This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/euynJTb4DQRxhsqGUuIVKvMePvE.roa
File:                     euynJTb4DQRxhsqGUuIVKvMePvE.roa (raw, json)
Hash identifier:          ApLmaeR70nQaei0kFKLHQPB8kjQglplGX2OnJJHWzlA=
Subject key identifier:   7A:EC:A7:25:36:F8:0D:04:71:86:CA:86:52:E2:15:2A:F3:1E:3E:F1
Certificate issuer:       /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial:       019B7BA3ACE19C78D14C7BDBF8F7D88498A1
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/euynJTb4DQRxhsqGUuIVKvMePvE.roa
Signing time:             Thu 01 Jan 2026 22:18:02 +0000
ROA not before:           Thu 01 Jan 2026 22:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21859
IP address blocks:        193.239.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 07:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:ac:e1:9c:78:d1:4c:7b:db:f8:f7:d8:84:98:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
        Validity
            Not Before: Jan  1 22:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7aeca72536f80d047186ca8652e2152af31e3ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:2b:47:1d:34:b8:ca:1d:a7:6c:db:1b:e3:
                    99:16:4d:36:07:d1:ca:12:c2:e9:32:4e:96:f1:2b:
                    02:b6:a0:7d:3c:f4:f9:8c:ab:51:8e:9c:94:85:72:
                    88:ae:5b:05:ae:1b:40:9a:8f:54:09:6e:53:3c:08:
                    da:18:36:07:7c:a0:a8:06:32:32:3f:89:34:0f:83:
                    ff:93:b3:48:bf:c3:3f:3e:44:df:68:f1:28:fa:c4:
                    2e:47:ad:aa:35:16:6e:94:b1:80:35:06:c0:25:e1:
                    c7:4b:dc:44:86:b0:6a:39:47:cb:fb:2c:b4:14:53:
                    cd:65:b6:b7:a3:42:88:7c:76:9e:3b:4d:e4:5f:34:
                    d5:28:7b:e6:d6:ae:b0:9b:f6:7c:34:7b:14:1d:f9:
                    56:7e:52:a6:56:94:6f:d3:67:87:ed:18:76:08:3b:
                    39:ad:fd:e7:d3:53:7d:ec:de:c3:79:9c:24:e2:b6:
                    a2:d2:4b:36:f2:28:5b:cf:c5:d9:62:3d:39:b1:f5:
                    7e:93:aa:d6:10:37:51:ca:09:60:69:0b:34:5b:d7:
                    93:da:74:73:22:a5:6d:72:1b:c2:8e:12:b3:e8:e5:
                    fd:b9:01:35:59:1d:18:73:12:32:32:8c:fc:9f:9e:
                    3c:04:69:cd:93:6f:54:93:72:e2:52:fd:f3:85:6d:
                    85:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EC:A7:25:36:F8:0D:04:71:86:CA:86:52:E2:15:2A:F3:1E:3E:F1
            X509v3 Authority Key Identifier:
                keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/euynJTb4DQRxhsqGUuIVKvMePvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:33:c0:74:18:8e:42:da:a8:4b:f4:9f:d9:a1:50:07:75:7e:
         b7:81:1a:ca:f9:cc:07:6b:63:4b:09:2b:a1:60:3f:2a:95:6d:
         7e:62:62:32:dd:e5:b7:d2:ee:87:c1:c8:21:15:e2:99:a9:13:
         c6:40:14:7e:ee:40:3c:ee:bb:71:a6:21:ca:fc:d1:da:29:2d:
         a6:e6:e5:45:b9:1a:52:14:4c:29:04:29:59:d8:f3:17:87:2b:
         1d:d8:39:8e:4b:ac:ef:4b:a0:97:45:69:30:70:89:30:2e:7f:
         7c:3c:6a:4a:0d:50:bd:39:fe:d3:7e:0a:61:94:34:13:e1:ca:
         a6:52:8a:56:fd:66:54:54:6e:9e:5b:b7:ca:02:fc:28:04:4a:
         c1:ff:9d:39:a9:23:29:b5:60:b6:9f:f7:05:c1:a3:70:00:59:
         fb:e4:8f:38:48:6f:08:a1:d7:22:98:00:36:bd:bc:5c:3e:fa:
         e1:8e:62:e3:7d:33:7d:22:55:94:e8:21:f1:1c:4f:4a:e3:7f:
         9c:7a:74:4f:e4:e0:56:5e:0d:24:af:99:81:8c:ab:7c:88:66:
         7f:6d:8c:75:0d:69:9c:1d:17:ab:cf:56:d5:ac:b7:7e:23:ff:
         3b:ae:22:c9:0a:ca:93:7e:41:e0:64:b3:eb:4a:8a:c2:25:83:
         bb:fa:d1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 17:25:06 2026 by rpki-client