This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ez_H479ioNcL335UJpY8pQVTWTA.roa
File:                     Ez_H479ioNcL335UJpY8pQVTWTA.roa (raw, json)
Hash identifier:          wEHPbaiFwqkq3MQPzH4qFJ6NOnkRRVzvlv5bawiSpNo=
Subject key identifier:   13:3F:C7:E3:BF:62:A0:D7:0B:DF:7E:54:26:96:3C:A5:05:53:59:30
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       019B7AC7C1D9EC90E2A94643348DC21B4C2F
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ez_H479ioNcL335UJpY8pQVTWTA.roa
Signing time:             Thu 01 Jan 2026 18:17:50 +0000
ROA not before:           Thu 01 Jan 2026 18:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        159.148.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:c1:d9:ec:90:e2:a9:46:43:34:8d:c2:1b:4c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jan  1 18:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=133fc7e3bf62a0d70bdf7e5426963ca505535930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:6b:c1:ed:61:20:41:08:ab:63:fc:9f:85:
                    2e:ee:c1:3e:b9:e1:df:3d:1b:c8:66:78:a3:fc:be:
                    cb:55:8a:0a:84:92:aa:3f:55:ad:8f:6b:cf:7b:58:
                    a0:b8:2f:75:3e:27:d4:f4:ef:18:6d:90:49:45:42:
                    cb:1d:50:b2:8c:50:94:d3:9e:41:7e:8e:c2:35:36:
                    17:be:10:52:83:25:f4:2f:56:ce:aa:31:90:40:5a:
                    e5:af:08:00:03:df:b1:b9:0b:84:5c:51:bd:de:9e:
                    f5:28:ff:a0:a3:6a:53:b5:e9:42:62:01:84:3c:10:
                    7f:9f:44:66:35:8a:b2:ea:94:e3:a0:b3:42:91:00:
                    8f:dc:03:64:2a:91:cc:61:b9:43:06:0e:4c:2a:db:
                    67:3c:08:c7:d0:0f:54:77:6b:41:e4:44:e4:8f:22:
                    2f:38:a9:60:30:35:3b:e6:db:d3:7d:bb:c0:ae:13:
                    26:29:13:fa:7d:e4:45:f4:6e:44:38:d7:4c:b4:46:
                    87:80:49:3a:86:94:ee:87:dd:06:55:1a:3c:c3:19:
                    e5:a7:5e:18:64:c9:a2:a0:6a:f0:d2:58:d5:3c:d6:
                    ad:5d:82:14:24:87:70:77:0d:96:12:ec:1c:de:0a:
                    63:8f:55:cd:94:d6:d7:63:8f:8b:88:17:c7:63:4c:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:C7:E3:BF:62:A0:D7:0B:DF:7E:54:26:96:3C:A5:05:53:59:30
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ez_H479ioNcL335UJpY8pQVTWTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.148.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c7:ce:05:cf:a1:7a:38:ce:8f:ce:0c:8c:72:39:9f:80:06:
         23:ba:5a:18:d4:fb:e7:78:5a:48:9a:5b:0b:dd:82:3f:a9:c4:
         c2:d2:a3:a4:08:52:8d:fa:02:8e:63:9b:a9:b1:20:bb:63:b9:
         35:cd:3c:ae:2a:4c:71:af:ba:7e:7f:8a:b6:c8:2a:69:af:9c:
         4f:49:72:45:92:5e:32:64:7f:6c:38:e7:da:d2:7b:75:b1:7e:
         33:47:a3:e0:02:85:9b:7c:7c:09:09:ae:14:23:45:0a:c1:97:
         91:01:ed:18:a5:e7:a6:1c:e3:1e:99:41:e1:f6:5a:54:bf:bb:
         60:6a:79:dc:92:7d:36:8e:4c:22:e9:c2:ea:55:a4:37:ec:85:
         ce:dd:97:7c:9a:75:aa:cf:05:77:27:f9:4f:85:a4:3e:99:e9:
         39:3f:e2:23:36:23:48:a6:a1:f7:8e:1d:1d:94:7e:02:33:24:
         f2:e5:b7:49:c4:08:56:16:87:60:dc:94:d9:13:0e:f5:b6:1d:
         bd:e9:c0:f8:a9:87:5b:f5:f6:dc:a3:54:a2:a4:85:88:aa:17:
         4d:19:9c:b6:ce:fc:db:c0:73:5b:35:35:70:02:97:00:73:68:
         cf:24:5a:5c:d1:74:d7:16:7a:c1:ba:2a:b3:ad:4b:64:55:60:
         d7:17:e2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:04 2026 by rpki-client