This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/SEU-eUTm-6iORlN5RtiJHEwSdwc.roa
File:                     SEU-eUTm-6iORlN5RtiJHEwSdwc.roa (raw, json)
Hash identifier:          rXL5N4BdgulO5NRgIVf5AGGcYxix/8Lxb7TWkibxEWk=
Subject key identifier:   48:45:3E:79:44:E6:FB:A8:8E:46:53:79:46:D8:89:1C:4C:12:77:07
Certificate issuer:       /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial:       019B7DC9BADA18BDA6A04F9D82E2F4BE817B
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/SEU-eUTm-6iORlN5RtiJHEwSdwc.roa
Signing time:             Fri 02 Jan 2026 08:18:51 +0000
ROA not before:           Fri 02 Jan 2026 08:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198398
IP address blocks:        95.156.216.0/22 maxlen: 22
                          185.184.20.0/22 maxlen: 22
                          185.184.20.0/23 maxlen: 23
                          185.184.22.0/23 maxlen: 23
                          194.110.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:ba:da:18:bd:a6:a0:4f:9d:82:e2:f4:be:81:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
        Validity
            Not Before: Jan  2 08:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48453e7944e6fba88e46537946d8891c4c127707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:2a:04:e6:17:fe:39:ee:f7:de:a7:6b:6d:
                    fc:61:7e:0d:ea:66:4e:79:31:35:66:ae:2c:30:85:
                    ed:1e:28:ac:28:aa:2e:9a:f1:7b:d3:37:f5:19:03:
                    34:3c:46:fd:e0:94:00:b9:54:71:4f:a4:91:6b:e3:
                    5e:46:cd:df:21:81:f8:9e:b6:a0:a3:76:0e:f1:8e:
                    b9:84:07:47:1d:94:19:99:75:d0:50:ed:b5:62:23:
                    4e:c8:9c:d4:3c:41:3f:b9:b7:fb:3d:db:0f:ba:35:
                    a4:ce:7f:de:4f:69:60:e6:c7:8f:9a:70:d0:ba:61:
                    ab:ba:34:a8:3c:b0:e3:e1:15:43:36:88:c7:da:87:
                    d1:61:87:e5:0b:06:a3:ef:8f:f8:f3:f8:36:93:fa:
                    db:1f:9b:50:69:b8:f9:bc:6a:2c:92:74:ab:d1:97:
                    ec:35:f5:51:06:38:11:84:cf:5b:8b:db:92:8e:bb:
                    e4:74:2b:3b:1a:fc:91:3f:44:34:df:aa:09:2a:5e:
                    f8:79:19:a5:4e:9a:50:77:d3:08:76:b6:46:1e:03:
                    79:77:46:3e:9d:f7:d5:40:31:d6:83:0f:46:4a:3d:
                    18:70:d1:5a:24:ff:d7:6b:07:d8:db:52:1b:10:1b:
                    21:12:a7:04:99:72:64:71:e5:d9:a9:2e:2e:5d:fa:
                    8a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:45:3E:79:44:E6:FB:A8:8E:46:53:79:46:D8:89:1C:4C:12:77:07
            X509v3 Authority Key Identifier:
                keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/SEU-eUTm-6iORlN5RtiJHEwSdwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.156.216.0/22
                  185.184.20.0/22
                  194.110.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:f1:f8:b1:e9:e7:41:f2:99:84:b6:cf:b5:27:1d:1f:9b:10:
         e1:1a:2f:9a:06:b9:99:f3:0c:55:0a:c7:4a:12:ed:80:07:81:
         ca:dc:fe:41:8b:68:65:87:db:9a:2d:67:6d:25:58:93:bd:53:
         14:d8:67:f7:43:1d:81:43:8c:6f:57:34:b5:11:03:f3:78:ae:
         06:6d:3c:54:03:6a:f4:cd:fd:97:a4:42:c1:81:d1:d2:4d:47:
         f0:c5:9c:a1:6d:3f:cc:57:bb:ce:9b:19:4e:e4:95:4f:b7:97:
         35:6c:5a:4c:86:73:0f:5b:ec:a9:1d:e1:e2:79:95:e1:ec:20:
         0a:8b:56:90:c3:21:7f:90:77:60:8a:e8:1a:8e:36:85:78:da:
         d4:1c:79:d2:cc:7e:c2:03:da:f8:13:1e:45:dc:16:5e:44:a9:
         d6:c4:ba:63:2f:05:9a:28:68:5b:b6:21:5c:2b:ca:7e:b7:1c:
         fd:70:6a:db:b4:19:1c:66:f8:c8:66:de:d3:6f:3b:56:dd:98:
         72:34:a5:f5:ef:f0:b3:7b:65:ba:27:69:ce:ed:dc:49:fa:21:
         98:13:05:60:79:24:d6:c4:11:99:8f:b5:94:09:13:1d:60:58:
         cc:92:37:b6:1e:64:df:6b:45:83:28:37:ee:bb:4e:c5:d2:62:
         4d:97:38:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt9ybraGL2moE+dguL0voF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzM5ODhhODRmOWZiYjQxODVlYTRhYzViNzIxODQ1Y2Ey
ODAzN2UwHhcNMjYwMTAyMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODQ1M2U3OTQ0ZTZmYmE4OGU0NjUzNzk0NmQ4ODkxYzRjMTI3NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqoqBOYX/jnu996na238YX4N6mZO
eTE1Zq4sMIXtHiisKKoumvF70zf1GQM0PEb94JQAuVRxT6SRa+NeRs3fIYH4nrag
o3YO8Y65hAdHHZQZmXXQUO21YiNOyJzUPEE/ubf7PdsPujWkzn/eT2lg5sePmnDQ
umGrujSoPLDj4RVDNojH2ofRYYflCwaj74/48/g2k/rbH5tQabj5vGosknSr0Zfs
NfVRBjgRhM9bi9uSjrvkdCs7GvyRP0Q036oJKl74eRmlTppQd9MIdrZGHgN5d0Y+
nffVQDHWgw9GSj0YcNFaJP/XawfY21IbEBshEqcEmXJkceXZqS4uXfqKzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEhFPnlE5vuojkZTeUbYiRxMEncHMB8GA1UdIwQY
MBaAFO3DmIqE+fu0GF6krFtyGEXKKAN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEt
MTBmY2VkNWZkNGVlLzEvU0VVLWVVVG0tNmlPUmxONVJ0aUpIRXdTZHdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hN2M4MTEtZGU1NS00NDE3LWJiMzEtMTBmY2VkNWZkNGVl
LzEvN2NPWWlvVDUtN1FZWHFTc1czSVlSY29vQTM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCX5zYAwQC
ubgUAwQAwm6bMA0GCSqGSIb3DQEBCwUAA4IBAQBA8fix6edB8pmEts+1Jx0fmxDh
Gi+aBrmZ8wxVCsdKEu2AB4HK3P5Bi2hlh9uaLWdtJViTvVMU2Gf3Qx2BQ4xvVzS1
EQPzeK4GbTxUA2r0zf2XpELBgdHSTUfwxZyhbT/MV7vOmxlO5JVPt5c1bFpMhnMP
W+ypHeHieZXh7CAKi1aQwyF/kHdgiugajjaFeNrUHHnSzH7CA9r4Ex5F3BZeRKnW
xLpjLwWaKGhbtiFcK8p+txz9cGrbtBkcZvjIZt7TbztW3ZhyNKX17/Cze2W6J2nO
7dxJ+iGYEwVgeSTWxBGZj7WUCRMdYFjMkje2HmTfa0WDKDfuu07F0mJNlziM
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:32 2026 by rpki-client