This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/elNM6G6dpmEHLuSUHCZ2S_uUwRw.roa
File:                     elNM6G6dpmEHLuSUHCZ2S_uUwRw.roa (raw, json)
Hash identifier:          ty6P7Tg9xGsXu6Rck5+usg5S6KFjiIRCpar611wI2Uk=
Subject key identifier:   7A:53:4C:E8:6E:9D:A6:61:07:2E:E4:94:1C:26:76:4B:FB:94:C1:1C
Certificate issuer:       /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial:       019AD96FB5E35F33FEF3865620B42762E574
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/elNM6G6dpmEHLuSUHCZ2S_uUwRw.roa
Signing time:             Mon 01 Dec 2025 10:22:48 +0000
ROA not before:           Mon 01 Dec 2025 10:22:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51765
IP address blocks:        94.26.33.0/24 maxlen: 24
                          94.26.34.0/24 maxlen: 24
                          94.26.70.0/24 maxlen: 24
                          94.26.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d9:6f:b5:e3:5f:33:fe:f3:86:56:20:b4:27:62:e5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
        Validity
            Not Before: Dec  1 10:22:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a534ce86e9da661072ee4941c26764bfb94c11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:12:6c:ce:32:00:b8:ff:40:b2:84:f7:14:
                    6d:3f:63:f1:3a:72:09:39:94:34:fd:9a:7c:4d:e5:
                    0b:5c:a8:7e:bb:75:a2:d7:3e:70:87:d4:87:75:73:
                    81:61:95:d1:46:e0:08:af:94:d7:a0:4c:ef:b6:0e:
                    fd:0e:bd:64:bc:9a:b7:0a:6b:ba:ce:28:02:fc:e5:
                    ce:0a:ad:f7:13:cb:02:a5:ad:3f:60:a3:ae:28:ed:
                    94:53:4d:af:73:4c:18:a2:4d:6c:74:76:37:b0:f9:
                    0b:83:21:8e:80:82:47:ab:0d:da:b3:30:b6:de:1b:
                    e3:9d:81:c2:d7:63:a8:ea:70:ee:30:2b:ef:c6:2f:
                    68:c7:e5:ac:70:c1:76:c0:82:d3:f7:58:e7:43:9b:
                    2c:79:ec:94:18:c7:6b:56:49:a7:7a:1b:5a:79:59:
                    56:7a:c5:52:f6:ff:7f:55:5e:8a:63:89:95:3b:cf:
                    07:03:0d:57:0e:ef:06:ae:d2:86:d9:a0:89:8e:7f:
                    a0:ec:b5:f4:1e:cd:79:80:a9:48:01:8c:b1:84:3f:
                    05:3c:8e:56:31:e6:15:16:74:74:78:03:81:ce:7a:
                    ea:f2:24:23:43:8c:6b:7e:06:da:43:49:d6:c4:7b:
                    1a:37:a4:cc:4a:48:3f:e1:a3:92:36:6c:e9:81:ab:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:53:4C:E8:6E:9D:A6:61:07:2E:E4:94:1C:26:76:4B:FB:94:C1:1C
            X509v3 Authority Key Identifier:
                keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/elNM6G6dpmEHLuSUHCZ2S_uUwRw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.26.33.0-94.26.34.255
                  94.26.70.0/24
                  94.26.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:df:7f:eb:c2:c0:db:6d:42:78:e6:56:a2:f0:a5:60:fd:67:
         64:3d:1c:04:2d:bd:4d:8e:df:1a:e7:aa:5d:be:48:eb:4f:4e:
         30:28:a8:4a:9b:12:d5:bd:a3:e5:8f:6f:e6:20:67:09:e6:6f:
         d6:c6:a5:ed:05:8a:72:2b:34:9b:f9:ee:40:19:cb:61:6e:74:
         59:e8:79:19:8b:02:53:9f:af:0e:e9:b5:d3:92:d8:61:0c:3e:
         59:d6:e6:18:f9:63:61:c4:7e:cf:43:1f:0e:41:49:41:36:f7:
         c1:35:dd:9e:94:2b:be:69:16:28:16:13:3c:86:79:33:5a:1d:
         df:e6:e7:e6:1d:5e:ec:2a:70:04:2a:f1:69:bc:3f:a8:8e:49:
         10:97:9f:54:1a:14:bf:92:ac:69:08:dd:31:f1:1a:4a:b0:fd:
         3d:2b:63:e4:dc:36:25:24:07:d8:02:19:6b:e5:51:00:91:81:
         4b:7e:d2:c9:34:e2:40:47:06:8d:a7:de:f2:64:71:75:e6:d7:
         9c:46:31:e0:5c:6b:c0:e5:dc:13:04:02:59:21:7b:77:26:82:
         9e:6a:21:86:7f:99:61:cd:f5:11:3f:5f:62:04:88:12:22:a0:
         98:61:9d:87:63:56:55:37:ac:d2:29:1a:b7:d4:65:12:31:7c:
         31:32:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:48:14 2025 by rpki-client