This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/eMn4Dhzi3vsnxDaXvqtSJ647mS4.roa
File:                     eMn4Dhzi3vsnxDaXvqtSJ647mS4.roa (raw, json)
Hash identifier:          8XPeruqk0Ks7s7qqt4MOXbhkUHn6HBOHWGHISYIOYWg=
Subject key identifier:   78:C9:F8:0E:1C:E2:DE:FB:27:C4:36:97:BE:AB:52:27:AE:3B:99:2E
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       019B7B35FA14A86F275CA51845C932E1AFF9
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/eMn4Dhzi3vsnxDaXvqtSJ647mS4.roa
Signing time:             Thu 01 Jan 2026 20:18:13 +0000
ROA not before:           Thu 01 Jan 2026 20:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41957
IP address blocks:        176.56.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Jan 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:fa:14:a8:6f:27:5c:a5:18:45:c9:32:e1:af:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Jan  1 20:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78c9f80e1ce2defb27c43697beab5227ae3b992e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:10:06:c1:26:bb:f8:2b:59:5a:95:8a:4f:ea:
                    de:31:25:82:03:f9:f6:a4:27:47:84:c1:3a:f3:db:
                    7a:0a:37:a5:73:6e:8f:ed:bd:c3:6f:03:d7:3e:48:
                    ac:94:93:f7:b3:b7:34:22:0a:de:b8:27:cd:d9:eb:
                    44:b2:3c:1c:a4:3f:f5:5c:31:f9:11:fd:92:b2:9d:
                    85:d2:f8:9b:1e:ce:35:cc:ec:24:97:bd:30:4b:e4:
                    30:0f:f4:91:8c:6b:38:b6:05:7c:61:d6:1d:2c:3b:
                    3e:b2:55:9d:97:14:f0:63:8b:c9:89:de:cd:d2:e9:
                    98:42:57:44:e8:cd:c8:eb:9f:d3:88:26:91:19:eb:
                    92:cb:fd:5b:68:2b:c6:91:9f:22:a1:4b:11:9e:c6:
                    9b:ea:d8:0b:d1:bd:3b:3d:90:3b:7a:a6:51:2e:5f:
                    54:53:63:9d:2b:32:3c:34:64:90:28:0f:51:64:f8:
                    2d:25:e1:20:70:66:58:2e:3f:40:d5:3e:f7:97:3c:
                    9d:4f:ba:9b:c8:b2:0c:0d:6f:3b:ce:e6:b3:11:47:
                    37:59:b2:7c:1f:30:ef:13:1e:bc:ef:23:33:d4:76:
                    84:82:a0:11:c7:c5:21:c7:b5:61:db:7e:7c:3b:34:
                    29:a9:3f:96:02:2a:f1:43:60:b4:a4:6d:06:e4:a7:
                    b8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C9:F8:0E:1C:E2:DE:FB:27:C4:36:97:BE:AB:52:27:AE:3B:99:2E
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/eMn4Dhzi3vsnxDaXvqtSJ647mS4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.56.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:6e:b7:69:23:17:30:af:ed:94:6b:f1:20:ba:58:5b:a6:11:
         f7:7f:9b:f2:3c:83:82:6c:7d:76:d4:4e:d2:3e:69:7b:5e:03:
         59:c7:7f:61:33:bf:3f:df:a3:b6:65:07:f1:56:62:80:9d:5c:
         67:9e:61:0b:a3:d5:6a:b0:5b:c5:4c:8b:9d:5f:90:8c:6b:19:
         bd:76:83:22:e0:29:19:24:55:f6:0d:ee:3a:11:4c:9e:7d:81:
         54:c7:77:d5:7f:2d:4f:b0:e3:e8:a0:e0:1e:c7:01:cc:52:a8:
         52:91:7b:65:99:92:a2:f1:9f:27:54:4d:c3:c4:d9:e1:c0:15:
         ae:24:f1:46:d7:d4:0c:34:44:5e:27:ba:f6:29:6c:e2:73:a7:
         fe:cb:9b:07:e6:84:1b:e4:0b:5f:41:ea:1e:ce:d5:d4:3b:de:
         dc:07:9b:bd:e1:6c:11:6f:14:c6:ea:b3:2f:9e:95:2c:35:55:
         68:d7:dc:3f:64:37:ca:5a:03:ce:f8:6b:9d:84:39:29:57:96:
         93:ad:dd:ee:7f:b3:65:43:f5:f1:b5:b7:a5:c5:15:15:a2:70:
         f4:22:4a:f6:6e:a7:c5:36:38:7c:4a:69:6b:5c:b5:0d:5e:5b:
         6a:b8:6c:46:2e:dc:81:57:30:1c:25:45:27:da:6f:f6:18:5d:
         76:0b:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 15 13:16:59 2026 by rpki-client