This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/EG39daLgR9HPpte0Senzayfzwe0.roa
File:                     EG39daLgR9HPpte0Senzayfzwe0.roa (raw, json)
Hash identifier:          hM5eTq2EhN4ghAJTozyTzIBAYCIenfrKw142ndvb2MM=
Subject key identifier:   10:6D:FD:75:A2:E0:47:D1:CF:A6:D7:B4:49:E9:F3:6B:27:F3:C1:ED
Certificate issuer:       /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial:       019B7F14FC498AA82C3380F06C5C02348813
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/EG39daLgR9HPpte0Senzayfzwe0.roa
Signing time:             Fri 02 Jan 2026 14:20:40 +0000
ROA not before:           Fri 02 Jan 2026 14:20:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211450
IP address blocks:        193.36.90.0/24 maxlen: 24
                          2a10:e340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 13:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:fc:49:8a:a8:2c:33:80:f0:6c:5c:02:34:88:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
        Validity
            Not Before: Jan  2 14:20:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=106dfd75a2e047d1cfa6d7b449e9f36b27f3c1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:6f:d6:ef:76:14:e5:d7:a2:e4:72:34:16:
                    51:85:6b:7b:12:0f:f4:8a:e3:bf:10:b9:73:6e:17:
                    18:ce:8d:f8:74:78:54:bb:59:84:67:2c:84:4e:ec:
                    f5:d0:8a:2b:67:65:da:69:bc:f9:c3:83:18:c0:1a:
                    52:84:44:a0:fa:03:40:85:4b:bd:62:8e:ee:61:4f:
                    cb:b6:44:24:e2:61:5b:1d:af:02:a9:42:3c:71:2a:
                    4c:ed:56:0d:1a:40:da:87:c8:bc:e1:7b:06:26:86:
                    cc:62:31:97:e7:29:06:af:ff:51:f1:9e:5d:32:ea:
                    d1:d1:d9:15:68:17:89:74:5e:04:aa:6a:84:dd:04:
                    6e:1c:3e:7c:1d:7e:d1:4e:e5:23:8b:30:c7:d6:d2:
                    16:7f:21:2a:a1:fa:15:05:14:a1:82:a0:10:0f:57:
                    46:3a:29:55:cb:fe:ad:e6:c4:b8:47:a0:67:28:e4:
                    bd:f5:bf:df:71:32:a6:77:c4:c6:e7:6d:a2:6e:cf:
                    e4:31:b6:fa:12:34:bc:5b:04:99:3a:3e:05:55:f1:
                    3b:de:18:32:f9:c7:fc:6a:91:07:4b:25:52:5d:70:
                    9a:cc:45:ff:7e:4b:5a:f8:44:2c:4e:5d:2d:6d:14:
                    00:45:da:8b:ab:af:a0:67:2f:c5:63:fa:e8:78:d9:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6D:FD:75:A2:E0:47:D1:CF:A6:D7:B4:49:E9:F3:6B:27:F3:C1:ED
            X509v3 Authority Key Identifier:
                keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/EG39daLgR9HPpte0Senzayfzwe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.90.0/24
                IPv6:
                  2a10:e340::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:36:b2:83:c1:45:8b:60:17:3b:f8:89:e1:51:59:6b:b5:c0:
         c5:db:9e:56:73:7b:3d:9d:02:be:bf:87:a7:38:49:f7:e1:e7:
         4b:c8:92:25:22:d2:a7:f2:0d:6c:9d:0e:24:2a:91:1f:bd:f4:
         c9:10:9c:9e:21:59:ce:f2:8c:f2:1d:a6:35:6e:ee:1f:96:54:
         44:b4:40:9d:70:67:16:08:36:66:fa:62:fe:0f:b2:d2:41:0e:
         01:d3:30:d2:dd:df:c2:26:92:25:34:3d:4f:e8:7a:8e:bd:93:
         62:69:4b:e8:4f:66:ce:68:85:c2:a7:84:ce:6c:e7:d8:30:6a:
         5a:5b:ad:c2:6f:0f:14:e9:ee:75:01:4c:ff:49:f4:c3:6e:66:
         cb:a7:ab:09:cd:e3:85:94:9c:ac:6e:55:e3:68:2d:a5:bb:c3:
         5a:6b:af:11:6b:f3:b5:59:96:e7:13:ce:de:73:8a:72:db:d6:
         41:95:72:49:24:59:b4:31:4d:ea:56:38:08:ad:e2:b0:3c:7e:
         a4:53:eb:0d:ec:14:2b:78:d4:bb:57:f1:56:b2:4f:e0:b3:dd:
         fc:ec:7c:82:5d:d1:10:9f:dc:18:e6:18:42:48:df:72:fa:0f:
         94:5e:2f:05:e8:16:04:5d:83:90:c6:2c:64:c1:1d:96:19:27:
         b5:ab:cf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:32:31 2026 by rpki-client