This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/eEcQktLlsEWr1Q1sZ7Bgl-t_xfg.roa
File:                     eEcQktLlsEWr1Q1sZ7Bgl-t_xfg.roa (raw, json)
Hash identifier:          3Az08ESnXLCW18L3NJVhsweQ1FstJelwkdv9JOzRZ3Y=
Subject key identifier:   78:47:10:92:D2:E5:B0:45:AB:D5:0D:6C:67:B0:60:97:EB:7F:C5:F8
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       019B7F81346F8BB145B4BD59725F3B5988B9
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/eEcQktLlsEWr1Q1sZ7Bgl-t_xfg.roa
Signing time:             Fri 02 Jan 2026 16:18:52 +0000
ROA not before:           Fri 02 Jan 2026 16:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     400963
IP address blocks:        94.31.13.0/24 maxlen: 24
                          94.31.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:81:34:6f:8b:b1:45:b4:bd:59:72:5f:3b:59:88:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Jan  2 16:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78471092d2e5b045abd50d6c67b06097eb7fc5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:f6:08:51:25:08:49:a6:64:a3:67:d3:3a:
                    37:12:10:86:13:d8:16:a3:90:76:16:50:8b:2e:bd:
                    54:1a:6a:28:1a:d6:3e:d5:a4:bf:66:aa:a1:04:fa:
                    8f:02:e0:4b:3c:4b:10:9f:81:5f:fa:85:d7:ac:30:
                    02:c3:05:ac:8b:91:7b:5a:29:3c:c7:d6:cd:93:9e:
                    83:5d:1e:4b:c5:06:db:1e:28:07:da:7e:3a:06:22:
                    7f:69:b5:91:01:1e:dd:af:82:4c:e2:e0:56:63:ac:
                    d3:57:4e:00:37:cf:6f:05:51:45:84:d4:4c:64:c2:
                    64:50:1e:de:81:00:a0:d6:5c:6d:9e:f8:56:d0:6f:
                    8a:d5:04:97:3b:f0:3d:7a:a6:1d:d0:4e:4e:e9:ad:
                    68:8a:d9:a4:cb:1d:e1:f9:0d:0e:0a:7b:0e:45:6f:
                    2b:af:a6:b8:97:86:21:25:45:c0:d2:31:d7:ed:f9:
                    f1:9c:6b:fe:8e:b4:66:44:27:9c:ea:37:5b:5a:1f:
                    d9:54:6f:e8:ab:d9:0e:b3:1f:3e:4c:1b:58:9c:04:
                    f9:ea:1c:d3:51:f3:91:d1:3a:fc:6b:24:c2:02:06:
                    9e:fa:c8:fe:30:66:ee:55:f0:23:65:21:7c:e6:db:
                    14:95:06:4e:a4:e4:4b:8f:2a:45:05:fe:55:b7:c6:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:47:10:92:D2:E5:B0:45:AB:D5:0D:6C:67:B0:60:97:EB:7F:C5:F8
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/eEcQktLlsEWr1Q1sZ7Bgl-t_xfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.31.13.0/24
                  94.31.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:18:a5:01:0b:3e:3e:91:35:a4:9f:54:c6:3d:46:b5:89:b9:
         b0:97:d8:69:86:43:f2:cc:34:ed:a4:3b:56:71:ed:ba:08:d4:
         51:6a:48:2d:ea:5d:ef:c1:b9:ab:22:9c:5b:a1:22:5f:4d:5b:
         e9:8f:58:ee:7f:7f:7f:62:83:b5:d3:58:a3:b0:8c:7c:fd:5b:
         81:08:de:50:16:bf:49:eb:3f:0b:33:f0:8a:d6:09:a2:be:2d:
         ee:73:70:8e:f9:10:e5:7f:5e:a0:63:fa:0b:9b:f1:90:dd:44:
         a9:fe:86:ca:8e:fe:83:30:df:c5:57:40:af:e1:0d:e5:9c:2e:
         ac:6d:0a:66:99:c4:5e:55:61:a9:67:20:53:4e:cf:30:33:ce:
         85:ca:99:12:83:84:18:2d:e8:b0:19:57:fa:22:74:62:72:a1:
         c4:f4:42:7f:a0:a2:5c:46:80:95:8f:5e:45:4d:da:8d:ac:a7:
         62:d3:5b:30:0b:d4:6d:a8:a2:72:aa:b9:52:84:e8:d9:35:d7:
         0b:3c:82:88:5b:d4:6b:95:b0:0c:d3:7c:6c:97:e8:d2:b8:ff:
         cd:9c:b6:27:59:76:85:73:dd:3b:82:a8:a6:04:6a:24:a0:6d:
         67:c7:70:21:79:09:86:83:61:17:b7:4e:da:d7:96:08:c4:fa:
         3b:f0:8f:d3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt/gTRvi7FFtL1Zcl87WYi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjYwMTAyMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODQ3MTA5MmQyZTViMDQ1YWJkNTBkNmM2N2IwNjA5N2ViN2ZjNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXT2CFElCEmmZKNn0zo3EhCGE9gW
o5B2FlCLLr1UGmooGtY+1aS/ZqqhBPqPAuBLPEsQn4Ff+oXXrDACwwWsi5F7Wik8
x9bNk56DXR5LxQbbHigH2n46BiJ/abWRAR7dr4JM4uBWY6zTV04AN89vBVFFhNRM
ZMJkUB7egQCg1lxtnvhW0G+K1QSXO/A9eqYd0E5O6a1oitmkyx3h+Q0OCnsORW8r
r6a4l4YhJUXA0jHX7fnxnGv+jrRmRCec6jdbWh/ZVG/oq9kOsx8+TBtYnAT56hzT
UfOR0Tr8ayTCAgae+sj+MGbuVfAjZSF85tsUlQZOpORLjypFBf5Vt8bRJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHhHEJLS5bBFq9UNbGewYJfrf8X4MB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvZUVjUWt0TGxzRVdyMVExc1o3QmdsLXRfeGZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXh8NAwQA
Xh81MA0GCSqGSIb3DQEBCwUAA4IBAQBdGKUBCz4+kTWkn1TGPUa1ibmwl9hphkPy
zDTtpDtWce26CNRRakgt6l3vwbmrIpxboSJfTVvpj1juf39/YoO101ijsIx8/VuB
CN5QFr9J6z8LM/CK1gmivi3uc3CO+RDlf16gY/oLm/GQ3USp/obKjv6DMN/FV0Cv
4Q3lnC6sbQpmmcReVWGpZyBTTs8wM86FypkSg4QYLeiwGVf6InRicqHE9EJ/oKJc
RoCVj15FTdqNrKdi01swC9RtqKJyqrlShOjZNdcLPIKIW9RrlbAM03xsl+jSuP/N
nLYnWXaFc907gqimBGokoG1nx3AheQmGg2EXt07a15YIxPo78I/T
-----END CERTIFICATE-----
Generated at Wed Jan 21 03:48:59 2026 by rpki-client