This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/EvEuN17BJ9vGyYCGgJ1an9fP9sQ.roa
File:                     EvEuN17BJ9vGyYCGgJ1an9fP9sQ.roa (raw, json)
Hash identifier:          tKY9v1gC0C+RNHLN0VBuXiREaB1BHfONGebwE/+0gCE=
Subject key identifier:   12:F1:2E:37:5E:C1:27:DB:C6:C9:80:86:80:9D:5A:9F:D7:CF:F6:C4
Certificate issuer:       /CN=53585138107965c389f367b55abd792b531eb9ca
Certificate serial:       019B7F13AE1353CCED5F323C796115FFCC12
Authority key identifier: 53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/EvEuN17BJ9vGyYCGgJ1an9fP9sQ.roa
Signing time:             Fri 02 Jan 2026 14:19:14 +0000
ROA not before:           Fri 02 Jan 2026 14:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41369
IP address blocks:        5.250.160.0/21 maxlen: 24
                          77.240.16.0/23 maxlen: 24
                          77.240.24.0/21 maxlen: 24
                          79.171.224.0/21 maxlen: 24
                          80.242.16.0/20 maxlen: 24
                          89.250.48.0/20 maxlen: 24
                          93.191.120.0/21 maxlen: 24
                          94.199.112.0/21 maxlen: 24
                          185.87.244.0/22 maxlen: 24
                          185.145.172.0/22 maxlen: 24
                          195.60.252.0/22 maxlen: 24
                          2a00:f5c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:ae:13:53:cc:ed:5f:32:3c:79:61:15:ff:cc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53585138107965c389f367b55abd792b531eb9ca
        Validity
            Not Before: Jan  2 14:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12f12e375ec127dbc6c98086809d5a9fd7cff6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6f:60:38:39:ec:6d:66:c2:2f:29:06:dd:4b:
                    74:2d:8a:2a:3d:5b:1c:a6:60:33:bd:64:4a:da:06:
                    c6:66:4a:17:20:67:3e:f6:6b:eb:e7:a2:53:08:ae:
                    f8:34:f7:fd:ec:f1:23:99:83:19:7f:2c:6c:0e:ed:
                    32:1d:55:cc:0e:2b:16:e9:e3:d5:a5:78:ae:e8:05:
                    38:da:ca:5a:6f:4c:7e:6d:a8:79:7f:14:85:df:02:
                    64:6b:f9:e0:14:30:47:c0:2e:2b:76:a7:0b:15:7b:
                    0c:4c:74:38:87:ae:31:25:f0:08:5b:a3:07:95:b4:
                    19:96:cd:95:14:b5:93:5b:85:f6:2b:2b:b7:12:20:
                    f7:9e:8a:1c:f5:a2:7b:f5:77:ec:c3:62:b8:79:b0:
                    cf:c9:8f:50:38:3e:c2:b6:0c:ee:11:92:a6:da:1a:
                    36:7d:75:0c:22:e7:05:79:de:74:32:08:47:71:29:
                    23:91:82:39:f2:ba:9a:d2:e2:f8:66:d2:d5:1c:75:
                    f6:eb:b6:d5:7f:4c:14:78:e0:de:fc:a8:9c:76:07:
                    7b:1a:2d:e3:f8:64:95:b1:57:5d:a2:e0:85:83:35:
                    cc:e3:1d:f4:c0:01:d7:4a:e2:d9:9d:1d:29:2a:3f:
                    6d:2f:57:87:fd:dd:a6:d4:63:50:90:eb:4a:f2:f1:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F1:2E:37:5E:C1:27:DB:C6:C9:80:86:80:9D:5A:9F:D7:CF:F6:C4
            X509v3 Authority Key Identifier:
                keyid:53:58:51:38:10:79:65:C3:89:F3:67:B5:5A:BD:79:2B:53:1E:B9:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1hROBB5ZcOJ82e1Wr15K1Meuco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/EvEuN17BJ9vGyYCGgJ1an9fP9sQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/47645f-3cd0-4b36-8c53-1850fff04425/1/U1hROBB5ZcOJ82e1Wr15K1Meuco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.250.160.0/21
