This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/0EalOX44qspmegVtsk1N4TSFVRU.roa
File:                     0EalOX44qspmegVtsk1N4TSFVRU.roa (raw, json)
Hash identifier:          JwbWuG88BTSL/M3LKZ7+Inf9JGSQF9i+jJ1NXUZ8/VQ=
Subject key identifier:   D0:46:A5:39:7E:38:AA:CA:66:7A:05:6D:B2:4D:4D:E1:34:85:55:15
Certificate issuer:       /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial:       019B797DE3E3F77F6774315749FA27ADAC2D
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/0EalOX44qspmegVtsk1N4TSFVRU.roa
Signing time:             Thu 01 Jan 2026 12:17:32 +0000
ROA not before:           Thu 01 Jan 2026 12:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43567
IP address blocks:        31.25.200.0/21 maxlen: 21
                          37.157.24.0/22 maxlen: 22
                          37.157.28.0/23 maxlen: 23
                          37.157.30.0/24 maxlen: 24
                          77.73.88.0/22 maxlen: 22
                          77.73.92.0/24 maxlen: 24
                          77.73.93.0/24 maxlen: 24
                          77.73.94.0/24 maxlen: 24
                          188.164.136.0/21 maxlen: 21
                          188.164.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:e3:e3:f7:7f:67:74:31:57:49:fa:27:ad:ac:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
        Validity
            Not Before: Jan  1 12:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d046a5397e38aaca667a056db24d4de134855515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:fc:d4:8a:74:6f:b3:1e:d5:97:7b:f9:c4:
                    f8:22:c2:31:96:c9:22:4b:de:43:6e:fe:7b:08:a0:
                    9c:55:22:aa:0d:e4:4a:18:93:93:97:22:41:ca:95:
                    33:95:34:d1:5f:71:17:89:52:82:9f:34:03:9f:59:
                    ab:36:fa:6a:b2:3f:ac:ea:0a:bf:1d:9c:a8:6a:12:
                    9d:cd:6f:18:73:66:56:a8:35:a9:57:d3:b6:37:81:
                    70:52:4b:68:bb:23:39:bf:78:53:46:4b:b4:68:19:
                    2f:eb:55:1a:45:40:7e:33:84:6a:d4:63:bf:67:f5:
                    fe:96:46:66:2c:34:30:11:25:6c:46:38:c3:95:b6:
                    7c:01:c9:90:3e:a1:51:86:2f:51:49:b7:05:c3:7f:
                    a2:08:46:37:d0:2c:e9:94:85:c7:a6:bf:b0:56:bf:
                    69:fa:bf:d2:ed:76:ac:3f:6d:26:28:c1:13:97:85:
                    96:45:f0:a6:63:ae:f6:a0:29:13:6f:f7:01:b4:19:
                    bf:3f:66:26:ec:a2:be:28:b1:8f:cc:be:76:e1:21:
                    12:53:7f:38:ee:02:5f:47:f2:c2:2d:0c:bc:7a:bf:
                    bc:73:b2:18:34:16:65:43:0d:73:e1:02:44:5f:f4:
                    d8:4b:f9:0d:05:79:18:c8:9b:9e:ac:a4:15:b2:d1:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:46:A5:39:7E:38:AA:CA:66:7A:05:6D:B2:4D:4D:E1:34:85:55:15
            X509v3 Authority Key Identifier:
                keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/0EalOX44qspmegVtsk1N4TSFVRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.25.200.0/21
                  37.157.24.0-37.157.30.255
                  77.73.88.0-77.73.94.255
                  188.164.136.0/21
                  188.164.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1c:d0:48:b9:f7:db:ad:29:8f:5b:09:fd:5c:45:23:fd:d9:9e:
         86:3a:59:13:ea:c4:e5:60:eb:ac:17:2f:e6:b9:a2:23:b8:cb:
         7b:dd:e5:2e:b9:50:58:9a:13:a5:72:c0:73:64:5e:ea:be:4c:
         37:97:28:7d:31:d7:b0:83:73:a2:64:e8:ad:a4:8a:d7:c0:4d:
         7a:7f:5c:87:33:d2:17:ae:14:b0:6a:de:27:1a:4d:99:81:5c:
         89:d1:d4:2c:ee:78:a9:13:79:46:a2:b8:20:29:00:89:6f:72:
         03:bd:8f:11:64:0e:47:6f:4d:52:67:3c:07:9f:e5:cb:b2:44:
         f9:53:87:b0:47:78:f7:5d:0e:3d:09:d3:73:37:00:67:51:c2:
         11:11:db:d4:ef:5e:38:e2:be:51:d6:fc:56:83:b9:a5:03:6d:
         21:4d:a6:85:0a:c7:d2:dd:ef:c0:1a:dd:12:ba:77:05:1a:c8:
         9b:7f:09:62:6e:18:88:00:50:9b:a4:72:12:39:2e:8d:11:34:
         7a:61:89:f1:38:a9:c7:a0:78:7a:67:77:3a:66:5a:22:e3:0b:
         cf:ab:dd:af:34:90:2f:9a:77:66:8b:f2:7b:60:83:5a:ed:5f:
         e6:57:11:6c:ef:03:a9:e7:8d:11:5d:36:c5:bf:d5:47:7e:5e:
         d8:00:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:45 2026 by rpki-client