This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/e1jQd52gcA6yXLGjiuknB8JEOwo.roa
File:                     e1jQd52gcA6yXLGjiuknB8JEOwo.roa (raw, json)
Hash identifier:          XJANgx0hjgIGKYki1Gh7IwsZwbbuxC+ryDXFWZXhAuQ=
Subject key identifier:   7B:58:D0:77:9D:A0:70:0E:B2:5C:B1:A3:8A:E9:27:07:C2:44:3B:0A
Certificate issuer:       /CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
Certificate serial:       019B7B3678FA0872CB84590489A5E730D74F
Authority key identifier: 11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/e1jQd52gcA6yXLGjiuknB8JEOwo.roa
Signing time:             Thu 01 Jan 2026 20:18:46 +0000
ROA not before:           Thu 01 Jan 2026 20:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57395
IP address blocks:        176.124.36.0/24 maxlen: 24
                          176.124.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:78:fa:08:72:cb:84:59:04:89:a5:e7:30:d7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1130a1d5e5c0901d19b4b707a73d17cae0e3b660
        Validity
            Not Before: Jan  1 20:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b58d0779da0700eb25cb1a38ae92707c2443b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:e9:fc:05:9c:9b:10:52:c4:50:ee:87:13:
                    8c:27:8e:66:14:cc:d2:67:bc:20:77:48:82:ab:ae:
                    d2:1f:c1:36:32:38:3b:18:02:ea:5b:6a:59:ab:d1:
                    07:30:d5:ec:85:0e:39:16:75:16:4d:00:f2:f6:12:
                    78:1a:ac:6c:1f:d5:62:47:4b:73:8e:82:39:91:5f:
                    3d:98:ad:d5:95:54:07:83:2d:e8:70:61:60:76:a2:
                    58:dd:62:5a:06:2c:2f:40:29:61:01:0e:a0:60:18:
                    f2:e4:c8:29:04:86:92:e4:f4:9b:5a:f1:82:28:f1:
                    19:52:61:f9:92:1e:93:59:90:09:cd:60:05:fb:10:
                    ab:d2:2a:a2:c1:fe:c7:89:03:7c:de:5e:8f:12:16:
                    8c:2d:2e:43:90:72:c1:b4:6e:f7:f1:dc:10:c8:68:
                    a7:63:e9:61:a9:4b:bc:7b:a3:fb:48:23:34:35:78:
                    5e:6e:30:f7:56:fe:95:57:5c:c8:bc:8f:7b:2f:a0:
                    3e:bf:29:63:e0:23:49:bc:be:b4:b2:7f:88:bb:a0:
                    61:98:ec:47:a5:f2:f5:f2:7a:f1:c9:c7:a6:45:b9:
                    d3:06:04:c5:6b:22:38:2c:48:5f:9c:02:03:81:12:
                    eb:2f:51:57:6c:cd:55:aa:2e:9a:ac:d4:29:8a:bd:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:58:D0:77:9D:A0:70:0E:B2:5C:B1:A3:8A:E9:27:07:C2:44:3B:0A
            X509v3 Authority Key Identifier:
                keyid:11:30:A1:D5:E5:C0:90:1D:19:B4:B7:07:A7:3D:17:CA:E0:E3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/e1jQd52gcA6yXLGjiuknB8JEOwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/17fbf9-09ae-46a1-8f64-6d419b717d0a/1/ETCh1eXAkB0ZtLcHpz0XyuDjtmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.124.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:8b:38:b3:e1:8f:ea:63:76:3f:85:07:ed:37:64:f5:c4:
         62:3b:7d:77:5e:1c:13:58:e9:1d:90:a4:91:c5:f2:4d:c8:bd:
         b9:12:e6:58:aa:72:11:3d:75:60:52:ab:03:c3:40:bf:a4:1f:
         16:0c:ad:03:a6:63:e3:6c:17:96:93:26:19:73:9d:39:bc:16:
         5c:16:2d:a2:71:45:1a:99:00:f9:62:be:7e:0b:a5:a6:6c:b2:
         07:a0:9b:94:68:75:47:1d:4d:1f:ae:8e:4e:27:e7:57:5e:a2:
         3c:2c:db:b0:c4:a9:d0:97:57:59:34:86:18:1f:0e:a6:6c:9e:
         e8:f5:d3:8e:c1:c7:eb:ef:78:60:a2:59:44:33:ed:5e:5a:35:
         6a:96:69:df:0f:43:33:af:9a:89:f2:c1:32:4d:8d:b7:80:13:
         7c:85:c9:f1:54:d1:28:7a:4b:b1:53:34:89:a5:78:df:08:06:
         4d:19:11:cd:75:3b:a9:c4:e6:eb:5b:86:49:b4:00:21:26:d9:
         bf:b1:bc:8f:eb:ca:7d:6b:b6:e0:dc:65:f7:9d:93:55:a8:33:
         0d:4d:c0:27:0d:00:2f:7f:0a:3a:eb:1d:1a:59:f2:21:db:f7:
         0a:59:f9:a5:9d:d4:cd:e7:dc:d9:25:e4:1d:4c:4e:82:da:a8:
         a5:81:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:58:00 2026 by rpki-client