This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa
File:                     e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa (raw, json)
Hash identifier:          DQ/1l9qivav8e0VLlV11+1m2yKf9RukIg46+miwwKSI=
Subject key identifier:   7B:77:9E:A9:3D:DC:0B:00:C2:03:55:9B:6B:E7:03:B5:DB:E3:3C:BB
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       019B7FF18F9C4E11CAF5B9DD9BE8FCEC528F
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa
Signing time:             Fri 02 Jan 2026 18:21:35 +0000
ROA not before:           Fri 02 Jan 2026 18:21:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34837
IP address blocks:        46.38.129.0/24 maxlen: 24
                          46.38.131.0/24 maxlen: 24
                          212.16.64.0/19 maxlen: 19
                          212.16.64.0/24 maxlen: 24
                          212.16.65.0/24 maxlen: 24
                          212.16.66.0/24 maxlen: 24
                          212.16.67.0/24 maxlen: 24
                          212.16.68.0/24 maxlen: 24
                          212.16.75.0/24 maxlen: 24
                          212.16.76.0/24 maxlen: 24
                          212.16.82.0/24 maxlen: 24
                          212.16.83.0/24 maxlen: 24
                          212.16.88.0/24 maxlen: 24
                          212.16.90.0/24 maxlen: 24
                          212.16.91.0/24 maxlen: 24
                          212.80.0.0/19 maxlen: 19
                          212.80.1.0/24 maxlen: 24
                          212.80.3.0/24 maxlen: 24
                          212.80.5.0/24 maxlen: 24
                          212.80.12.0/24 maxlen: 24
                          212.80.13.0/24 maxlen: 24
                          212.80.14.0/24 maxlen: 24
                          212.80.15.0/24 maxlen: 24
                          212.80.16.0/24 maxlen: 24
                          212.80.28.0/24 maxlen: 24
                          212.80.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:8f:9c:4e:11:ca:f5:b9:dd:9b:e8:fc:ec:52:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Jan  2 18:21:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b779ea93ddc0b00c203559b6be703b5dbe33cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:5b:34:25:93:01:d5:63:d1:1b:c9:7d:d5:
                    0c:c0:68:44:f5:b4:49:26:d3:42:ed:24:9b:ba:ce:
                    b0:9b:de:d1:f0:d5:3c:60:5d:b7:77:b1:1c:93:4d:
                    80:dd:82:65:e8:e1:87:9e:6c:83:8b:40:7b:80:6d:
                    c0:f5:13:41:4a:52:e9:b2:c1:30:e7:71:d4:7b:bc:
                    25:a8:7a:2a:80:91:aa:6a:3e:46:1a:e4:88:fa:c5:
                    0f:49:0c:4c:e0:97:7e:92:67:97:36:01:ad:30:1f:
                    e8:f0:8d:06:54:7c:9b:75:18:c5:de:3b:f7:4f:5d:
                    b3:7b:9b:bf:d5:8e:3a:5d:82:1f:be:08:63:cc:6d:
                    6d:1d:4c:b2:66:8d:e0:27:1e:9c:2b:86:bd:73:8b:
                    4c:0d:f1:29:3c:be:e8:1e:19:c0:d3:ab:65:6f:28:
                    8b:ba:96:8a:bf:4e:ff:13:7d:8a:1f:20:d4:d4:6a:
