This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/ezjL16dggZPPKxT8c5ZTz4CAcj0.roa
File:                     ezjL16dggZPPKxT8c5ZTz4CAcj0.roa (raw, json)
Hash identifier:          1cWlyvLQe8uN9nQ0JnxAhB7NOox/3OfJkDuBy1sf4Fo=
Subject key identifier:   7B:38:CB:D7:A7:60:81:93:CF:2B:14:FC:73:96:53:CF:80:80:72:3D
Certificate issuer:       /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial:       019B79ECECD3A57D26B7C879E12FE7F8D61F
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/ezjL16dggZPPKxT8c5ZTz4CAcj0.roa
Signing time:             Thu 01 Jan 2026 14:18:48 +0000
ROA not before:           Thu 01 Jan 2026 14:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44697
IP address blocks:        91.199.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:ec:d3:a5:7d:26:b7:c8:79:e1:2f:e7:f8:d6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
        Validity
            Not Before: Jan  1 14:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b38cbd7a7608193cf2b14fc739653cf8080723d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:aa:6b:fa:90:c5:b5:33:52:17:f0:ff:4c:
                    16:78:d2:b0:fc:94:10:9e:50:da:e7:59:ee:ab:c9:
                    dd:e1:9a:d9:60:a7:8f:31:c7:98:9c:73:1c:38:b9:
                    6e:df:eb:d7:39:39:b9:6e:2c:5d:5f:bd:5d:46:81:
                    c2:13:e2:c7:5f:78:0b:8b:34:a6:b0:e8:67:f9:3f:
                    2d:ce:28:c2:49:93:45:28:ce:a1:f4:ad:fd:ac:67:
                    2b:09:34:65:3a:cc:f8:0e:48:00:b3:e4:fc:05:40:
                    f0:bc:91:cb:df:05:75:d7:1d:e1:c6:e9:51:02:5c:
                    87:fc:a9:5f:d0:05:b4:95:1c:7b:0c:e0:db:9e:1d:
                    c8:61:19:f4:48:af:8b:fc:51:11:51:b4:1a:d3:cf:
                    d8:23:6a:d5:12:fd:af:66:7e:4c:92:d3:56:27:cf:
                    e7:2a:4b:89:be:8c:4b:e6:ed:f7:9c:d0:84:c5:be:
                    cd:53:02:a5:b0:1f:ef:ed:e8:d0:71:b2:ac:8e:31:
                    ac:d8:19:86:21:af:7a:6c:6f:20:05:b7:b0:6a:1e:
                    26:17:71:04:44:7d:1a:14:64:58:63:76:82:04:c6:
                    15:62:2e:d8:dd:94:4e:60:f1:ee:77:ab:82:4c:81:
                    4b:3d:bc:7a:7d:15:58:32:d2:8f:34:52:52:96:50:
                    85:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:38:CB:D7:A7:60:81:93:CF:2B:14:FC:73:96:53:CF:80:80:72:3D
            X509v3 Authority Key Identifier:
                keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/ezjL16dggZPPKxT8c5ZTz4CAcj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:6c:cb:21:46:d7:4d:30:4f:eb:79:95:ad:27:78:d9:e7:2c:
         0f:d5:e9:96:57:1b:33:88:3e:35:9f:eb:54:94:84:15:a4:c3:
         37:4d:7d:a9:12:5c:c0:33:2a:51:5a:6a:89:0c:65:2e:57:9c:
         6a:48:ea:f3:3c:c3:a7:3b:e4:c4:71:fa:43:5d:4c:0b:63:9c:
         8b:ff:92:05:6a:35:82:60:7a:cd:d8:31:b8:da:98:bf:62:78:
         11:42:cf:1d:18:47:99:09:b6:5b:40:22:16:3d:e2:3c:90:bb:
         6c:d4:78:df:62:1e:d5:94:9f:af:57:43:01:70:94:f3:76:a6:
         ea:0a:b0:bb:97:af:69:cb:55:82:90:24:44:42:d2:a0:b0:17:
         1a:28:03:7f:ab:5d:fe:ed:62:19:6b:87:f8:a2:75:06:4e:ed:
         7e:93:36:eb:7f:e5:b2:27:9a:d3:e0:3c:93:af:b3:57:08:7d:
         8d:99:33:07:50:8e:27:0d:df:97:85:4b:4c:1f:af:3e:11:b3:
         5c:82:d3:fc:2d:47:25:03:8f:a1:b3:62:d8:c8:17:39:e6:8b:
         fc:89:df:65:47:c8:8d:88:e5:95:f7:70:63:80:9d:58:fd:bd:
         8e:db:ac:e1:17:f2:29:5d:6a:6d:8c:76:d3:41:00:95:7c:d2:
         d5:ad:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:11 2026 by rpki-client