This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/EACCpkJUe6xsP4_nCRlj7NVGBLc.roa
File:                     EACCpkJUe6xsP4_nCRlj7NVGBLc.roa (raw, json)
Hash identifier:          cbbyB5SvosFwqsVBAsWwnY8rZFf7hG0lJZ2R8+Yzr20=
Subject key identifier:   10:00:82:A6:42:54:7B:AC:6C:3F:8F:E7:09:19:63:EC:D5:46:04:B7
Certificate issuer:       /CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
Certificate serial:       019B7CED9A83F3DEDA5B8C472BD9EBFF2878
Authority key identifier: 1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/EACCpkJUe6xsP4_nCRlj7NVGBLc.roa
Signing time:             Fri 02 Jan 2026 04:18:24 +0000
ROA not before:           Fri 02 Jan 2026 04:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212185
IP address blocks:        76.74.180.0/23 maxlen: 23
                          76.74.182.0/23 maxlen: 23
                          2a07:3044:1::/48 maxlen: 48
                          2a07:3044:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:9a:83:f3:de:da:5b:8c:47:2b:d9:eb:ff:28:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d05dc740f6f4bb5bc4b03387e9b47530850743c
        Validity
            Not Before: Jan  2 04:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=100082a642547bac6c3f8fe7091963ecd54604b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:d2:8c:a4:ae:39:d9:46:d8:38:e5:98:ec:
                    a9:60:b3:4e:f7:fb:14:c3:b6:c6:6a:2b:72:61:02:
                    a9:32:5a:0c:0f:6a:db:56:ed:28:1d:b9:e2:29:7b:
                    55:e7:7d:54:8c:37:c3:8f:2f:64:eb:bd:d4:df:43:
                    81:f6:c2:3a:f9:ca:14:1c:ad:5c:85:b9:93:8f:23:
                    b2:1f:27:66:91:cc:cf:61:30:34:94:18:08:c8:34:
                    87:e6:bd:cf:85:94:05:5b:80:0d:65:c0:bb:af:39:
                    a9:6b:93:4c:4c:45:e5:ab:55:60:4c:0d:2a:a1:f5:
                    70:62:64:b2:49:85:f1:ee:9e:0e:99:f9:7a:b7:0b:
                    a0:76:07:fd:ac:d5:01:18:5d:55:39:4f:6c:4e:c5:
                    43:43:09:33:3b:50:1a:4a:03:d9:3e:81:92:5b:72:
                    ab:14:89:13:1f:ef:e6:0a:3f:85:05:e6:de:89:61:
                    20:e9:55:c5:6c:2a:04:33:8a:c5:ac:bc:e0:7e:8f:
                    f9:95:47:e8:2c:fb:43:f5:58:06:33:48:1a:54:04:
                    10:4f:be:f2:b4:3c:b1:39:b6:6e:33:70:1b:9b:90:
                    82:10:fa:3e:4d:3f:89:68:97:56:5f:8c:39:b5:c4:
                    39:4a:15:3f:d9:a5:79:21:14:67:21:d6:37:e3:41:
                    a9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:82:A6:42:54:7B:AC:6C:3F:8F:E7:09:19:63:EC:D5:46:04:B7
            X509v3 Authority Key Identifier:
                keyid:1D:05:DC:74:0F:6F:4B:B5:BC:4B:03:38:7E:9B:47:53:08:50:74:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQXcdA9vS7W8SwM4fptHUwhQdDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/EACCpkJUe6xsP4_nCRlj7NVGBLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/04e4c6-3349-4aed-88bc-5ee534fdb39b/1/HQXcdA9vS7W8SwM4fptHUwhQdDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.74.180.0/22
