This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/EMGYlLFyG7va5tHSqgNvuA_a5nA.roa
File:                     EMGYlLFyG7va5tHSqgNvuA_a5nA.roa (raw, json)
Hash identifier:          K4h7GbaJUcJNo0E5HuiTdnv50fqxOcqcCoCjsxIgI2I=
Subject key identifier:   10:C1:98:94:B1:72:1B:BB:DA:E6:D1:D2:AA:03:6F:B8:0F:DA:E6:70
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED1D23F4C884A6AD051F84B07C1705
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/EMGYlLFyG7va5tHSqgNvuA_a5nA.roa
Signing time:             Thu 01 Jan 2026 14:19:01 +0000
ROA not before:           Thu 01 Jan 2026 14:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199721
IP address blocks:        148.81.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:1d:23:f4:c8:84:a6:ad:05:1f:84:b0:7c:17:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=10c19894b1721bbbdae6d1d2aa036fb80fdae670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:31:fc:20:23:08:e8:2c:d6:9e:ad:3d:4e:
                    e2:cf:b4:8e:0d:60:7a:04:6a:ae:09:6d:b7:24:63:
                    ea:0e:04:49:9c:14:65:f2:2a:c9:c6:37:e7:4b:f5:
                    8a:dc:4d:0f:6a:6d:fa:49:92:6a:5b:dd:5f:8b:48:
                    00:e6:ee:71:bc:00:70:47:6f:9c:d8:50:49:45:4c:
                    04:ef:0d:c5:f8:a4:a8:46:61:87:a8:41:8f:b9:bc:
                    49:83:5b:93:45:b2:73:83:f3:4e:37:82:99:59:1d:
                    db:2b:5c:06:2d:39:ea:ba:27:95:90:07:47:1a:b7:
                    27:ec:15:13:14:44:9d:c2:f9:85:f9:70:d3:05:32:
                    53:e5:cd:b2:f6:14:c0:c4:d9:b5:54:f9:d9:9a:ad:
                    bc:26:20:5b:8c:51:63:2a:b1:ec:5f:90:d5:2e:07:
                    3f:ef:5c:63:94:f0:7c:5a:e5:3a:a4:98:42:b1:e6:
                    76:f8:7c:83:fa:7a:39:f9:5f:d4:7d:37:3e:b7:0a:
                    8b:63:aa:ae:02:bf:36:90:41:b3:8a:8d:62:38:61:
                    d6:b5:e0:7e:03:1e:71:07:3c:61:6e:1e:54:39:a1:
                    77:17:98:e9:17:a8:41:c7:c2:03:54:83:de:3b:89:
                    68:dd:b0:9a:e1:04:98:df:a3:81:21:ad:44:a6:b7:
                    2f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C1:98:94:B1:72:1B:BB:DA:E6:D1:D2:AA:03:6F:B8:0F:DA:E6:70
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/EMGYlLFyG7va5tHSqgNvuA_a5nA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:87:49:b1:ed:b9:1d:95:be:7b:b1:a8:69:0a:1d:44:46:1d:
         56:50:e8:b5:1a:b4:6a:03:8c:b8:d5:8a:b1:68:5f:b3:9b:ee:
         f8:71:3d:d0:ce:b8:6b:f9:d2:38:23:d2:a6:4b:e6:37:f0:07:
         05:41:e0:7f:15:f1:fa:4e:87:cb:7e:50:8f:05:30:96:58:cb:
         58:fb:24:2d:7c:ff:f6:c1:a5:6b:b7:ec:eb:3b:91:8f:b5:a0:
         31:8f:58:61:36:69:e7:07:7b:35:4a:61:1a:84:7b:73:75:f5:
         d9:98:65:cc:79:60:d5:f8:9c:75:a9:60:24:b7:f3:1f:4e:26:
         0f:c3:d7:14:3b:d3:f4:05:3d:aa:52:45:7e:a0:58:85:f8:1d:
         a5:9c:a1:dd:19:0e:f5:ce:44:25:f5:0e:af:33:fd:bf:13:bf:
         2d:74:cf:ac:b2:7b:e1:03:de:b9:9f:2a:9b:bd:54:4a:4c:a2:
         a1:b3:e8:2f:ed:89:9b:4e:c7:ad:37:78:e8:0e:f2:10:2a:75:
         ce:64:1d:20:6f:1e:d1:8f:72:0c:1b:b2:72:35:0c:67:12:b7:
         37:63:d5:c7:e9:41:7c:00:9c:4d:bd:ca:e0:ae:64:d7:18:30:
         8a:97:ae:08:d3:de:62:fc:85:16:eb:97:0f:39:c6:30:af:1d:
         3a:e0:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:21:10 2026 by rpki-client