This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/eoJQmOi00RtisYT69k2lcfpvuTI.roa
File:                     eoJQmOi00RtisYT69k2lcfpvuTI.roa (raw, json)
Hash identifier:          zyn9MIC0PYdNEQ/1NTEkC1cOqVRsDhiTSo2jAFn7xpI=
Subject key identifier:   7A:82:50:98:E8:B4:D1:1B:62:B1:84:FA:F6:4D:A5:71:FA:6F:B9:32
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       019B7CEDF3C3B33E8A27CA90B68D8404C513
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/eoJQmOi00RtisYT69k2lcfpvuTI.roa
Signing time:             Fri 02 Jan 2026 04:18:47 +0000
ROA not before:           Fri 02 Jan 2026 04:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48283
IP address blocks:        194.0.28.0/24 maxlen: 24
                          194.0.30.0/24 maxlen: 24
                          194.0.31.0/24 maxlen: 24
                          2001:678:2c::/48 maxlen: 48
                          2001:678:34::/48 maxlen: 48
                          2001:678:38::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:f3:c3:b3:3e:8a:27:ca:90:b6:8d:84:04:c5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Jan  2 04:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a825098e8b4d11b62b184faf64da571fa6fb932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4d:06:51:48:00:c4:fa:76:9f:b3:b2:9f:54:
                    f1:92:bc:69:ae:d7:09:47:57:fa:00:ce:10:ee:37:
                    d6:a2:50:6d:09:74:8b:78:b0:7a:29:02:ea:dc:8f:
                    de:8c:d3:18:a9:fd:6b:05:2c:f0:b3:c7:78:aa:6c:
                    fd:e2:92:94:dc:6d:84:50:f1:76:c7:14:29:1d:c3:
                    de:ae:c4:95:a0:c9:4e:dd:d9:d4:d7:34:bc:95:cc:
                    4c:ee:23:42:95:59:dd:bb:4b:f0:8c:c6:e8:fb:d8:
                    f4:6a:ae:17:8a:2e:b1:fb:64:51:48:f2:3a:ab:32:
                    56:10:b4:4b:ab:c0:cb:8a:cc:51:38:95:f8:f6:99:
                    41:8f:5b:ad:e5:5d:e7:03:a9:85:ce:32:52:50:95:
                    50:28:77:f7:79:a0:d7:32:db:15:7c:fc:b8:bc:e1:
                    a6:df:67:52:51:59:d8:82:a8:1c:d8:7c:f3:10:10:
                    b0:e5:5f:0b:0f:a2:54:b0:11:05:a6:1d:39:d7:10:
                    32:57:59:83:68:c7:7e:d2:fa:88:96:8c:88:2f:73:
                    3f:f6:a4:b7:78:3a:90:36:a9:71:0f:55:9c:63:d8:
                    d1:00:1e:27:13:5f:10:ce:1d:83:93:3c:c6:43:6e:
                    3d:6d:bd:cb:6d:63:98:9e:f4:5c:1e:11:1b:53:02:
                    11:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:82:50:98:E8:B4:D1:1B:62:B1:84:FA:F6:4D:A5:71:FA:6F:B9:32
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/eoJQmOi00RtisYT69k2lcfpvuTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.28.0/24
                  194.0.30.0/23
                IPv6:
                  2001:678:2c::/48
                  2001:678:34::/48
                  2001:678:38::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:b6:bc:e0:67:ae:39:90:74:ac:a8:5a:0b:07:a3:10:0a:c6:
         6c:87:71:e7:23:aa:cb:5d:f3:05:c1:cf:54:94:58:73:97:74:
         84:7b:94:60:b8:cc:bb:d1:9d:61:0e:77:aa:a4:fd:3f:9f:c5:
         86:3e:05:1a:06:98:90:ca:6b:90:2f:c1:7e:34:8f:54:fb:84:
         51:79:1b:b9:73:08:94:ae:ce:53:9c:9e:fc:54:3c:b7:54:71:
         fa:2a:07:ef:d7:0f:08:c6:8f:a0:8a:c6:b1:7b:f6:e5:a0:0e:
         1e:67:0a:43:45:c1:64:1f:0a:af:0f:75:09:3f:d4:f5:14:2d:
         c7:94:d2:43:ed:56:af:e3:df:89:30:ed:83:a9:4c:c1:56:e1:
         d1:c2:50:ee:15:11:ae:00:37:37:8e:83:f6:da:f6:b4:ce:f7:
         e6:41:43:33:fa:b1:49:8e:ce:63:d9:ee:af:78:c8:64:73:03:
         87:ae:9e:37:b5:e7:c9:07:5c:ce:ef:53:1e:69:23:0c:76:71:
         a6:a8:ec:8c:7c:a1:c8:c7:a5:c0:36:6c:e8:20:3d:5b:61:65:
         3e:36:42:d2:8a:af:34:41:d4:af:ec:6d:2f:92:29:8c:7c:67:
         91:80:cb:85:de:21:99:8a:e1:44:5a:38:c1:23:08:5a:35:9b:
         bd:0f:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:17 2026 by rpki-client