                    f4:f7:a0:2e:bb:c4:49:cb:56:5e:7b:d2:d8:7a:dd:
                    c6:aa:02:08:5b:65:a1:39:72:74:52:fd:ad:2c:0c:
                    34:2c:05:8c:af:41:ff:17:39:24:18:ed:6f:c0:c1:
                    bf:8c:4a:2a:0f:b4:fe:c6:df:32:b1:03:08:4d:d2:
                    aa:03:a7:d4:81:75:8a:82:07:18:55:a3:34:b7:bc:
                    5c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:77:9E:A9:3D:DC:0B:00:C2:03:55:9B:6B:E7:03:B5:DB:E3:3C:BB
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/e3eeqT3cCwDCA1Wba-cDtdvjPLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.38.129.0/24
                  46.38.131.0/24
                  212.16.64.0/19
                  212.80.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:cc:79:c5:4a:73:a9:5a:fc:27:f4:75:64:4e:d7:5e:3d:
         6a:91:73:15:2a:72:ec:37:e5:94:33:b1:4b:93:8f:f6:2f:2f:
         43:c5:e9:67:cc:c9:cc:61:02:82:d6:24:a4:9d:4b:13:e4:d1:
         a7:01:8b:eb:6c:df:83:f6:aa:64:48:2f:fd:dc:e5:45:ec:e8:
         00:92:07:fd:5d:64:4d:e4:73:6e:c5:7e:4c:b4:27:bd:fb:21:
         61:5b:ae:d7:02:70:6e:53:ae:46:65:02:7c:0e:bb:38:3c:04:
         4e:35:1f:8e:45:5b:3c:44:17:41:3b:48:57:b3:0c:5c:01:65:
         2b:fe:fc:d3:29:79:69:5e:e1:f0:f1:bc:bd:62:ab:7f:18:40:
         01:93:de:bd:81:d3:5a:15:f3:44:33:4f:36:b0:3e:d2:93:e3:
         bb:37:92:78:33:11:08:83:ab:11:8e:61:1c:0b:f5:2e:cb:43:
         ce:a7:11:4f:54:58:b2:0e:aa:f2:aa:49:a3:fc:dd:42:34:40:
         08:77:47:f8:81:d0:bc:06:95:f3:59:31:fc:d1:33:a6:af:8e:
         24:bb:4d:b0:86:5a:da:04:c1:8c:db:4c:f6:ba:b6:12:9e:d7:
         fa:af:5b:92:61:d9:54:7e:b8:56:4d:22:89:d9:1e:2e:03:0c:
         fe:f5:e5:d0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZt/8Y+cThHK9bndm+j87FKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjYwMTAyMTgyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Yjc3OWVhOTNkZGMwYjAwYzIwMzU1OWI2YmU3MDNiNWRiZTMzY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFZbNCWTAdVj0RvJfdUMwGhE9bRJ
JtNC7SSbus6wm97R8NU8YF23d7Eck02A3YJl6OGHnmyDi0B7gG3A9RNBSlLpssEw
53HUe7wlqHoqgJGqaj5GGuSI+sUPSQxM4Jd+kmeXNgGtMB/o8I0GVHybdRjF3jv3
T12ze5u/1Y46XYIfvghjzG1tHUyyZo3gJx6cK4a9c4tMDfEpPL7oHhnA06tlbyiL
upaKv07/E32KHyDU1Gr096Auu8RJy1Zee9LYet3GqgIIW2WhOXJ0Uv2tLAw0LAWM
r0H/FzkkGO1vwMG/jEoqD7T+xt8ysQMITdKqA6fUgXWKggcYVaM0t7xckQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHt3nqk93AsAwgNVm2vnA7Xb4zy7MB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvZTNlZXFUM2NDd0RDQTFXYmEtY0R0ZHZqUExzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALiaBAwQA
LiaDAwQF1BBAAwQF1FAAMA0GCSqGSIb3DQEBCwUAA4IBAQCgYsx5xUpzqVr8J/R1
ZE7XXj1qkXMVKnLsN+WUM7FLk4/2Ly9DxelnzMnMYQKC1iSknUsT5NGnAYvrbN+D
9qpkSC/93OVF7OgAkgf9XWRN5HNuxX5MtCe9+yFhW67XAnBuU65GZQJ8Drs4PARO
NR+ORVs8RBdBO0hXswxcAWUr/vzTKXlpXuHw8by9Yqt/GEABk969gdNaFfNEM082
sD7Sk+O7N5J4MxEIg6sRjmEcC/Uuy0POpxFPVFiyDqryqkmj/N1CNEAId0f4gdC8
BpXzWTH80TOmr44ku02whlraBMGM20z2urYSntf6r1uSYdlUfrhWTSKJ2R4uAwz+
9eXQ
-----END CERTIFICATE-----
Generated at Wed Jan 21 04:03:11 2026 by rpki-client