This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eiZGJhelH3QdV13_6QhA8Dy7nhs.roa
File:                     eiZGJhelH3QdV13_6QhA8Dy7nhs.roa (raw, json)
Hash identifier:          z+LjFhLUqYE/3j5sJmP9RnoEupVDF/TraSWXsXFwC0Y=
Subject key identifier:   7A:26:46:26:17:A5:1F:74:1D:57:5D:FF:E9:08:40:F0:3C:BB:9E:1B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019B7D5CB4166456E2BCAB794FAA3CF6C170
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eiZGJhelH3QdV13_6QhA8Dy7nhs.roa
Signing time:             Fri 02 Jan 2026 06:19:45 +0000
ROA not before:           Fri 02 Jan 2026 06:19:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49195
IP address blocks:        2a0e:b107:1c50::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 17:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:b4:16:64:56:e2:bc:ab:79:4f:aa:3c:f6:c1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 06:19:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a26462617a51f741d575dffe90840f03cbb9e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:21:a6:dd:d8:e2:fc:f4:7c:72:2d:f5:8b:
                    80:a8:b6:27:a8:ce:9e:02:42:aa:86:91:c9:f4:0d:
                    ad:ea:3f:9f:5f:7b:a2:d2:c0:b8:b5:52:16:79:cd:
                    25:d2:f1:d0:47:ea:08:6a:3b:d8:4e:62:68:cc:fa:
                    21:42:f3:24:9d:67:f6:ef:53:1b:8a:61:74:9e:9f:
                    6f:3b:72:3c:ea:d8:f5:87:28:ca:4b:14:eb:65:33:
                    b1:f1:59:9f:1f:54:29:df:a1:11:c8:5c:ac:01:e5:
                    cb:56:a0:8e:19:e4:09:02:99:8c:a4:e4:c2:2b:62:
                    3f:14:c2:06:1e:c9:d5:2b:aa:8f:8f:c8:3c:f1:05:
                    d8:9b:7d:58:3f:ef:6e:ba:a9:80:dd:bf:7d:fa:fe:
                    10:de:ca:f8:50:bd:82:b6:dc:03:52:81:3b:6b:8d:
                    12:4d:bd:43:fe:89:26:3a:b7:f0:5d:f5:73:ee:65:
                    91:7a:23:12:ff:1a:fe:a0:c6:83:c8:9b:07:95:49:
                    17:11:6c:e1:91:33:ee:55:2a:35:fa:73:b2:f1:5e:
                    1f:57:ad:83:6d:7d:a0:6e:56:d8:16:40:5d:a6:98:
                    9f:bb:d6:c6:77:3f:f3:16:e5:07:33:c8:5c:f6:63:
                    c3:46:44:1d:8a:4f:41:6a:74:6c:6d:3e:1b:5f:9e:
                    bb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:26:46:26:17:A5:1F:74:1D:57:5D:FF:E9:08:40:F0:3C:BB:9E:1B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eiZGJhelH3QdV13_6QhA8Dy7nhs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1c50::/44

    Signature Algorithm: sha256WithRSAEncryption
         92:7a:2e:9e:52:2e:15:50:1b:32:22:92:d6:f0:18:29:2d:03:
         da:b1:3a:cf:fd:ec:a8:ac:fe:33:d5:ea:bc:ee:c0:3e:a6:ef:
         9b:61:dc:f3:9d:6f:e6:15:90:a2:cc:ca:44:28:b2:87:8b:ba:
         6e:8c:14:27:c1:7d:0d:8c:75:d4:63:aa:83:b1:db:5e:f7:29:
         86:ab:7c:de:8a:39:60:43:c8:f3:b8:b9:63:3a:cf:c5:d6:6b:
         96:27:46:7c:9d:75:2e:4d:82:1f:c0:47:65:63:99:ee:25:c7:
         ab:48:a6:ea:f0:8a:cd:76:e2:4b:22:97:91:5a:5e:c0:32:82:
         7d:5f:a1:17:54:78:3f:34:bc:3c:71:e0:0b:f5:a1:a3:e1:93:
         19:61:1c:9c:e7:23:82:e1:51:0c:56:09:7c:aa:74:5b:95:eb:
         2d:de:f0:ac:d3:61:02:29:1b:b9:e5:a7:e7:ef:0f:9a:75:f8:
         16:52:33:2d:bb:f2:75:25:37:af:db:39:c5:6d:ee:4c:ce:9e:
         3b:69:2b:6b:61:df:b6:47:5b:ac:73:ab:21:dd:6d:3a:c9:73:
         71:f7:1c:ba:46:1e:3c:ba:ae:a7:73:8c:c1:de:fc:ea:97:d8:
         6f:dd:1c:04:bd:25:ae:69:5e:68:2e:a0:ee:b3:78:f8:f8:6d:
         7f:52:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 02:18:49 2026 by rpki-client