This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa
File:                     Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa (raw, json)
Hash identifier:          x5+YRcpOPcZJN6v4+CqB6CF57wC48AN2GfCAXoRkaME=
Subject key identifier:   12:AE:62:A1:5C:18:D1:9F:0C:25:1A:10:10:AB:CC:6A:BF:AC:B9:10
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019B7FF16B43C34C1F14CDEE5DF787F269D5
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa
Signing time:             Fri 02 Jan 2026 18:21:26 +0000
ROA not before:           Fri 02 Jan 2026 18:21:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60150
IP address blocks:        45.12.100.0/22 maxlen: 24
                          185.96.56.0/22 maxlen: 24
                          185.136.16.0/22 maxlen: 24
                          2a05:ff00::/29 maxlen: 48
                          2a07:5b40::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:6b:43:c3:4c:1f:14:cd:ee:5d:f7:87:f2:69:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Jan  2 18:21:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12ae62a15c18d19f0c251a1010abcc6abfacb910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:c6:4f:fa:85:d1:b2:3b:93:fc:5e:7b:9e:
                    60:73:fc:21:9c:4e:c7:17:a9:e3:82:8c:67:9a:fe:
                    02:ca:f1:fc:27:c8:6b:d7:e6:58:81:7a:72:9d:7b:
                    d1:ed:a9:3c:2b:a0:53:a4:06:8b:40:c3:98:86:d1:
                    43:a2:99:4d:4d:a3:d0:7a:24:60:4b:5e:4c:cb:36:
                    05:46:09:8a:2b:3b:9b:62:8d:1d:da:fb:7e:bf:05:
                    dd:95:aa:75:64:f9:d8:71:18:0e:ab:5c:79:f2:8d:
                    89:3c:b0:de:7a:85:94:0c:91:33:9e:ae:df:c5:39:
                    b8:90:de:1d:79:c4:f5:c7:d0:6a:01:46:6d:04:0f:
                    83:e0:47:51:63:69:0e:99:6b:39:92:f2:6b:8f:6b:
                    5a:40:0b:b3:68:76:45:63:74:e2:87:05:b0:19:80:
                    0a:f5:4e:2d:18:66:b0:75:96:8a:7c:3e:8c:5c:45:
                    50:10:f8:bd:dc:40:6d:4b:47:80:ea:b0:13:f4:f7:
                    6f:2f:2a:fe:02:68:16:ee:b2:71:19:f2:af:98:86:
                    39:e9:1a:f9:29:84:0f:da:21:c1:d3:b0:e1:3f:6b:
                    51:1c:e2:30:8f:74:2f:9e:0d:8a:55:00:24:b8:6c:
                    7a:e0:4d:5d:0a:3b:8e:65:72:5d:13:82:ad:4f:2b:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AE:62:A1:5C:18:D1:9F:0C:25:1A:10:10:AB:CC:6A:BF:AC:B9:10
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Eq5ioVwY0Z8MJRoQEKvMar-suRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.100.0/22
                  185.96.56.0/22
                  185.136.16.0/22
                IPv6:
                  2a05:ff00::/29
                  2a07:5b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4e:6c:4e:7b:8d:41:aa:63:f9:58:3c:e6:bc:c5:e2:7f:ca:0e:
         11:3f:ae:fd:c2:9f:d8:80:27:3d:73:b3:e4:e7:ea:cc:54:ed:
         70:7f:b6:a2:df:11:41:8c:4f:52:1d:7c:6e:bb:bb:18:23:7d:
         b0:f7:a5:74:cc:00:a2:23:6f:25:52:63:1a:17:78:fb:69:09:
         c2:e2:23:6e:a8:1f:c5:1b:0b:43:c1:72:20:f3:7a:a4:84:91:
         e0:63:f9:8b:6e:c4:df:df:f0:a8:4e:0f:29:e1:e1:4e:31:26:
         2b:70:fd:34:83:0a:f8:e6:5d:da:f9:e6:d0:2f:99:48:54:a3:
         fb:ad:45:37:90:ef:b1:8d:9c:97:92:f7:e7:37:2b:54:82:e7:
         d5:fa:85:48:f3:e5:2b:d9:ef:ed:ef:6e:c7:9f:ff:42:e2:a4:
         d8:a9:d0:8f:d1:7c:06:ef:da:5c:50:d3:54:17:c6:d3:e8:88:
         92:c8:33:bd:3c:e5:27:21:8e:0e:80:56:1a:b4:27:10:a0:0b:
         b2:d2:61:84:16:95:b8:1f:97:14:4d:08:2e:a8:bb:98:95:1a:
         8a:3c:9b:e3:c5:b6:11:47:67:1f:3c:cc:02:3a:0f:82:ef:f8:
         99:83:35:f2:ee:7f:89:68:35:7a:ed:62:e1:7d:b5:f7:3b:68:
         89:11:dc:a3
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZt/8WtDw0wfFM3uXfeH8mnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwMTAyMTgyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmFlNjJhMTVjMThkMTlmMGMyNTFhMTAxMGFiY2M2YWJmYWNiOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6vGT/qF0bI7k/xee55gc/whnE7H
F6njgoxnmv4CyvH8J8hr1+ZYgXpynXvR7ak8K6BTpAaLQMOYhtFDoplNTaPQeiRg
S15MyzYFRgmKKzubYo0d2vt+vwXdlap1ZPnYcRgOq1x58o2JPLDeeoWUDJEznq7f
xTm4kN4decT1x9BqAUZtBA+D4EdRY2kOmWs5kvJrj2taQAuzaHZFY3TihwWwGYAK
9U4tGGawdZaKfD6MXEVQEPi93EBtS0eA6rAT9PdvLyr+AmgW7rJxGfKvmIY56Rr5
KYQP2iHB07DhP2tRHOIwj3Qvng2KVQAkuGx64E1dCjuOZXJdE4KtTyvgJwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFBKuYqFcGNGfDCUaEBCrzGq/rLkQMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvRXE1aW9Wd1kwWjhNSlJvUUVLdk1hci1zdVJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCLQxkAwQC
uWA4AwQCuYgQMBQEAgACMA4DBQMqBf8AAwUDKgdbQDANBgkqhkiG9w0BAQsFAAOC
AQEATmxOe41BqmP5WDzmvMXif8oOET+u/cKf2IAnPXOz5OfqzFTtcH+2ot8RQYxP
Uh18bru7GCN9sPeldMwAoiNvJVJjGhd4+2kJwuIjbqgfxRsLQ8FyIPN6pISR4GP5
i27E39/wqE4PKeHhTjEmK3D9NIMK+OZd2vnm0C+ZSFSj+61FN5DvsY2cl5L35zcr
VILn1fqFSPPlK9nv7e9ux5//QuKk2KnQj9F8Bu/aXFDTVBfG0+iIksgzvTzlJyGO
DoBWGrQnEKALstJhhBaVuB+XFE0ILqi7mJUaijyb48W2EUdnHzzMAjoPgu/4mYM1
8u5/iWg1eu1i4X219ztoiRHcow==
-----END CERTIFICATE-----
Generated at Mon Jan 19 14:43:31 2026 by rpki-client