This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa
File:                     eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa (raw, json)
Hash identifier:          BfuIVukiDtzihzfQ4gw6mZ6lR5/EYYRABfHkY7DcUFE=
Subject key identifier:   78:19:7C:7E:31:03:8B:F6:F3:33:DA:38:7B:9C:4A:21:D4:7C:71:AE
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019B7DCA2D7C9475673F7CD7BDDD675E1F41
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa
Signing time:             Fri 02 Jan 2026 08:19:20 +0000
ROA not before:           Fri 02 Jan 2026 08:19:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209371
IP address blocks:        193.9.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:2d:7c:94:75:67:3f:7c:d7:bd:dd:67:5e:1f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jan  2 08:19:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78197c7e31038bf6f333da387b9c4a21d47c71ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:8b:65:4e:60:b1:5c:56:6a:67:06:fd:eb:
                    bf:fc:01:25:dc:5e:e3:7e:b4:99:0b:11:14:38:6d:
                    1e:73:33:63:72:a3:a7:d9:86:b4:10:fd:82:3a:95:
                    06:a0:5b:7e:98:df:54:59:12:99:02:ef:67:83:c5:
                    25:91:08:0c:dd:80:d5:4a:96:db:b2:84:a2:b0:eb:
                    6b:90:14:c1:84:e0:ea:db:93:07:8d:d3:f3:a1:cc:
                    65:29:f3:8a:b8:2b:1b:9b:1e:06:7d:6b:e9:0c:c0:
                    83:2d:6b:e0:1e:bf:94:ea:02:ff:9e:82:80:f5:9f:
                    d9:81:3a:44:c3:b1:23:36:5b:d9:4e:14:44:06:87:
                    ad:7b:5d:ce:7b:4c:ee:95:eb:26:33:89:fa:4d:61:
                    6e:93:08:fd:3b:ea:5e:2a:38:09:9a:45:e2:bf:72:
                    9a:a3:82:f0:65:eb:d8:54:c4:3d:ad:8e:dc:4e:03:
                    16:b7:f8:b9:a4:e2:17:c3:21:ed:bc:3a:bb:25:d0:
                    6e:21:8e:5b:39:61:24:da:6e:8b:60:8e:c5:de:39:
                    c8:0c:93:8f:be:e0:dc:09:67:ab:f6:cd:fd:60:22:
                    98:92:5f:a8:e9:c1:0b:cd:7e:61:1c:9f:63:4e:0f:
                    08:fc:d0:e0:03:5a:4d:87:de:df:45:b2:25:11:7f:
                    ad:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:19:7C:7E:31:03:8B:F6:F3:33:DA:38:7B:9C:4A:21:D4:7C:71:AE
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/eBl8fjEDi_bzM9o4e5xKIdR8ca4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.9.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9d:78:ed:00:4f:d8:47:12:b8:2e:d7:54:4f:da:56:09:d8:
         04:a2:b9:02:fe:aa:cf:4c:f5:c3:76:c7:73:ad:d0:25:6a:55:
         c3:8e:14:f6:dc:04:6e:47:f4:0a:16:8e:a5:ba:be:c7:67:4e:
         8e:c1:ed:02:07:30:ef:32:bf:e4:31:79:9b:58:94:c0:c4:0d:
         83:70:c7:07:81:2c:6b:91:2a:fa:37:ee:8c:9f:bb:a7:5e:49:
         c4:ca:ca:35:98:a7:8c:a6:d8:e9:7e:b1:62:37:41:a0:f6:f1:
         7b:23:cf:c0:8b:47:fb:6a:ee:c7:ec:8f:60:ae:c7:31:80:0d:
         16:9b:33:b1:a9:61:7d:da:0e:61:6e:8a:ac:d5:53:7b:f6:da:
         52:e2:4a:5b:6d:28:51:a2:62:e2:44:78:22:9a:33:7a:d4:82:
         d9:93:74:a1:2a:5a:58:c7:7e:55:65:c6:35:06:47:0b:e8:37:
         74:6d:b8:8a:32:90:6d:72:f6:60:e3:01:cb:a5:a4:16:ef:60:
         79:26:dd:2c:5e:92:33:e7:89:05:f9:4f:e4:43:5d:8b:ac:23:
         f6:69:81:58:d6:38:c2:0d:c1:bb:22:af:cd:f4:bb:d7:54:c6:
         4b:93:0a:33:87:2a:a8:4d:71:78:eb:3f:7f:1c:b5:cc:ae:b8:
         ec:5f:3c:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9yi18lHVnP3zXvd1nXh9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYwMTAyMDgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODE5N2M3ZTMxMDM4YmY2ZjMzM2RhMzg3YjljNGEyMWQ0N2M3MWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0mLZU5gsVxWamcG/eu//AEl3F7j
frSZCxEUOG0eczNjcqOn2Ya0EP2COpUGoFt+mN9UWRKZAu9ng8UlkQgM3YDVSpbb
soSisOtrkBTBhODq25MHjdPzocxlKfOKuCsbmx4GfWvpDMCDLWvgHr+U6gL/noKA
9Z/ZgTpEw7EjNlvZThREBoete13Oe0zulesmM4n6TWFukwj9O+peKjgJmkXiv3Ka
o4LwZevYVMQ9rY7cTgMWt/i5pOIXwyHtvDq7JdBuIY5bOWEk2m6LYI7F3jnIDJOP
vuDcCWer9s39YCKYkl+o6cELzX5hHJ9jTg8I/NDgA1pNh97fRbIlEX+tqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgZfH4xA4v28zPaOHucSiHUfHGuMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvZUJsOGZqRURpX2J6TTlvNGU1eEtJZFI4Y2E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQk4MA0G
CSqGSIb3DQEBCwUAA4IBAQBsnXjtAE/YRxK4LtdUT9pWCdgEorkC/qrPTPXDdsdz
rdAlalXDjhT23ARuR/QKFo6lur7HZ06Owe0CBzDvMr/kMXmbWJTAxA2DcMcHgSxr
kSr6N+6Mn7unXknEyso1mKeMptjpfrFiN0Gg9vF7I8/Ai0f7au7H7I9grscxgA0W
mzOxqWF92g5hboqs1VN79tpS4kpbbShRomLiRHgimjN61ILZk3ShKlpYx35VZcY1
BkcL6Dd0bbiKMpBtcvZg4wHLpaQW72B5Jt0sXpIz54kF+U/kQ12LrCP2aYFY1jjC
DcG7Iq/N9LvXVMZLkwozhyqoTXF46z9/HLXMrrjsXzwb
-----END CERTIFICATE-----
Generated at Mon Jan 19 21:22:46 2026 by rpki-client