This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/ebEe0KFXRt6CKgcr6dQsEMc5q2I.roa
File:                     ebEe0KFXRt6CKgcr6dQsEMc5q2I.roa (raw, json)
Hash identifier:          npVCU+u49BuM8enRn8nrbB2PIwcLlnC6iNP5aZaAass=
Subject key identifier:   79:B1:1E:D0:A1:57:46:DE:82:2A:07:2B:E9:D4:2C:10:C7:39:AB:62
Certificate issuer:       /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial:       019B7E38BEC68ACF586AA7776C3CF428E24D
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/ebEe0KFXRt6CKgcr6dQsEMc5q2I.roa
Signing time:             Fri 02 Jan 2026 10:20:06 +0000
ROA not before:           Fri 02 Jan 2026 10:20:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202773
IP address blocks:        46.226.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:be:c6:8a:cf:58:6a:a7:77:6c:3c:f4:28:e2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
        Validity
            Not Before: Jan  2 10:20:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79b11ed0a15746de822a072be9d42c10c739ab62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:8e:fd:41:e8:2f:78:c4:47:67:d0:6a:c3:
                    1e:ca:66:6a:50:83:04:31:88:99:2a:0f:10:3d:40:
                    0e:11:ff:5c:22:5b:38:4a:61:43:b5:ea:86:e0:42:
                    ab:d3:c9:09:0f:cc:4b:5e:70:8d:df:dd:2c:0d:4a:
                    b3:5d:d2:8a:e4:c2:a0:cd:66:1d:f7:3c:4d:fd:49:
                    a5:26:90:f7:bc:7a:03:e0:71:8f:7b:4f:ed:60:c8:
                    3f:2b:0f:57:4b:1a:35:ca:17:a5:2c:96:be:c8:fe:
                    6e:60:f0:92:e1:d2:e4:5b:a1:5e:c4:fe:aa:92:d0:
                    33:a9:85:27:0a:95:91:e1:bb:6f:e4:7b:4c:ba:a2:
                    c2:fc:d3:c4:95:07:9b:a8:ba:d2:2d:87:27:37:09:
                    13:63:db:e1:ec:cd:98:9b:18:86:70:5c:44:59:3e:
                    90:cd:d3:06:53:bd:1a:96:d0:f0:15:35:a8:cb:82:
                    9a:ee:95:5e:93:5f:35:e0:84:4a:3f:6a:e4:65:e2:
                    07:58:5b:aa:2b:47:1b:de:6d:dd:a6:b3:29:f3:da:
                    09:a4:82:85:4d:2e:07:14:cb:9a:0a:22:a9:01:51:
                    d3:3b:8f:4c:4d:a6:90:66:d6:ec:b4:ba:95:d2:0f:
                    ff:c3:47:68:fc:c2:57:da:0c:e0:be:73:d9:95:1d:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B1:1E:D0:A1:57:46:DE:82:2A:07:2B:E9:D4:2C:10:C7:39:AB:62
            X509v3 Authority Key Identifier:
                keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/ebEe0KFXRt6CKgcr6dQsEMc5q2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.226.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:73:9c:88:5e:6c:65:c1:cb:96:07:ff:e1:c0:ac:bf:2e:3d:
         90:6a:df:a6:64:f7:f0:b8:0c:5b:5f:ea:ab:b4:df:95:e1:a8:
         15:7d:de:df:1e:4e:9e:f8:c9:28:63:78:4b:d1:87:ba:9d:78:
         0e:8f:b7:99:e7:89:ad:83:86:28:84:18:7d:68:83:6a:55:e2:
         7e:e0:99:59:3d:f7:70:9d:92:13:c7:71:a2:5b:6d:86:78:2b:
         14:40:ec:d8:d3:43:2a:eb:e3:8e:ed:90:36:ba:fe:4c:f2:8f:
         e0:05:58:d4:89:37:08:6d:84:7d:ff:4b:8f:b1:c5:0b:cc:1b:
         b7:3e:5c:31:29:8e:21:f9:60:b7:9e:a7:2a:3a:c8:bb:ad:9c:
         a2:87:e8:8a:d2:ec:7a:80:44:9e:c9:f1:07:94:46:1a:b4:0b:
         6c:c8:ec:62:32:50:08:33:5f:6d:63:f5:21:e9:01:e8:cd:9a:
         01:ce:f9:42:f6:0c:50:0b:54:eb:d4:da:ec:f3:be:4d:5b:45:
         ea:12:b0:94:8c:54:3e:93:d2:6d:d6:f2:16:c2:2a:19:df:1a:
         7f:3d:a2:99:91:0d:27:45:27:d3:10:ce:e7:9f:c9:b8:2a:9a:
         6a:68:59:8c:a5:fe:47:c9:93:54:c4:de:41:e4:49:06:0c:66:
         69:b8:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:20 2026 by rpki-client