                IPv6:
                  2a07:3044:1::-2a07:3044:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ab:2e:e5:d4:7c:e6:19:0f:0c:35:c4:eb:96:a4:1a:d9:07:e6:
         fa:16:3f:ad:7c:69:61:19:2c:79:18:73:05:f9:ba:0f:0e:0f:
         a7:25:74:fc:c2:3c:6e:21:ac:49:41:ec:bf:36:5c:d3:14:92:
         47:8c:fb:c9:88:05:1e:02:66:d5:f5:ea:6a:4b:fe:d0:56:73:
         1f:75:c8:8f:0c:2d:43:42:8b:7a:7f:5f:7f:87:6d:d6:48:e3:
         c2:fe:95:f4:5b:aa:1e:7a:16:06:ad:ec:df:2a:04:6c:1b:25:
         5b:89:e4:98:d0:a7:3f:0f:0c:4b:5a:a1:30:f9:74:5b:12:d2:
         eb:b1:3a:7d:fa:ce:6d:d4:6b:2d:53:bf:3f:14:37:bf:46:37:
         38:3e:08:dd:a8:63:5b:85:0f:26:3f:36:f3:e5:1b:04:63:46:
         4f:a5:c4:18:12:5d:9f:e0:2f:68:81:26:aa:77:00:ea:18:14:
         ff:44:f0:12:81:8a:f9:11:51:ac:4b:bf:99:f2:0a:12:8c:68:
         9f:14:f6:27:01:ab:15:84:a3:de:83:b6:ab:9a:68:1f:90:35:
         a8:51:e4:1d:c4:62:84:00:38:a6:01:9a:c2:da:9d:af:b8:27:
         f5:68:23:7b:27:3d:0f:89:88:ce:51:90:d4:37:84:09:02:7e:
         43:31:50:5c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZt87ZqD897aW4xHK9nr/yh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMDVkYzc0MGY2ZjRiYjViYzRiMDMzODdlOWI0NzUzMDg1
MDc0M2MwHhcNMjYwMTAyMDQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDAwODJhNjQyNTQ3YmFjNmMzZjhmZTcwOTE5NjNlY2Q1NDYwNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsurSjKSuOdlG2DjlmOypYLNO9/sU
w7bGaityYQKpMloMD2rbVu0oHbniKXtV531UjDfDjy9k673U30OB9sI6+coUHK1c
hbmTjyOyHydmkczPYTA0lBgIyDSH5r3PhZQFW4ANZcC7rzmpa5NMTEXlq1VgTA0q
ofVwYmSySYXx7p4Omfl6twugdgf9rNUBGF1VOU9sTsVDQwkzO1AaSgPZPoGSW3Kr
FIkTH+/mCj+FBebeiWEg6VXFbCoEM4rFrLzgfo/5lUfoLPtD9VgGM0gaVAQQT77y
tDyxObZuM3Abm5CCEPo+TT+JaJdWX4w5tcQ5ShU/2aV5IRRnIdY340GpzQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBAAgqZCVHusbD+P5wkZY+zVRgS3MB8GA1UdIwQY
MBaAFB0F3HQPb0u1vEsDOH6bR1MIUHQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wNGU0YzYtMzM0OS00YWVkLTg4YmMt
NWVlNTM0ZmRiMzliLzEvRUFDQ3BrSlVlNnhzUDRfbkNSbGo3TlZHQkxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wNGU0YzYtMzM0OS00YWVkLTg4YmMtNWVlNTM0ZmRiMzli
LzEvSFFYY2RBOXZTN1c4U3dNNGZwdEhVd2hRZER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCTEq0MBoE
AgACMBQwEgMHACoHMEQAAQMHACoHMEQAAjANBgkqhkiG9w0BAQsFAAOCAQEAqy7l
1HzmGQ8MNcTrlqQa2Qfm+hY/rXxpYRkseRhzBfm6Dw4PpyV0/MI8biGsSUHsvzZc
0xSSR4z7yYgFHgJm1fXqakv+0FZzH3XIjwwtQ0KLen9ff4dt1kjjwv6V9FuqHnoW
Bq3s3yoEbBslW4nkmNCnPw8MS1qhMPl0WxLS67E6ffrObdRrLVO/PxQ3v0Y3OD4I
3ahjW4UPJj828+UbBGNGT6XEGBJdn+AvaIEmqncA6hgU/0TwEoGK+RFRrEu/mfIK
EoxonxT2JwGrFYSj3oO2q5poH5A1qFHkHcRihAA4pgGawtqdr7gn9Wgjeyc9D4mI
zlGQ1DeECQJ+QzFQXA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:31 2026 by rpki-client