This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/eUlwfQNbP2vIOtwAcyEsR7HEJss.roa
File:                     eUlwfQNbP2vIOtwAcyEsR7HEJss.roa (raw, json)
Hash identifier:          P1z0FJdjv4KMmXfM20mE40d3OdggWf6hJHcQuPfAi3M=
Subject key identifier:   79:49:70:7D:03:5B:3F:6B:C8:3A:DC:00:73:21:2C:47:B1:C4:26:CB
Certificate issuer:       /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial:       019BA2785F2CE95022D3DC47AB5BCC855737
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/eUlwfQNbP2vIOtwAcyEsR7HEJss.roa
Signing time:             Fri 09 Jan 2026 11:15:56 +0000
ROA not before:           Fri 09 Jan 2026 11:15:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42689
IP address blocks:        80.174.113.0/24 maxlen: 24
                          80.174.115.0/24 maxlen: 24
                          80.174.116.0/24 maxlen: 24
                          80.174.119.0/24 maxlen: 24
                          80.174.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 14:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:78:5f:2c:e9:50:22:d3:dc:47:ab:5b:cc:85:57:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
        Validity
            Not Before: Jan  9 11:15:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7949707d035b3f6bc83adc0073212c47b1c426cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:e5:57:e0:f2:31:74:6f:73:df:06:70:4c:
                    54:35:e2:06:43:55:84:21:6a:d5:4c:59:c7:a5:e5:
                    8b:b6:ab:9c:26:c4:44:0e:d9:68:e7:9a:ec:38:03:
                    ab:d0:54:41:9e:c7:26:ef:eb:1b:01:f3:73:9f:b7:
                    91:8b:77:5c:80:ff:14:e2:93:03:4c:76:f8:cf:e8:
                    e5:f7:41:72:e6:00:5d:b3:31:a5:26:13:8d:c6:f4:
                    05:1e:83:47:dd:37:88:5f:92:5c:13:24:af:5b:88:
                    fb:b8:79:7e:8b:72:50:8e:7b:80:6b:ab:1d:9d:ec:
                    f3:9e:f2:b2:49:c1:06:c0:11:7c:44:b8:b0:ce:93:
                    fe:58:9a:d2:33:2b:4f:62:84:5b:c6:ad:7d:29:a9:
                    3c:e2:bb:b1:48:93:ef:52:5b:fa:4b:1b:04:70:22:
                    33:8e:45:82:da:6f:83:1a:cb:22:cd:2c:6c:05:05:
                    21:52:1b:5c:13:f5:a6:82:a0:3d:c7:93:e2:6b:1d:
                    5f:05:01:73:b8:49:d3:58:33:d8:92:de:4a:90:ac:
                    6d:c5:7e:1f:90:dc:f4:3d:fd:bf:22:c4:c8:1e:74:
                    03:cb:95:43:70:af:29:05:12:09:d7:08:3b:52:fe:
                    6c:57:f3:b6:a2:0d:ab:f0:52:8f:51:9f:b5:6e:2a:
                    4e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:70:7D:03:5B:3F:6B:C8:3A:DC:00:73:21:2C:47:B1:C4:26:CB
            X509v3 Authority Key Identifier:
                keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/eUlwfQNbP2vIOtwAcyEsR7HEJss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.174.113.0/24
                  80.174.115.0-80.174.116.255
                  80.174.119.0/24
                  80.174.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:21:0e:f6:1e:86:ef:6b:8c:d0:06:0e:3f:25:54:39:de:99:
         18:18:54:c4:53:78:20:aa:75:36:2b:77:5b:ef:e8:32:bf:9f:
         98:6a:cc:f3:85:de:a3:8c:47:a4:86:2c:f2:79:9a:0a:40:a5:
         c0:32:b0:2f:ff:e7:e9:d2:9b:19:b0:05:8a:6e:0e:6f:5e:81:
         c5:d7:06:08:54:00:a4:fa:8e:34:06:6f:2a:92:86:02:7d:4b:
         70:7f:42:6d:25:2a:7c:15:de:f4:b2:c9:28:a0:86:7a:3f:cc:
         b3:4e:78:4c:7b:1e:ff:00:28:03:28:9d:c7:25:59:39:42:4b:
         41:fb:64:47:14:45:38:15:d8:75:15:c6:b0:8f:8a:03:5f:69:
         2d:7d:ba:3d:81:a3:61:8b:af:69:97:fa:5b:c5:70:26:67:6b:
         80:d1:32:d0:e7:82:ea:cf:f6:4b:2a:f2:0a:c8:cc:0a:eb:65:
         da:c8:2e:7e:5c:c3:79:c4:18:60:07:5d:66:46:23:12:6e:8a:
         3f:39:6e:2e:14:4e:0c:77:6f:d1:a0:8b:5a:29:ce:be:10:e7:
         70:02:f6:5d:1b:7b:d8:b1:4f:c7:b6:c6:1a:02:e4:65:b6:54:
         af:e7:fc:ea:c8:17:e4:77:af:06:dd:28:8e:2e:8d:ee:1d:96:
         7d:ae:6b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:54 2026 by rpki-client