This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/eYoEpqe4Uv6U3Q-JThdm1cZns_c.roa
File:                     eYoEpqe4Uv6U3Q-JThdm1cZns_c.roa (raw, json)
Hash identifier:          10KRq+2t5E30gi8VhOOLk5+bD9qKlbZmUWl2P2qS7Vw=
Subject key identifier:   79:8A:04:A6:A7:B8:52:FE:94:DD:0F:89:4E:17:66:D5:C6:67:B3:F7
Certificate issuer:       /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial:       019B77C68294C36DA774F2A51064E1FCAC9D
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/eYoEpqe4Uv6U3Q-JThdm1cZns_c.roa
Signing time:             Thu 01 Jan 2026 04:17:36 +0000
ROA not before:           Thu 01 Jan 2026 04:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39098
IP address blocks:        156.10.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:82:94:c3:6d:a7:74:f2:a5:10:64:e1:fc:ac:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
        Validity
            Not Before: Jan  1 04:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=798a04a6a7b852fe94dd0f894e1766d5c667b3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:45:63:2e:39:2d:81:ea:ac:2c:15:14:69:
                    c8:76:24:70:d1:2c:95:b9:a6:46:29:62:f1:6d:ed:
                    94:11:95:ed:cb:b1:fc:59:26:20:a0:c3:45:3a:72:
                    55:fd:53:8d:08:61:fa:f7:e0:40:8b:60:f5:62:be:
                    a8:f6:a7:d2:56:3d:49:ea:cc:d1:47:2c:f3:c4:d1:
                    e1:16:a8:50:26:22:1c:09:eb:c7:6a:90:b0:97:06:
                    17:f4:77:89:a9:fb:3d:97:a2:3f:a8:ab:c2:06:e8:
                    0e:8f:f1:d1:e8:83:72:42:69:88:0b:78:ff:57:0e:
                    85:ca:f6:02:f1:b1:62:99:21:19:10:00:c5:13:3e:
                    21:30:b9:2a:41:53:bf:ad:14:a6:bb:4d:c2:bb:51:
                    a2:2e:00:d9:17:50:ab:77:79:74:5f:2f:36:18:08:
                    5d:e4:32:77:27:83:b6:00:eb:4d:59:68:5c:25:ba:
                    9e:93:93:96:16:4e:e2:42:8b:42:9a:db:6b:f3:96:
                    d3:47:ff:95:39:79:d8:ad:ac:40:de:86:d6:07:18:
                    f6:d1:63:ef:cb:56:ea:1e:88:80:01:3b:33:21:da:
                    6f:85:70:46:1c:58:01:71:56:1a:e4:ae:82:50:e7:
                    02:a7:ce:ea:2a:4b:ab:61:93:25:5a:86:53:c3:68:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8A:04:A6:A7:B8:52:FE:94:DD:0F:89:4E:17:66:D5:C6:67:B3:F7
            X509v3 Authority Key Identifier:
                keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/eYoEpqe4Uv6U3Q-JThdm1cZns_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:0c:c0:93:ab:4c:38:7d:92:26:86:79:15:b9:b2:eb:1b:43:
         e3:2d:80:44:70:84:47:83:51:fb:f5:66:24:f4:a0:79:83:c0:
         e1:de:6d:e5:a6:25:ce:e7:2b:ae:c8:de:91:e2:45:ed:82:1c:
         e1:7b:07:e7:80:8b:49:59:49:3a:06:49:f5:f0:31:af:1a:6c:
         36:19:3d:aa:7d:25:5f:ce:8c:ae:32:0e:4c:00:89:5e:1e:59:
         a5:2b:40:3e:39:47:2f:ab:b5:12:6f:67:cb:85:8d:9c:57:ac:
         66:65:8e:ee:14:03:b7:d2:90:27:06:83:c7:10:91:49:3f:35:
         de:c8:ce:f3:75:5f:b2:41:35:4e:a9:3a:00:98:5b:89:eb:5a:
         b3:52:28:45:26:a9:0d:e1:ec:3c:d9:79:31:11:d1:9f:14:9a:
         d0:8d:cd:c2:12:a2:de:f3:79:99:c0:fc:9b:ea:2d:93:2b:91:
         ad:cd:b2:b8:79:eb:ad:76:eb:ba:fb:bd:cc:a0:57:0c:f5:aa:
         21:3f:9f:66:c5:00:e9:e0:2e:09:d4:71:5b:d4:1c:bf:c1:33:
         95:3f:9b:dd:b7:60:60:5b:59:a0:d3:0d:db:9f:68:2e:ff:bf:
         f0:02:9a:30:57:7d:f5:60:15:fd:de:7a:be:fd:0c:bf:c9:e6:
         e4:33:ce:c8
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZt3xoKUw22ndPKlEGTh/KydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmZmYWE5YjdmY2U0MDgyNzE4MWE1YWEwYWNlZTk5YTQ2
NjkxNTYwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OThhMDRhNmE3Yjg1MmZlOTRkZDBmODk0ZTE3NjZkNWM2NjdiM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtspFYy45LYHqrCwVFGnIdiRw0SyV
uaZGKWLxbe2UEZXty7H8WSYgoMNFOnJV/VONCGH69+BAi2D1Yr6o9qfSVj1J6szR
RyzzxNHhFqhQJiIcCevHapCwlwYX9HeJqfs9l6I/qKvCBugOj/HR6INyQmmIC3j/
Vw6FyvYC8bFimSEZEADFEz4hMLkqQVO/rRSmu03Cu1GiLgDZF1Crd3l0Xy82GAhd
5DJ3J4O2AOtNWWhcJbqek5OWFk7iQotCmttr85bTR/+VOXnYraxA3obWBxj20WPv
y1bqHoiAATszIdpvhXBGHFgBcVYa5K6CUOcCp87qKkurYZMlWoZTw2grFQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFHmKBKanuFL+lN0PiU4XZtXGZ7P3MB8GA1UdIwQY
MBaAFHBv+qm3/OQIJxgaWqCs7pmkZpFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0dfNnFiZjg1QWduR0JwYW9LenVtYVJta1ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yOTY3OGYtYzYwNS00NjU1LTkzNTkt
MTBmZWRjY2QyOTI0LzEvZVlvRXBxZTRVdjZVM1EtSlRoZG0xY1puc19jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8yOTY3OGYtYzYwNS00NjU1LTkzNTktMTBmZWRjY2QyOTI0
LzEvY0dfNnFiZjg1QWduR0JwYW9LenVtYVJta1ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnAowDQYJ
KoZIhvcNAQELBQADggEBAIAMwJOrTDh9kiaGeRW5susbQ+MtgERwhEeDUfv1ZiT0
oHmDwOHebeWmJc7nK67I3pHiRe2CHOF7B+eAi0lZSToGSfXwMa8abDYZPap9JV/O
jK4yDkwAiV4eWaUrQD45Ry+rtRJvZ8uFjZxXrGZlju4UA7fSkCcGg8cQkUk/Nd7I
zvN1X7JBNU6pOgCYW4nrWrNSKEUmqQ3h7DzZeTER0Z8UmtCNzcISot7zeZnA/Jvq
LZMrka3Nsrh5661267r7vcygVwz1qiE/n2bFAOngLgnUcVvUHL/BM5U/m923YGBb
WaDTDdufaC7/v/ACmjBXffVgFf3eer79DL/J5uQzzsg=
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:43:38 2026 by rpki-client