This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/eIvGRKEJzXb2weR4zx6UQcOzf-I.roa
File:                     eIvGRKEJzXb2weR4zx6UQcOzf-I.roa (raw, json)
Hash identifier:          fXtGDiQR6bCST/6YzQ1DTyETQIkxGKJAAeEFWx1ditk=
Subject key identifier:   78:8B:C6:44:A1:09:CD:76:F6:C1:E4:78:CF:1E:94:41:C3:B3:7F:E2
Certificate issuer:       /CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
Certificate serial:       019B7E38E9C76C938B2E3A90F4ABC419A93C
Authority key identifier: 13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/eIvGRKEJzXb2weR4zx6UQcOzf-I.roa
Signing time:             Fri 02 Jan 2026 10:20:17 +0000
ROA not before:           Fri 02 Jan 2026 10:20:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206195
IP address blocks:        45.15.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:e9:c7:6c:93:8b:2e:3a:90:f4:ab:c4:19:a9:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139602ef760adc0a5b7a48583cfbf9b60fcb7130
        Validity
            Not Before: Jan  2 10:20:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=788bc644a109cd76f6c1e478cf1e9441c3b37fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:9c:d2:06:d4:99:d7:f8:f3:2e:f3:d9:0a:
                    23:a4:1b:08:e7:05:6d:04:00:f3:3f:ea:a7:1e:d4:
                    95:eb:b1:df:db:eb:f7:3e:a9:b6:ff:25:5a:4b:76:
                    70:0d:a8:0a:1b:92:23:05:65:6e:3b:d1:5f:fe:a1:
                    80:66:4e:0f:98:cb:82:e0:a8:82:d5:16:05:bc:a4:
                    a5:f6:76:3f:c6:3b:bf:58:6c:2b:66:86:81:e6:36:
                    6b:78:42:70:bd:0e:0c:98:f2:01:70:cf:d9:94:d5:
                    26:89:ea:0b:4a:d8:2c:7a:79:d5:ad:76:7f:98:10:
                    5d:77:0e:20:50:f2:ba:20:f2:0f:df:1a:30:d6:ef:
                    98:02:85:a3:0f:fd:3a:a9:d1:ff:6b:00:93:04:c8:
                    6e:1d:5c:f3:eb:5a:cb:a9:27:de:ea:88:d6:14:83:
                    dc:0a:d9:68:11:98:de:80:79:62:43:3c:3b:01:85:
                    87:12:14:a2:07:b7:03:71:18:e9:de:7b:7f:49:8e:
                    3c:6f:b2:63:8d:1d:65:b9:e5:1a:a9:77:6b:55:96:
                    ef:76:5b:0b:f2:39:f7:09:df:9a:e8:ab:40:d8:97:
                    52:84:76:89:bf:b4:a0:59:f2:57:3e:c2:8e:36:ca:
                    08:7a:e4:ee:1a:03:5e:2f:83:96:03:87:63:ca:19:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:C6:44:A1:09:CD:76:F6:C1:E4:78:CF:1E:94:41:C3:B3:7F:E2
            X509v3 Authority Key Identifier:
                keyid:13:96:02:EF:76:0A:DC:0A:5B:7A:48:58:3C:FB:F9:B6:0F:CB:71:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5YC73YK3ApbekhYPPv5tg_LcTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/eIvGRKEJzXb2weR4zx6UQcOzf-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6558bc-7d3a-4f6f-b73a-62a3562c72ba/1/E5YC73YK3ApbekhYPPv5tg_LcTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:1f:38:a4:24:2f:f2:e0:c9:1e:4d:50:af:7f:21:2c:fa:a8:
         f2:fd:e8:e7:71:d6:ca:77:46:47:7c:58:d0:dc:29:9b:1c:d6:
         7d:41:da:29:fc:fd:31:b5:77:be:07:8d:41:84:bd:ed:53:d1:
         67:b9:88:c4:1d:a1:5c:e3:5d:33:1e:64:6f:c0:80:7a:d2:aa:
         7c:c4:02:51:cc:53:5d:c7:2e:6a:cb:8e:8e:3a:14:f7:90:7f:
         56:cc:39:0e:a0:28:f3:02:2f:dd:1e:88:f0:3a:ce:78:b9:1e:
         2b:59:1a:00:f7:5a:f0:1b:4a:3d:2b:1b:2e:db:42:b8:f0:fc:
         6d:05:c2:1e:ea:8e:35:94:5e:ff:90:97:4d:a5:99:7b:b8:77:
         cf:ba:db:ed:92:0f:72:a5:33:5a:7b:7c:c0:99:57:34:62:b3:
         34:13:f9:64:43:68:d3:ca:c4:c7:cc:f7:e6:2d:96:60:6a:2f:
         44:22:13:0e:d2:61:61:44:39:d6:fe:9e:a4:ce:e1:b9:18:99:
         99:b4:0a:e0:82:c4:13:04:a0:88:30:61:89:c8:42:ec:76:52:
         fa:e6:fd:ac:61:7e:a9:c3:48:68:5c:86:15:56:3f:21:fa:2e:
         59:78:6b:98:28:fc:1a:48:f9:74:19:ad:a1:ee:d6:6b:38:17:
         8b:fb:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:01 2026 by rpki-client