                  77.240.16.0/23
                  77.240.24.0/21
                  79.171.224.0/21
                  80.242.16.0/20
                  89.250.48.0/20
                  93.191.120.0/21
                  94.199.112.0/21
                  185.87.244.0/22
                  185.145.172.0/22
                  195.60.252.0/22
                IPv6:
                  2a00:f5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:5d:bf:ec:e1:da:69:c8:20:14:58:98:c2:18:07:2d:88:
         2d:7b:e5:6c:57:91:41:1e:54:9b:c7:3f:70:12:93:76:ea:36:
         1d:01:32:63:33:96:6f:ff:e1:db:b1:45:bc:7e:7f:4f:85:e6:
         8c:4a:eb:29:12:d7:3d:74:a5:e3:2c:05:65:bf:75:a7:07:17:
         be:3e:77:d1:a4:2b:8e:14:bb:c6:fe:dc:96:eb:23:9c:49:96:
         81:7b:a2:71:84:83:84:ca:1c:9c:b5:5f:af:86:ad:0f:b3:18:
         a2:eb:cb:2a:e7:05:89:21:9f:87:44:c5:a9:48:51:06:36:88:
         e4:53:63:53:c6:b5:2a:7c:4d:4c:78:d4:47:38:00:55:27:4e:
         c9:0c:96:7e:a4:2f:55:83:9b:00:db:5e:cc:e5:83:12:a8:c6:
         7c:89:a9:d9:c3:df:a2:de:4e:16:9a:02:e6:dc:60:29:26:36:
         f3:af:31:18:a5:30:d9:6b:8f:a5:b4:08:34:dd:56:86:b4:86:
         70:26:19:77:01:57:98:17:55:10:ae:08:8d:4e:91:1e:a2:f9:
         98:32:1d:f5:02:2b:16:21:12:53:13:f9:ff:a1:a4:78:25:85:
         1c:d9:31:e3:5c:43:ac:5a:90:ae:4f:7d:8b:5e:41:df:e0:e6:
         6b:1f:6e:ef
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZt/E64TU8ztXzI8eWEV/8wSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTg1MTM4MTA3OTY1YzM4OWYzNjdiNTVhYmQ3OTJiNTMx
ZWI5Y2EwHhcNMjYwMTAyMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmYxMmUzNzVlYzEyN2RiYzZjOTgwODY4MDlkNWE5ZmQ3Y2ZmNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW9gODnsbWbCLykG3Ut0LYoqPVsc
pmAzvWRK2gbGZkoXIGc+9mvr56JTCK74NPf97PEjmYMZfyxsDu0yHVXMDisW6ePV
pXiu6AU42spab0x+bah5fxSF3wJka/ngFDBHwC4rdqcLFXsMTHQ4h64xJfAIW6MH
lbQZls2VFLWTW4X2Kyu3EiD3nooc9aJ79Xfsw2K4ebDPyY9QOD7CtgzuEZKm2ho2
fXUMIucFed50MghHcSkjkYI58rqa0uL4ZtLVHHX267bVf0wUeODe/Kicdgd7Gi3j
+GSVsVddouCFgzXM4x30wAHXSuLZnR0pKj9tL1eH/d2m1GNQkOtK8vHYhQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFBLxLjdewSfbxsmAhoCdWp/Xz/bEMB8GA1UdIwQY
MBaAFFNYUTgQeWXDifNntVq9eStTHrnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMt
MTg1MGZmZjA0NDI1LzEvRXZFdU4xN0JKOXZHeVlDR2dKMWFuOWZQOXNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80NzY0NWYtM2NkMC00YjM2LThjNTMtMTg1MGZmZjA0NDI1
LzEvVTFoUk9CQjVaY09KODJlMVdyMTVLMU1ldWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQDBfqgAwQB
TfAQAwQDTfAYAwQDT6vgAwQEUPIQAwQEWfowAwQDXb94AwQDXsdwAwQCuVf0AwQC
uZGsAwQCwzz8MA0EAgACMAcDBQAqAPXAMA0GCSqGSIb3DQEBCwUAA4IBAQBuil2/
7OHaacggFFiYwhgHLYgte+VsV5FBHlSbxz9wEpN26jYdATJjM5Zv/+HbsUW8fn9P
heaMSuspEtc9dKXjLAVlv3WnBxe+PnfRpCuOFLvG/tyW6yOcSZaBe6JxhIOEyhyc
tV+vhq0Psxii68sq5wWJIZ+HRMWpSFEGNojkU2NTxrUqfE1MeNRHOABVJ07JDJZ+
pC9Vg5sA217M5YMSqMZ8ianZw9+i3k4WmgLm3GApJjbzrzEYpTDZa4+ltAg03VaG
tIZwJhl3AVeYF1UQrgiNTpEeovmYMh31AisWIRJTE/n/oaR4JYUc2THjXEOsWpCu
T32LXkHf4OZrH27v
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:03 2026 by rpki-client