This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EUUBPDPg51aenWKswUGZm6l6f-A.roa
File:                     EUUBPDPg51aenWKswUGZm6l6f-A.roa (raw, json)
Hash identifier:          WD8wU4yP9oGMFy7pyuhICSYqUVqpIZYptC6u653Ksno=
Subject key identifier:   11:45:01:3C:33:E0:E7:56:9E:9D:62:AC:C1:41:99:9B:A9:7A:7F:E0
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       019B7B35FE1524EE52454D4452D76548C95B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EUUBPDPg51aenWKswUGZm6l6f-A.roa
Signing time:             Thu 01 Jan 2026 20:18:14 +0000
ROA not before:           Thu 01 Jan 2026 20:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        45.135.238.0/24 maxlen: 24
                          185.235.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:fe:15:24:ee:52:45:4d:44:52:d7:65:48:c9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  1 20:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1145013c33e0e7569e9d62acc141999ba97a7fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:4f:19:87:79:bb:07:10:86:4a:30:e2:c2:
                    07:94:af:0f:41:f0:d6:ad:98:ff:c5:eb:bc:d8:ab:
                    03:9a:32:24:ce:4a:05:6f:f4:2b:20:9e:0e:f8:2b:
                    55:a9:47:8d:87:ab:98:9e:27:0f:d6:04:c4:ca:03:
                    83:60:ca:e9:00:58:f2:79:f7:fa:ba:42:ad:c2:c9:
                    d7:60:41:53:b7:8d:ec:2c:44:92:76:64:e9:3a:43:
                    07:7b:b0:6d:ac:9b:0a:5d:65:fa:71:45:f5:67:a4:
                    e9:fa:34:ed:a3:75:d8:e2:b9:78:55:1d:b8:49:f4:
                    3e:0d:5b:ac:8d:12:a1:98:23:dc:fa:6e:da:cc:f7:
                    84:48:16:80:0e:16:95:ec:df:0d:16:ec:28:f9:a4:
                    80:44:42:1c:98:b5:d4:00:74:1f:0c:33:d2:5a:f1:
                    b8:5a:a6:52:76:36:24:2f:d0:68:c6:0a:4b:6f:f7:
                    32:e5:83:35:aa:b8:11:29:b0:e1:e8:3b:a3:52:7b:
                    84:fb:33:61:8e:c5:fa:20:f1:f9:54:b5:d9:c8:c9:
                    8f:a0:bb:95:1e:cd:60:27:32:72:53:50:88:28:db:
                    88:3c:aa:29:f0:10:05:da:4e:ff:4e:72:0d:5c:8e:
                    83:41:d1:0b:5f:06:a9:09:e3:66:e7:aa:c2:9f:ea:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:01:3C:33:E0:E7:56:9E:9D:62:AC:C1:41:99:9B:A9:7A:7F:E0
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/EUUBPDPg51aenWKswUGZm6l6f-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.238.0/24
                  185.235.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b4:61:cd:4a:0c:55:a6:b4:55:ba:5a:be:8c:dc:79:f4:11:
         5b:76:e7:72:52:81:b5:00:ca:3c:da:48:ba:d0:4b:bb:b7:5a:
         9e:c6:d8:14:06:9c:a7:2d:11:d5:e7:cc:92:58:4b:38:79:5e:
         df:ab:44:80:95:60:27:76:08:b4:07:82:7a:78:bd:47:bc:44:
         e1:5f:1e:fe:7b:d7:2a:ae:b3:ab:95:7d:f7:f8:38:c0:95:c5:
         93:22:d8:c3:7e:62:28:ac:66:14:1c:a5:c9:b5:f7:71:f0:98:
         85:e3:15:31:78:ec:59:d2:bd:0f:b9:7c:b7:e6:b6:90:3e:23:
         d8:6b:94:1f:38:dc:46:17:c1:7b:0a:15:03:b2:bb:8d:52:46:
         51:56:9b:20:00:f3:2e:3b:0c:af:8d:24:7f:c2:c6:c9:e3:57:
         0b:0a:1a:93:60:de:18:e9:8e:56:59:87:b6:b0:37:8d:c0:fc:
         cf:cc:da:b5:89:63:d9:19:f1:36:e1:49:b3:74:01:61:42:df:
         9b:43:7c:83:b5:39:9f:da:b3:a6:6d:b1:85:7c:bc:00:f0:fb:
         58:9d:8c:39:2a:70:93:8c:82:da:af:9b:2a:7c:f1:ca:e4:e1:
         6d:e5:3a:7a:67:e3:32:71:41:ce:f2:2f:85:2a:09:cd:a8:c4:
         e2:77:f2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:18 2026 by rpki-client