This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/d-Eq6Hu6QkXOeFS6qeUtEgtsgsM.roa
File:                     d-Eq6Hu6QkXOeFS6qeUtEgtsgsM.roa (raw, json)
Hash identifier:          fd1LnLYjNatdlyVpGMq6atzMwr3lga2I1SqmpPwjJHY=
Subject key identifier:   77:E1:2A:E8:7B:BA:42:45:CE:78:54:BA:A9:E5:2D:12:0B:6C:82:C3
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       019B7F144194B61C69DC5837089374F97030
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/d-Eq6Hu6QkXOeFS6qeUtEgtsgsM.roa
Signing time:             Fri 02 Jan 2026 14:19:52 +0000
ROA not before:           Fri 02 Jan 2026 14:19:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7029
IP address blocks:        193.233.108.0/22 maxlen: 24
                          193.233.116.0/23 maxlen: 23
                          193.233.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:41:94:b6:1c:69:dc:58:37:08:93:74:f9:70:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jan  2 14:19:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77e12ae87bba4245ce7854baa9e52d120b6c82c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:36:70:4e:e9:54:ee:23:53:8b:cf:2b:8b:
                    a0:8b:67:a1:a9:2b:0e:5c:c4:73:41:24:af:34:e6:
                    22:06:a7:48:dc:2e:c2:dd:18:a5:61:bf:e6:3d:a9:
                    ea:26:f6:6f:e6:81:c3:c7:16:c5:b5:86:06:bf:b8:
                    b7:65:d7:3f:25:ae:b5:7b:55:9a:a1:17:97:d3:88:
                    1a:53:d5:07:76:40:08:87:36:a8:64:5f:c5:48:9c:
                    a3:ec:af:f3:28:2f:48:5c:86:80:a8:c3:85:bf:08:
                    53:c8:bd:f8:9a:56:26:a7:20:d8:39:ae:47:1e:f7:
                    9a:3d:e4:61:10:e6:41:d2:dc:49:e4:ea:54:b5:0c:
                    67:cf:ee:66:5e:b1:6d:3b:85:5a:d8:df:2f:c6:07:
                    7d:47:64:05:02:ab:6d:dc:92:c6:59:73:3b:b0:ff:
                    4d:c3:4f:4f:4e:81:1b:9f:b9:4b:bd:ba:f9:1d:5b:
                    d6:98:c0:52:03:c9:37:c1:ea:a2:4a:69:f6:81:27:
                    73:1c:37:45:7a:0f:0a:07:76:0f:d0:34:44:c4:3b:
                    67:e2:d7:fb:8a:d1:98:1c:04:2e:00:c6:7c:91:6d:
                    dd:5f:a7:d5:20:a3:55:9c:92:0b:44:2c:66:ed:b0:
                    f4:0b:f7:7a:c4:57:5a:67:92:03:cb:a7:be:5e:d9:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E1:2A:E8:7B:BA:42:45:CE:78:54:BA:A9:E5:2D:12:0B:6C:82:C3
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/d-Eq6Hu6QkXOeFS6qeUtEgtsgsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.108.0/22
                  193.233.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:55:5c:de:24:97:41:f6:3b:4f:b2:3e:63:dd:f2:a6:27:31:
         eb:02:11:f9:a0:bb:de:fe:d3:99:4d:73:84:08:ed:94:6b:e5:
         5e:e0:28:29:e1:0f:57:a4:c4:fa:c3:7e:a3:c8:87:a2:0d:1c:
         a9:ab:54:d8:31:29:e9:1e:e3:eb:d6:2a:60:55:ba:0d:5c:05:
         e1:7f:01:30:53:6c:dd:26:f7:70:e7:e7:04:e3:b9:4d:19:62:
         3e:94:f7:76:b4:a4:f4:94:06:8a:fc:29:95:e5:7f:e8:a5:46:
         b2:60:b7:35:04:d2:84:b8:2a:db:ed:e1:37:c9:e1:89:3f:09:
         ef:3e:17:5c:4d:65:76:35:8c:fc:48:47:a8:74:df:3d:ba:1e:
         21:5c:5e:ba:48:15:e0:25:39:59:c5:83:85:34:f2:05:cc:82:
         7e:1a:1b:67:4d:05:ba:6e:c5:53:45:ae:91:21:35:a6:8a:9c:
         20:95:02:6a:47:c7:b0:1b:41:0c:6b:f7:d2:da:a2:f9:3a:0d:
         a5:7a:81:a1:ed:59:a1:7a:28:d3:33:15:08:85:1a:01:44:72:
         0f:93:d1:bf:9e:b7:11:ab:3b:12:49:4d:0a:c0:de:73:35:52:
         19:9e:58:b4:ed:58:34:c5:38:7f:da:cb:e1:f6:a5:0d:39:d2:
         df:0f:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:34 2026 by rpki-client