This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/eApVlYN99h20cM-V2vRnWwFVfZg.roa
File:                     eApVlYN99h20cM-V2vRnWwFVfZg.roa (raw, json)
Hash identifier:          3LvnzYeiweYoZ+sXDbx0U3QDiTakYRb9cR1rmZozUXU=
Subject key identifier:   78:0A:55:95:83:7D:F6:1D:B4:70:CF:95:DA:F4:67:5B:01:55:7D:98
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       019B797EC7EB96AD72D9C8034D9D7B8D26A7
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/eApVlYN99h20cM-V2vRnWwFVfZg.roa
Signing time:             Thu 01 Jan 2026 12:18:30 +0000
ROA not before:           Thu 01 Jan 2026 12:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48678
IP address blocks:        81.18.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:c7:eb:96:ad:72:d9:c8:03:4d:9d:7b:8d:26:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  1 12:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=780a5595837df61db470cf95daf4675b01557d98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:dc:ef:2b:d1:d2:e1:25:71:94:9c:c9:64:
                    21:0d:66:cd:44:b6:ae:78:c2:2d:bd:93:a4:ed:bc:
                    3a:40:b2:3e:1d:7d:48:91:1c:4a:5c:d0:33:cf:03:
                    10:42:81:a2:5f:5d:d8:76:05:23:48:20:31:e2:72:
                    46:7f:5a:88:b2:3b:7a:71:1a:09:6c:39:3b:e5:70:
                    38:9a:f5:c9:37:4e:cd:b0:c4:ec:44:71:d5:1c:00:
                    33:e5:8f:f4:05:26:15:9b:61:9c:73:44:69:07:64:
                    71:c2:73:71:92:7a:2f:1d:4b:23:26:10:37:39:eb:
                    85:a7:ac:a1:23:f3:3b:47:a9:66:9c:0d:96:9f:33:
                    97:c5:49:90:97:3e:a4:cc:ac:c9:f8:ed:03:58:57:
                    82:68:af:98:57:f2:00:b4:b4:b6:52:81:e4:09:73:
                    eb:f4:db:3d:69:9a:39:83:40:4a:7b:ab:96:f9:42:
                    41:2c:20:37:da:9e:d5:d1:cf:36:20:07:99:73:46:
                    30:90:49:ad:3b:7e:f0:67:29:7d:7f:00:78:2c:55:
                    41:e5:12:3c:b5:82:f2:1c:d7:93:71:6c:67:83:c2:
                    24:66:40:f5:08:62:cf:5f:6e:09:a5:7b:bc:96:ef:
                    97:4e:4e:dd:fa:0e:ea:37:7a:a4:af:18:31:fd:cf:
                    96:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0A:55:95:83:7D:F6:1D:B4:70:CF:95:DA:F4:67:5B:01:55:7D:98
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/eApVlYN99h20cM-V2vRnWwFVfZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.18.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:90:df:64:4f:7f:f6:56:a8:11:d2:10:70:6f:82:dd:b1:
         fb:3b:a0:40:58:36:62:0c:6f:7c:3b:31:3d:75:ed:96:5e:e4:
         07:da:b3:ab:30:7e:31:3e:6f:10:b0:63:81:ac:0a:75:93:59:
         e4:f7:9e:10:28:eb:65:c7:c0:8c:de:e3:41:4f:d1:87:7a:44:
         84:f9:22:73:08:9d:8f:ea:09:81:ff:28:07:a0:06:39:05:06:
         8c:a0:56:2a:27:ba:7d:3c:c3:3e:38:5c:57:05:95:db:72:c3:
         09:83:72:27:ae:12:6b:85:cc:51:c1:96:5f:17:4a:99:35:83:
         a2:c8:6e:57:a3:a6:7f:ef:bf:b4:d0:1b:53:d1:71:28:63:7d:
         5b:62:f1:20:c1:af:e0:71:84:02:93:59:81:5a:32:d7:14:9d:
         7f:99:c6:b1:5b:3f:ed:da:6b:8e:da:b7:b8:8c:96:88:15:34:
         4a:be:6a:fc:fa:02:28:2a:b7:21:a9:36:79:ed:a4:5a:43:7e:
         a6:32:a9:2e:70:52:d5:89:35:81:49:3e:d5:9d:7d:16:68:d9:
         16:82:1b:66:43:b5:64:3a:33:cc:7b:0c:69:a0:0b:a1:cd:ae:
         be:d9:03:c6:81:fb:a1:eb:d3:63:cd:84:33:e7:91:1e:cd:7a:
         51:32:79:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 13:52:51 2026 by rpki-client