This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/eBOwN9hT4zejM0AoU4iSaIEjz9s.roa
File:                     eBOwN9hT4zejM0AoU4iSaIEjz9s.roa (raw, json)
Hash identifier:          fKITe0XHXVAprxbNBR9M8OQ9t4GQsguRxsVQ9HUhdnE=
Subject key identifier:   78:13:B0:37:D8:53:E3:37:A3:33:40:28:53:88:92:68:81:23:CF:DB
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       019B7C1284FCFFD2D4A7E3FAD1EF84C8BEB9
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/eBOwN9hT4zejM0AoU4iSaIEjz9s.roa
Signing time:             Fri 02 Jan 2026 00:19:07 +0000
ROA not before:           Fri 02 Jan 2026 00:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49993
IP address blocks:        87.251.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:84:fc:ff:d2:d4:a7:e3:fa:d1:ef:84:c8:be:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jan  2 00:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7813b037d853e337a3334028538892688123cfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:ae:92:51:b1:29:7a:b8:3e:ce:c8:b7:28:
                    a2:9f:90:d6:95:b0:de:fa:a0:3e:5b:4d:bf:68:36:
                    1b:0d:25:cb:ef:a2:0b:6a:28:46:b2:e0:79:e3:4b:
                    fc:26:ce:07:64:c4:ea:cd:49:54:bd:13:a3:66:7c:
                    e2:97:1d:01:8b:32:8a:2e:56:e3:80:d0:36:d3:ee:
                    50:34:8f:f0:d1:8c:c4:f2:64:72:ff:5c:7d:87:6b:
                    73:13:8b:65:b6:28:45:84:2c:19:63:ea:82:05:16:
                    18:5f:a9:f6:85:19:70:7e:9a:0f:d5:17:a9:71:40:
                    a5:8f:50:b0:92:86:ca:d1:2a:7c:d6:ac:45:a8:6a:
                    77:c8:91:27:ee:24:ca:51:24:aa:3d:d9:b3:8c:9f:
                    b2:79:e6:ba:f6:a9:71:ca:4d:2c:00:1d:4c:a6:26:
                    39:30:73:f6:a7:14:16:b8:e9:d0:32:17:73:1f:dc:
                    f6:77:60:0e:43:62:88:6a:36:b8:31:c0:4b:73:c9:
                    c6:47:b2:ad:df:e7:2d:51:1b:33:48:fc:41:cc:43:
                    24:86:6e:5f:0e:5f:84:d7:a8:8e:91:41:b0:fa:bd:
                    dc:f9:f4:4d:a0:88:fc:77:78:87:9e:37:68:68:e7:
                    7c:20:b1:dd:27:e9:46:04:63:45:2d:e2:3a:4d:5e:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:B0:37:D8:53:E3:37:A3:33:40:28:53:88:92:68:81:23:CF:DB
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/eBOwN9hT4zejM0AoU4iSaIEjz9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.251.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:eb:39:5a:13:c2:cc:a4:7d:66:d7:44:e7:21:49:cf:3c:f2:
         b7:2a:81:c8:2d:62:3b:4e:29:e3:16:40:35:9c:75:73:8a:eb:
         7b:2e:e8:75:d5:cf:00:1a:6f:27:86:fd:a4:8e:41:b5:e4:79:
         16:87:9d:e1:ec:e6:b1:ef:e0:f9:be:21:1d:2e:18:83:05:b3:
         9e:0c:b8:67:d6:a8:c7:a5:26:63:da:00:2e:3d:93:f3:f1:0c:
         b2:a8:a5:5d:c3:14:fd:47:3c:36:6d:5c:a1:9c:4a:c8:20:ca:
         5f:af:5d:b9:4d:0c:b9:e1:0f:32:49:5a:fd:6a:8a:bc:83:37:
         dd:89:0f:78:9d:9e:78:eb:82:b9:0b:8a:38:14:2a:1d:b2:3f:
         be:21:ae:e8:d5:2a:4c:5f:5a:9c:7c:9f:4d:bf:39:ad:ad:d6:
         d0:17:e1:f5:21:6b:d5:22:65:1e:69:49:9e:23:8e:ce:cb:35:
         98:b0:26:2e:a1:87:46:e2:c4:bf:9c:e3:8a:0f:de:cc:15:81:
         5b:3b:8d:71:12:2c:0e:c3:20:6f:ca:6e:51:c5:4c:b2:ec:e3:
         35:c6:49:70:c7:07:54:1d:b3:eb:01:d9:b2:12:fa:a6:40:4c:
         c2:dd:25:b7:2d:0f:50:47:db:67:9d:7b:78:23:fb:a4:31:4f:
         d5:50:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:28 2026 by rpki-client