This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EIzTw546AijLugfy7SUrbXCZrhI.roa
File:                     EIzTw546AijLugfy7SUrbXCZrhI.roa (raw, json)
Hash identifier:          bhQWssA6f/y6TGTZl6FaCqwcG1dy8XrxyrdV5VpM640=
Subject key identifier:   10:8C:D3:C3:9E:3A:02:28:CB:BA:07:F2:ED:25:2B:6D:70:99:AE:12
Certificate issuer:       /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial:       019B7E38A49D8D1AF3F6591DC41ECC4F2797
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EIzTw546AijLugfy7SUrbXCZrhI.roa
Signing time:             Fri 02 Jan 2026 10:19:59 +0000
ROA not before:           Fri 02 Jan 2026 10:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6939
IP address blocks:        77.47.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:a4:9d:8d:1a:f3:f6:59:1d:c4:1e:cc:4f:27:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19426325acb8ce609a686fa655b058968809b346
        Validity
            Not Before: Jan  2 10:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=108cd3c39e3a0228cbba07f2ed252b6d7099ae12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:c8:75:0f:23:e2:2a:af:b7:64:18:fd:c8:
                    5e:d5:60:a0:af:c5:d6:93:fe:37:dc:7e:14:77:d8:
                    23:52:57:6e:aa:ce:96:aa:40:53:43:58:5f:34:94:
                    22:2f:90:4a:7d:e3:a8:96:a2:06:1e:eb:d6:4e:e0:
                    2a:c4:60:3f:04:d1:12:1c:0c:b9:65:25:4a:7d:ab:
                    86:09:39:48:a8:e8:29:59:be:86:3f:d8:83:e3:aa:
                    44:ae:19:ab:4c:1c:f7:c8:79:0f:9d:f7:31:c8:8a:
                    30:c7:9e:94:fc:43:7d:f2:64:0c:37:2c:44:d3:cd:
                    08:e7:92:ee:e1:2c:16:0b:78:04:ed:08:15:02:f9:
                    d3:30:c8:b4:4b:e5:ce:9f:54:aa:bd:05:c3:fc:79:
                    4b:9e:83:d9:42:86:c0:d2:07:ba:7e:96:89:aa:c5:
                    a5:0f:45:5e:c9:fb:ef:d5:4e:3b:27:95:aa:16:3e:
                    e5:27:14:ae:52:18:11:56:04:42:e5:2e:5e:67:3c:
                    2c:ea:df:dc:79:d9:eb:92:1a:6a:0e:80:e6:e0:1c:
                    5d:91:84:e4:ae:43:dc:80:c7:6a:d7:e3:27:fe:a5:
                    c9:28:87:b0:80:bc:e8:df:3f:ef:55:62:ca:e5:da:
                    a5:e7:49:76:05:d0:b2:c0:1a:92:63:14:ea:c8:a2:
                    36:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8C:D3:C3:9E:3A:02:28:CB:BA:07:F2:ED:25:2B:6D:70:99:AE:12
            X509v3 Authority Key Identifier:
                keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EIzTw546AijLugfy7SUrbXCZrhI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.47.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:50:8f:47:98:17:27:33:45:d0:1c:eb:40:d9:07:b6:84:21:
         17:e0:3e:21:e0:53:5b:e2:85:de:15:6e:5a:37:a8:e4:f6:12:
         51:2d:db:52:85:88:f0:cc:8d:7f:e7:3e:1e:39:f0:cb:55:69:
         5e:e5:6d:44:c8:c7:73:29:53:82:8b:4d:54:10:12:c3:65:47:
         fb:1f:40:d2:63:43:15:32:c8:83:5c:d4:d1:a5:99:20:ba:09:
         fd:ec:88:08:f8:ba:0e:4d:21:be:87:22:77:cd:b6:b5:76:af:
         02:4b:1b:0f:fd:1f:9b:2f:fd:bf:2e:f1:df:92:fa:6b:f0:9a:
         33:51:00:d0:d5:e7:45:32:f1:63:b2:95:c9:f3:15:37:c2:a3:
         e7:0a:83:f1:40:35:11:83:c5:e9:d1:9b:cb:8a:bb:dd:c2:8d:
         41:16:b1:e2:6d:ee:3f:73:79:3d:41:db:9a:b7:7c:3d:15:82:
         09:2a:22:3f:d8:22:87:74:b3:48:ff:a8:80:7c:8d:66:97:c0:
         d7:0a:aa:50:b3:d0:28:7d:ae:bb:af:d8:37:34:68:5b:51:be:
         4d:04:c1:79:dc:7c:3e:4a:d2:cc:11:06:26:88:9a:4e:94:60:
         e0:cd:f3:03:8b:5a:23:12:4b:f2:11:14:5c:a6:92:06:d6:84:
         90:10:fd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 04:59:36 2026 by rpki-client