This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/Eu41_P7LziP7tbN3y79d5Zld-yA.roa
File:                     Eu41_P7LziP7tbN3y79d5Zld-yA.roa (raw, json)
Hash identifier:          AfrnyrK9VXdcG7fWfl7gD7MMFiGqvdrIsV969hWJlbc=
Subject key identifier:   12:EE:35:FC:FE:CB:CE:23:FB:B5:B3:77:CB:BF:5D:E5:99:5D:FB:20
Certificate issuer:       /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial:       019B77C6D9E84D03D6C10EFE3DDE00C1310B
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/Eu41_P7LziP7tbN3y79d5Zld-yA.roa
Signing time:             Thu 01 Jan 2026 04:17:59 +0000
ROA not before:           Thu 01 Jan 2026 04:17:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        2a14:27c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 21:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:d9:e8:4d:03:d6:c1:0e:fe:3d:de:00:c1:31:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
        Validity
            Not Before: Jan  1 04:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12ee35fcfecbce23fbb5b377cbbf5de5995dfb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:0d:f7:fe:fe:b2:71:c8:9c:ef:75:a1:04:
                    74:9f:67:7b:7d:a7:42:dc:e9:54:a3:1f:03:f6:e0:
                    22:89:43:28:32:e4:3d:e1:e7:7c:35:9e:4f:8e:a1:
                    65:b9:9b:5b:ec:c8:f1:56:45:6f:3d:a1:98:1d:bd:
                    cf:9f:11:d7:8e:9c:86:38:61:a1:a3:9c:3b:4d:81:
                    ba:e8:90:c6:3b:aa:93:01:24:e7:34:98:3d:2b:9c:
                    c2:2e:b9:5a:d5:15:b5:01:c6:33:94:f6:ec:06:12:
                    6d:50:0f:db:67:3f:12:9f:60:5e:c1:a6:37:1e:da:
                    54:09:9f:88:4f:50:24:7e:a4:bf:d2:4f:d1:31:3b:
                    da:1e:c7:3b:f8:8e:0d:6e:0e:f0:97:7d:16:6c:fa:
                    19:8a:79:fb:47:cd:f6:d1:f5:a2:b2:86:c6:a5:75:
                    5d:72:d3:a6:ea:e1:a6:87:2c:4e:67:3d:23:30:a6:
                    f8:c4:bd:cf:d5:c5:74:8e:f5:7b:59:af:94:36:ba:
                    bf:70:7e:09:7d:5a:01:a4:c8:3c:35:f3:57:c9:8a:
                    ab:84:37:f7:f6:c8:ee:e7:a0:45:e0:b6:25:07:c5:
                    65:64:b6:f4:74:9e:dc:20:d9:90:db:4a:5e:36:2d:
                    97:24:a8:08:13:aa:07:09:8e:2f:1e:81:15:31:e3:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EE:35:FC:FE:CB:CE:23:FB:B5:B3:77:CB:BF:5D:E5:99:5D:FB:20
            X509v3 Authority Key Identifier:
                keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/Eu41_P7LziP7tbN3y79d5Zld-yA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:29:4d:8b:ba:95:5f:11:cc:18:3c:01:41:e4:5b:34:03:5c:
         05:0b:c9:d8:05:77:0f:07:69:83:37:cb:a7:81:68:c1:84:59:
         95:f5:03:2c:a3:e7:24:c8:a7:62:ed:13:02:64:8d:51:e9:fb:
         23:b7:59:07:3a:4f:3c:04:82:70:19:02:0a:5c:94:4d:43:b8:
         bc:51:4e:d2:b3:a7:9f:3b:f4:46:bd:e2:15:31:48:2b:ad:9c:
         bf:eb:79:25:00:e0:ae:22:a3:5c:7c:04:62:01:c1:16:a1:92:
         00:df:82:e9:52:f0:c9:94:b9:19:42:cf:62:6d:f7:34:3a:0b:
         2c:ea:b2:8c:1d:03:4a:e3:c6:f7:e7:38:e0:1f:50:86:87:65:
         83:0c:d1:0d:12:8c:7b:33:5e:22:2e:57:37:bd:03:55:ba:d5:
         53:f3:d1:42:54:39:4a:63:55:b4:0d:e4:ac:92:16:63:cf:7e:
         25:a6:9b:1a:53:a9:25:31:f8:15:e7:f7:bb:96:71:ba:6e:7d:
         af:e9:b9:6e:e1:ab:80:f0:73:8a:21:d0:8e:e1:61:ea:80:0f:
         a9:83:e2:51:ef:9e:90:95:f8:ac:4b:39:70:dd:c3:9c:4c:d1:
         73:9f:8e:47:1f:dc:15:16:4c:7a:40:5e:11:2b:74:d6:b2:61:
         b8:3e:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 06:25:49 2026 by rpki-client