This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/euUp3-ezlCpILlf7qWV0a93H1yQ.roa
File:                     euUp3-ezlCpILlf7qWV0a93H1yQ.roa (raw, json)
Hash identifier:          kzeXchF7R0DCrCVUSaQcyQotUqQoTUlPfhRZvehXMko=
Subject key identifier:   7A:E5:29:DF:E7:B3:94:2A:48:2E:57:FB:A9:65:74:6B:DD:C7:D7:24
Certificate issuer:       /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial:       019B7F14D421041B2835B11AF07FA664772A
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/euUp3-ezlCpILlf7qWV0a93H1yQ.roa
Signing time:             Fri 02 Jan 2026 14:20:29 +0000
ROA not before:           Fri 02 Jan 2026 14:20:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212609
IP address blocks:        45.88.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:d4:21:04:1b:28:35:b1:1a:f0:7f:a6:64:77:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
        Validity
            Not Before: Jan  2 14:20:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ae529dfe7b3942a482e57fba965746bddc7d724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4b:2b:de:e6:51:0f:d5:ca:00:6a:40:f5:73:
                    53:2e:4c:5b:0e:30:2a:ea:b9:09:8f:57:d8:65:f9:
                    e1:4a:07:ff:84:cb:80:07:df:75:88:8d:bd:97:58:
                    cd:a3:9b:1a:c7:7d:56:8d:b5:1e:9d:8c:0e:41:f5:
                    8c:4b:28:8b:49:e4:ce:5d:8b:e1:ce:ee:28:62:ed:
                    3d:5c:5c:8e:04:b1:82:39:18:86:fc:ff:07:1b:b1:
                    1f:17:37:2c:85:6d:59:7c:3b:ea:b3:c2:73:04:63:
                    2d:b0:cc:48:cc:c8:ec:08:3c:94:66:ec:a8:51:37:
                    56:3a:a1:ee:14:71:3e:b2:b9:4d:b9:34:51:1d:a8:
                    92:c6:ad:ec:48:28:61:b8:67:91:99:8c:c8:b1:25:
                    ad:b4:06:d5:16:b6:8d:ec:5f:f5:59:74:df:18:d0:
                    cf:fe:96:29:71:31:f0:7e:3b:4c:fe:d0:72:2f:95:
                    95:e1:c8:d2:81:67:f6:fe:f8:7d:ee:0b:6c:b6:2a:
                    f5:22:a3:cc:44:7d:c3:4d:f6:a4:ac:29:49:ba:17:
                    d2:61:54:bc:3c:08:c8:f2:67:fc:7f:bf:17:9c:c4:
                    15:a4:0c:4e:6c:47:4d:98:60:2c:34:f5:80:85:98:
                    b4:55:5e:bb:a0:3e:81:6a:11:a1:6d:cf:64:14:48:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E5:29:DF:E7:B3:94:2A:48:2E:57:FB:A9:65:74:6B:DD:C7:D7:24
            X509v3 Authority Key Identifier:
                keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/euUp3-ezlCpILlf7qWV0a93H1yQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:63:66:73:fa:d7:ea:89:57:a5:ed:99:a1:3c:f9:fb:69:07:
         49:18:78:df:43:7f:65:4e:56:a6:b8:78:60:54:07:e3:f0:7c:
         64:bf:72:b2:e4:d0:e0:d1:55:8a:3e:f7:c0:59:df:be:62:89:
         15:db:94:37:ba:ee:c1:2c:b3:af:ad:fa:34:f0:da:88:92:72:
         c8:64:e2:ce:3e:74:4d:74:58:da:13:7f:47:88:6e:d1:3d:2c:
         c1:13:8d:30:d7:b1:71:b4:86:f3:0b:b0:fe:1e:5a:8b:e2:12:
         48:11:77:50:f9:25:47:a3:9f:1b:60:5d:29:c6:da:dd:c4:9e:
         76:8c:ff:08:06:a5:fd:9f:47:31:aa:8b:4e:f7:85:c0:01:c1:
         2f:5c:d1:dc:c0:a2:b7:2c:77:95:f2:4e:e8:3d:9f:eb:fd:30:
         3a:8f:1c:4f:58:7b:34:d0:0c:7c:24:0c:88:a5:8a:dc:b5:8b:
         0d:5d:e4:74:ad:94:d7:1f:56:2c:26:07:63:e9:fb:36:70:70:
         84:22:f4:86:29:09:c8:f2:71:0f:28:80:a3:70:33:23:48:5a:
         7d:56:de:df:4f:b7:86:5c:a7:af:56:aa:d5:20:30:3d:04:14:
         41:de:ce:c5:74:93:fa:68:5d:96:bd:70:32:27:c6:0f:79:7b:
         37:81:f0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:40:43 2026 by rpki-client