This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/Ei-xeQIJ_CUuo9COS_FddR1cYpg.roa
File:                     Ei-xeQIJ_CUuo9COS_FddR1cYpg.roa (raw, json)
Hash identifier:          0JD3XKJ3f1eW5d7eZqTtuTXgAEoVYtq+QEjuvwgC7t0=
Subject key identifier:   12:2F:B1:79:02:09:FC:25:2E:A3:D0:8E:4B:F1:5D:75:1D:5C:62:98
Certificate issuer:       /CN=993e814676f32f264771c7ad767a4df87d3c63e2
Certificate serial:       019B28873AD3FB87A533A9972F93A23D34D9
Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/Ei-xeQIJ_CUuo9COS_FddR1cYpg.roa
Signing time:             Tue 16 Dec 2025 18:58:29 +0000
ROA not before:           Tue 16 Dec 2025 18:58:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215563
IP address blocks:        2a0d:b083::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:87:3a:d3:fb:87:a5:33:a9:97:2f:93:a2:3d:34:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2
        Validity
            Not Before: Dec 16 18:58:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=122fb1790209fc252ea3d08e4bf15d751d5c6298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:2e:9f:4f:a9:b3:8b:e2:ba:32:bc:8a:06:
                    2e:d0:cb:39:9c:91:ad:45:dd:49:aa:30:ac:27:e7:
                    3e:9e:0f:1d:98:fa:0b:fb:7f:28:cf:b8:c6:d4:30:
                    20:31:07:1a:9c:f7:06:aa:7d:9e:68:17:6e:ca:c2:
                    8b:26:fe:82:2a:f2:c3:83:39:25:c4:6f:00:84:04:
                    71:ed:34:04:63:ce:d6:a0:bc:bf:94:8e:85:cf:b0:
                    48:c3:03:03:89:13:88:ec:f5:d0:82:49:84:fc:ee:
                    8c:f1:69:96:3a:64:f1:24:09:b7:81:c3:ef:60:a3:
                    99:34:57:ae:06:f9:57:c3:e4:b8:32:ae:87:08:ae:
                    2b:ba:35:c6:a1:55:a0:7c:62:9e:60:35:83:30:dd:
                    23:aa:79:e8:c0:22:d8:19:a3:ad:5c:11:88:70:48:
                    c7:73:8c:6d:05:96:72:41:6f:90:42:95:f3:e0:52:
                    07:ea:2a:0f:35:2c:2a:b9:bc:1d:70:c2:64:7e:04:
                    4e:e3:f3:f5:6d:af:bf:de:77:d0:e6:98:5f:53:21:
                    cf:9f:ea:ea:f2:3c:5e:ff:9c:40:76:53:0b:60:17:
                    6d:58:03:98:5f:28:83:50:58:3e:eb:ac:05:41:cd:
                    58:c3:a6:14:ac:e6:dd:81:e4:4f:9d:f8:70:55:9c:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:B1:79:02:09:FC:25:2E:A3:D0:8E:4B:F1:5D:75:1D:5C:62:98
            X509v3 Authority Key Identifier:
                keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/Ei-xeQIJ_CUuo9COS_FddR1cYpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:b083::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:92:64:08:65:1e:de:c6:94:6b:8f:e8:2c:7d:a4:4b:a4:e1:
         13:e4:0b:12:82:dc:e4:ec:bf:ec:db:0b:af:39:00:d5:23:78:
         17:72:38:ef:f9:fb:a9:d5:67:b4:f0:9a:3a:6a:81:26:b1:a0:
         01:1b:66:6a:71:cb:02:9a:1b:5f:4f:83:82:75:cb:7a:dc:b2:
         c6:21:e4:45:4d:26:70:5e:7b:34:9a:a1:45:3a:96:a9:ef:41:
         0c:af:78:72:6e:78:8b:60:b4:5f:cb:06:a7:2c:aa:a2:f5:14:
         cb:6a:9e:15:b6:41:b9:35:60:f4:71:01:31:77:2a:90:a7:25:
         fc:57:48:0f:f5:ac:45:3a:c5:5c:8a:0c:9b:ff:72:c3:e1:19:
         4d:44:23:56:e6:77:6f:dd:b1:0b:f0:d9:61:8c:fc:8c:0f:7e:
         70:67:46:d6:3d:73:d9:de:1f:28:26:82:07:56:e8:08:9a:fd:
         8e:3e:87:a3:a7:f7:fd:13:53:f6:cc:c2:55:72:43:05:90:bb:
         5c:64:0e:03:11:39:38:58:01:da:9e:57:7e:2b:8a:e6:b2:6f:
         7b:f0:c8:cd:bb:5e:e5:e0:bf:cf:47:7f:b1:18:3f:f8:13:fb:
         38:ff:fb:bf:c8:8e:47:3e:33:56:d0:d3:cf:32:ec:e3:2e:1c:
         b1:29:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:06:04 2025 by rpki-client