This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/9Eqe7E3eMUevbHUKUUW_q13KWD4.roa
File:                     9Eqe7E3eMUevbHUKUUW_q13KWD4.roa (raw, json)
Hash identifier:          fY8VfaNE5VXikKhOcBEnGn5MdcBWXx3SvzvPlkIQeaM=
Subject key identifier:   F4:4A:9E:EC:4D:DE:31:47:AF:6C:75:0A:51:45:BF:AB:5D:CA:58:3E
Certificate issuer:       /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial:       019B78A297789E55A90EBF5ACD58889D8CF6
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/9Eqe7E3eMUevbHUKUUW_q13KWD4.roa
Signing time:             Thu 01 Jan 2026 08:18:00 +0000
ROA not before:           Thu 01 Jan 2026 08:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25210
IP address blocks:        212.82.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:97:78:9e:55:a9:0e:bf:5a:cd:58:88:9d:8c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
        Validity
            Not Before: Jan  1 08:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f44a9eec4dde3147af6c750a5145bfab5dca583e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:44:8e:a1:c5:82:24:93:e7:40:49:4b:35:
                    9c:fe:35:1e:24:09:33:44:58:32:6d:d3:e5:7f:6e:
                    78:48:50:5a:48:b1:4d:ff:ce:3d:21:3e:cc:de:82:
                    cf:0c:11:55:58:26:c0:6e:12:f5:cd:ff:a8:9c:14:
                    41:92:5a:a5:ae:04:6b:27:d8:6f:c4:0e:16:87:5d:
                    3e:9f:02:67:52:31:68:cb:ef:a9:36:1d:3b:73:88:
                    02:2d:69:5b:d6:ae:55:f6:f5:da:48:1f:e2:06:3c:
                    aa:70:70:79:46:7c:d8:f2:42:cf:48:77:81:80:43:
                    e9:25:93:ae:3b:d2:0e:d3:f9:72:89:ed:8c:8b:00:
                    7f:0c:ef:c4:14:00:54:94:e8:4c:12:4d:92:76:1f:
                    9d:34:22:51:62:87:93:21:36:84:f2:43:d0:0e:0d:
                    c6:98:b5:13:8d:67:a8:5e:56:93:09:4c:09:1e:4e:
                    06:18:f9:62:90:ed:1e:30:d2:24:1b:74:bf:d7:fc:
                    0b:61:88:9f:00:bf:53:ee:bd:4e:72:ef:4b:f1:60:
                    a4:66:da:5a:ef:db:64:ed:9f:1b:e7:a0:39:59:88:
                    2f:ef:f8:04:b1:25:ef:87:44:c2:92:67:1a:4c:70:
                    92:49:25:07:88:4f:bd:ad:ad:61:66:18:5d:62:70:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4A:9E:EC:4D:DE:31:47:AF:6C:75:0A:51:45:BF:AB:5D:CA:58:3E
            X509v3 Authority Key Identifier:
                keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/9Eqe7E3eMUevbHUKUUW_q13KWD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.82.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:28:4a:80:c3:6a:69:38:27:db:25:62:d4:d1:51:66:d0:e8:
         b7:5f:80:a8:d0:48:2e:a2:38:10:bf:a0:2a:02:28:21:d5:3a:
         27:4a:53:65:7f:ac:0b:cf:30:bd:c8:07:0a:d5:d8:d8:a0:65:
         2b:04:98:77:6f:3d:57:85:7a:b6:ba:bb:f8:00:67:88:0b:2e:
         a7:86:84:d3:cf:b5:ed:ac:ee:3e:73:27:e0:db:da:b7:8b:b3:
         aa:c5:f1:ce:f1:ce:23:1f:4c:00:60:d3:70:7a:2d:4f:8e:b9:
         dd:5e:78:eb:2f:e2:58:94:1f:16:4e:7a:ab:2d:f4:5f:73:e7:
         07:84:af:38:20:ae:16:3c:88:63:b8:df:c0:11:04:77:92:ab:
         a0:d7:a6:09:06:21:e7:11:63:8d:72:13:78:7e:d5:9d:30:bd:
         ea:64:69:ed:de:1d:69:1d:f0:65:33:d1:cb:cd:b5:9d:77:18:
         4e:5e:87:6f:d6:5b:2e:29:d3:69:54:28:4f:3e:67:94:1d:36:
         f3:0a:08:9f:15:fa:4b:e9:39:2d:84:66:30:d4:23:c0:08:a1:
         06:78:b0:97:d7:ea:e0:81:c7:7e:ae:23:00:e5:46:7f:4f:35:
         d1:e6:a1:44:5f:d9:e8:b8:8c:a8:5b:95:35:64:d6:e8:f0:f0:
         e2:4c:a6:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4opd4nlWpDr9azViInYz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjliOWUyNTY1ODBjNDM0NGJiMjQxNDQ1YjRkNTJlNTRm
ZGQ1MGIwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDRhOWVlYzRkZGUzMTQ3YWY2Yzc1MGE1MTQ1YmZhYjVkY2E1ODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUFEjqHFgiST50BJSzWc/jUeJAkz
RFgybdPlf254SFBaSLFN/849IT7M3oLPDBFVWCbAbhL1zf+onBRBklqlrgRrJ9hv
xA4Wh10+nwJnUjFoy++pNh07c4gCLWlb1q5V9vXaSB/iBjyqcHB5RnzY8kLPSHeB
gEPpJZOuO9IO0/lyie2MiwB/DO/EFABUlOhMEk2Sdh+dNCJRYoeTITaE8kPQDg3G
mLUTjWeoXlaTCUwJHk4GGPlikO0eMNIkG3S/1/wLYYifAL9T7r1Ocu9L8WCkZtpa
79tk7Z8b56A5WYgv7/gEsSXvh0TCkmcaTHCSSSUHiE+9ra1hZhhdYnCORQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPRKnuxN3jFHr2x1ClFFv6tdylg+MB8GA1UdIwQY
MBaAFFK5ueJWWAxDRLskFEW01S5U/dULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAt
ZGUwNWM1NDA0NWJiLzEvOUVxZTdFM2VNVWV2YkhVS1VVV19xMTNLV0Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lYWY4MWQtYTlkZi00YTZhLWI2MTAtZGUwNWM1NDA0NWJi
LzEvVXJtNTRsWllERU5FdXlRVVJiVFZMbFQ5MVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FLZMA0G
CSqGSIb3DQEBCwUAA4IBAQCNKEqAw2ppOCfbJWLU0VFm0Oi3X4Co0EguojgQv6Aq
Aigh1TonSlNlf6wLzzC9yAcK1djYoGUrBJh3bz1XhXq2urv4AGeICy6nhoTTz7Xt
rO4+cyfg29q3i7OqxfHO8c4jH0wAYNNwei1PjrndXnjrL+JYlB8WTnqrLfRfc+cH
hK84IK4WPIhjuN/AEQR3kqug16YJBiHnEWONchN4ftWdML3qZGnt3h1pHfBlM9HL
zbWddxhOXodv1lsuKdNpVChPPmeUHTbzCgifFfpL6TkthGYw1CPACKEGeLCX1+rg
gcd+riMA5UZ/TzXR5qFEX9nouIyoW5U1ZNbo8PDiTKY9
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:24:27 2026 by rpki-client