This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa
File:                     eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa (raw, json)
Hash identifier:          FurWUtoK3SJ5oNGdIN9dbo+ONOIK9GXi/NLIt8LbtMY=
Subject key identifier:   79:12:61:EF:73:6C:0A:5E:67:2D:37:0C:F0:BF:96:B6:34:35:8B:C3
Certificate issuer:       /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial:       019B77C67BD1F7D04F6F83AD056F99C0ABE1
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa
Signing time:             Thu 01 Jan 2026 04:17:34 +0000
ROA not before:           Thu 01 Jan 2026 04:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197036
IP address blocks:        178.23.152.0/21 maxlen: 24
                          185.19.240.0/22 maxlen: 24
                          185.228.20.0/22 maxlen: 24
                          195.28.192.0/19 maxlen: 24
                          213.173.48.0/22 maxlen: 24
                          2a02:21e8::/32 maxlen: 32
                          2a02:21e8:71::/48 maxlen: 48
                          2a09:2600::/29 maxlen: 29
                          2a0c:e600::/29 maxlen: 29
                          2a0c:e9c0::/29 maxlen: 29
                          2a0d:d040::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:7b:d1:f7:d0:4f:6f:83:ad:05:6f:99:c0:ab:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
        Validity
            Not Before: Jan  1 04:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=791261ef736c0a5e672d370cf0bf96b634358bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:38:73:e6:e4:cf:69:e8:bd:83:4a:ff:ff:
                    d2:a2:a6:65:af:b6:b5:8b:37:18:a7:f1:c5:3c:6c:
                    52:bd:7f:47:d3:23:cc:ed:e1:5a:61:80:a6:3d:67:
                    b2:8e:d2:cb:8e:54:58:b0:f6:3c:f9:60:1b:6f:a0:
                    7a:27:92:d6:a5:b1:90:b1:3b:49:3c:5a:f7:bd:cc:
                    dc:83:09:44:a1:c3:8b:6d:ed:d9:61:b9:68:6b:a9:
                    d0:ed:2c:f0:29:f8:14:f7:68:60:47:dc:75:d7:52:
                    83:a2:92:df:88:28:66:43:e1:c8:7f:35:25:7e:39:
                    f1:32:1d:a8:9e:02:2f:62:52:d3:cb:3e:5f:92:71:
                    12:9b:ac:68:af:56:e3:75:da:67:14:11:0c:cd:66:
                    f3:ae:84:4a:1b:f0:e0:9e:19:1e:a6:39:a6:81:39:
                    77:59:82:39:5f:a7:31:f3:bb:b2:7f:26:6e:f9:b9:
                    c5:d4:b7:17:55:71:c8:10:92:77:cd:28:6d:fd:dc:
                    72:d5:51:7a:19:fb:30:38:c2:d0:22:ad:ef:99:7e:
                    b0:40:20:76:38:36:48:ae:0e:90:c3:f0:a2:e9:f5:
                    9f:85:34:5a:71:79:8b:64:27:89:05:44:82:d8:57:
                    8b:76:1e:aa:cd:ce:d6:5f:db:95:1b:3a:b8:fb:fa:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:12:61:EF:73:6C:0A:5E:67:2D:37:0C:F0:BF:96:B6:34:35:8B:C3
            X509v3 Authority Key Identifier:
                keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/eRJh73NsCl5nLTcM8L-WtjQ1i8M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.23.152.0/21
                  185.19.240.0/22
                  185.228.20.0/22
                  195.28.192.0/19
                  213.173.48.0/22
                IPv6:
                  2a02:21e8::/32
                  2a09:2600::/29
                  2a0c:e600::/29
                  2a0c:e9c0::/29
                  2a0d:d040::/29

    Signature Algorithm: sha256WithRSAEncryption
         08:40:15:2d:1c:7c:31:ac:6b:4f:f4:ca:8f:a2:df:e3:85:ef:
         da:fc:3e:65:ea:91:6f:1c:2f:29:c3:93:6a:3f:93:ae:92:1f:
         38:9f:ae:cf:77:18:cf:5c:91:95:30:f8:ad:80:b9:14:bf:88:
         2c:c2:a9:4f:6b:78:22:43:fc:69:7f:d3:a4:05:f0:73:f0:2a:
         0d:5a:4c:19:27:b1:9d:4f:6f:37:9d:33:de:6e:d9:37:cb:ed:
         02:c6:5b:50:3b:41:6e:0a:4e:96:f4:ef:36:99:3f:21:bb:65:
         fb:e9:48:9a:11:57:7e:f1:88:77:ca:80:33:00:1e:99:74:d7:
         18:13:d1:1b:8b:d0:37:a4:97:e5:fb:5a:40:8a:2b:f0:9b:4f:
         00:25:6f:9f:e1:67:a1:68:48:9e:7f:e1:70:ae:cb:57:70:95:
         88:f2:1a:65:48:e5:ba:71:0d:a3:b3:96:02:e1:c4:cc:cc:a7:
         6d:b3:d1:60:df:62:cc:b4:1e:be:f9:54:15:f4:63:e5:dd:97:
         7d:00:1f:1b:13:da:be:a8:f0:92:23:f5:4d:19:6f:52:f0:fe:
         f9:65:f5:2b:04:7e:67:8b:be:39:97:3c:22:15:f1:3a:0a:83:
         b4:68:bf:38:b9:cc:b7:df:82:b5:e6:6e:6c:30:30:b6:3a:5a:
         2a:14:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:44 2026 by rpki-client