This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/eKGc6DKbOMncZQro-L8ILIR8Mio.roa
File:                     eKGc6DKbOMncZQro-L8ILIR8Mio.roa (raw, json)
Hash identifier:          a/EaLUbWAd/Lvp23z8W0KPeDxVXeYWz3C7Y7jr3ofCk=
Subject key identifier:   78:A1:9C:E8:32:9B:38:C9:DC:65:0A:E8:F8:BF:08:2C:84:7C:32:2A
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019BF9D9F99B7E83BFAEEDDECAA528A8B78C
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/eKGc6DKbOMncZQro-L8ILIR8Mio.roa
Signing time:             Mon 26 Jan 2026 10:29:30 +0000
ROA not before:           Mon 26 Jan 2026 10:29:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9457
IP address blocks:        87.229.25.0/24 maxlen: 24
                          87.229.52.0/24 maxlen: 24
                          87.229.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:d9:f9:9b:7e:83:bf:ae:ed:de:ca:a5:28:a8:b7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jan 26 10:29:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78a19ce8329b38c9dc650ae8f8bf082c847c322a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:3f:31:bf:83:f8:a8:c3:3c:38:2c:c5:cf:
                    6a:8c:23:d4:7e:81:ef:cf:2c:16:a5:27:74:55:e1:
                    27:a8:11:71:89:8b:e5:38:1a:71:8c:4f:4e:40:98:
                    8e:68:67:c2:83:65:df:95:e7:79:8e:fc:cd:5c:43:
                    0c:15:18:56:0c:81:41:15:53:75:62:5b:ed:2c:b3:
                    55:9c:4a:a4:4a:8d:c2:22:66:cd:ef:0f:4d:70:50:
                    26:05:24:6d:28:ef:ec:e4:fd:09:ed:78:7f:a6:ec:
                    ec:2d:bb:e3:24:90:75:19:6c:f4:15:eb:d9:c9:38:
                    a4:f5:95:88:95:51:b5:67:6e:91:28:f5:9c:2f:10:
                    31:8c:67:5b:49:2b:eb:29:ac:4f:38:21:31:5d:09:
                    52:60:8d:98:a9:55:98:a6:6d:78:c3:9f:17:5b:5f:
                    6c:72:3e:fd:10:55:db:11:53:23:1d:3b:18:66:6b:
                    50:17:f8:06:f7:72:6c:64:13:02:61:eb:bb:64:35:
                    b8:06:d9:25:25:5d:31:03:47:bf:81:7b:96:92:97:
                    19:56:60:ad:1e:d5:e3:0f:96:23:24:03:86:69:dd:
                    a9:a8:36:e7:a0:30:f4:79:38:b2:a7:3e:c3:5d:3e:
                    23:eb:4d:d4:8b:5d:37:4e:18:ae:6f:25:10:9e:2b:
                    bc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A1:9C:E8:32:9B:38:C9:DC:65:0A:E8:F8:BF:08:2C:84:7C:32:2A
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/eKGc6DKbOMncZQro-L8ILIR8Mio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.25.0/24
                  87.229.52.0/24
                  87.229.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d3:c5:a3:32:42:ab:2b:07:6e:b4:47:f4:70:c2:4c:3a:fb:
         b3:07:32:59:6d:a9:b4:d0:86:c8:f6:5e:3f:68:2c:9c:23:88:
         05:ef:94:db:92:d1:0f:a9:31:38:bb:33:0f:44:82:4d:c5:b2:
         fb:00:12:17:f9:d0:67:aa:cc:91:f4:b9:02:e8:2a:2e:7d:ef:
         b4:01:96:72:6a:39:35:ba:1f:34:4e:4f:6d:5b:f1:ac:81:c9:
         9c:ce:c1:28:03:3d:75:b4:7b:40:93:63:f8:9c:19:25:9f:1e:
         7a:55:0b:f7:2d:db:c1:8b:c1:e5:e7:d6:3b:de:5b:c1:59:08:
         a0:a3:39:da:c7:81:78:d6:09:66:45:13:30:b1:fa:40:20:ea:
         92:be:c6:f9:d9:76:95:03:dc:18:24:5c:a0:25:62:0b:71:0a:
         72:e2:9c:1d:29:7d:d5:09:5e:b0:a0:58:8c:de:1a:13:c1:98:
         2b:7c:73:3d:4f:c9:6b:cc:27:67:47:10:91:7f:c7:b2:32:15:
         c7:7b:72:ca:fa:8b:b7:4a:a3:a4:8b:1a:a6:57:76:0e:c8:7c:
         f7:60:3f:e8:8c:6f:62:5a:bd:f0:6b:9a:72:d7:22:26:eb:4e:
         ce:43:a8:48:fe:c2:32:93:57:17:cf:a3:2f:42:32:b0:8c:69:
         52:24:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:01:58 2026 by rpki-client