:a6:
                    dc:b0:d4:50:91:fd:88:d8:67:b3:d5:f7:b4:87:ac:
                    4e:d4:a7:14:e3:a6:9f:9c:b2:40:1c:fd:ed:c4:7f:
                    ed:30:f0:d0:bd:7e:f0:e9:c2:85:74:52:8e:af:e6:
                    f3:72:8f:00:45:13:01:88:b0:f8:ec:09:ab:a1:f4:
                    1f:87:59:b9:97:2e:b2:c0:27:6a:43:47:8b:88:20:
                    d1:91:2f:7c:1c:fd:4e:75:18:77:2e:d7:5c:f8:63:
                    eb:74:cb:b4:05:f7:7e:d7:21:dd:ae:c8:6d:10:43:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EA:9E:94:9A:3B:F4:C8:B8:A6:D3:E3:B6:B6:B1:E9:C8:36:07:FB
            X509v3 Authority Key Identifier:
                keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/xeqelJo79Mi4ptPjtrax6cg2B_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.42.48.0/24
                IPv6:
                  2001:7f8:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:e4:ab:97:a3:44:f1:15:07:23:66:34:47:88:ae:57:72:f7:
         38:98:be:a0:9b:a9:f8:39:5d:f5:6d:2a:59:17:8b:7c:6e:ab:
         af:e6:9a:ae:b5:6d:e1:9c:2a:86:7e:40:76:65:bb:ca:a2:d0:
         fb:84:8a:e8:26:8c:dd:d5:fb:7c:42:7a:ae:95:36:6a:d9:71:
         a4:cd:4c:82:05:e1:ba:7f:e4:be:f1:06:64:a8:80:00:48:cd:
         ca:11:3b:9e:62:77:af:8f:b9:38:8b:59:a5:00:6d:a9:b7:76:
         f3:a4:43:ac:5e:1b:ca:e2:f3:9b:59:e4:36:a4:52:a5:7e:89:
         3d:08:5e:51:a2:2d:b3:e0:46:ef:09:38:75:3d:92:51:1d:80:
         8f:dd:05:41:b1:ba:38:14:10:00:86:0d:18:7d:4f:62:2e:c2:
         92:7f:06:fb:03:f1:f9:e8:ed:ba:3e:45:83:14:77:d1:52:0a:
         60:80:71:73:1c:ed:0e:d1:03:d7:77:9e:06:3f:1d:44:ab:90:
         de:67:6b:ee:54:b8:89:bc:d2:77:52:4e:e6:a6:08:54:46:84:
         f9:51:d0:d9:69:77:03:59:c8:f8:d3:6d:8b:b7:61:f0:27:63:
         35:48:c1:f5:47:13:95:1d:c5:3c:af:ee:77:53:e9:6e:a8:c5:
         54:0f:09:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:57:55 2026 by rpki-client