This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/eKqzfu-WsthZl9cMx3d4nPn0bsY.roa
File:                     eKqzfu-WsthZl9cMx3d4nPn0bsY.roa (raw, json)
Hash identifier:          w2040uf1aDugISzQFmejjk14KHF8A3dboKdbggun6Ig=
Subject key identifier:   78:AA:B3:7E:EF:96:B2:D8:59:97:D7:0C:C7:77:78:9C:F9:F4:6E:C6
Certificate issuer:       /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial:       019B797EC4AF3DC62A7C058679D0536FAF43
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/eKqzfu-WsthZl9cMx3d4nPn0bsY.roa
Signing time:             Thu 01 Jan 2026 12:18:29 +0000
ROA not before:           Thu 01 Jan 2026 12:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210256
IP address blocks:        185.254.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:c4:af:3d:c6:2a:7c:05:86:79:d0:53:6f:af:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
        Validity
            Not Before: Jan  1 12:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78aab37eef96b2d85997d70cc777789cf9f46ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:71:ae:59:64:91:1c:9c:13:87:ea:4f:cb:
                    3d:7b:02:ec:b2:d0:96:68:97:7e:50:db:4a:b7:17:
                    aa:8c:4a:09:9c:69:52:fb:3c:81:4c:93:b6:f6:88:
                    17:c8:d1:a5:0e:6a:3f:2d:a8:d0:7e:18:d3:19:7e:
                    f8:97:09:45:67:4b:0b:5b:f8:34:eb:af:7a:2c:77:
                    15:52:23:75:cf:e2:e6:c7:10:8b:b3:9d:d4:c7:d0:
                    64:66:75:8b:45:3e:24:eb:81:36:3d:96:1a:50:4f:
                    bc:01:52:32:f9:05:89:9c:48:71:5f:1b:6f:02:d3:
                    1c:29:35:71:22:fd:44:21:4f:12:6d:58:a9:bb:c4:
                    d5:ba:e4:0c:07:5c:5f:01:23:a7:9d:4f:7a:97:e0:
                    b9:88:36:d5:17:79:e9:ee:3c:bb:56:5c:f4:78:a0:
                    3c:0a:c9:2c:66:9b:ac:be:56:f6:41:7d:23:d6:7b:
                    7b:df:c4:c6:f1:1e:48:b4:ba:2a:dd:46:f3:92:87:
                    02:92:82:7d:3c:c5:6c:9b:6f:cb:d6:0a:97:ba:0f:
                    2b:77:7b:94:6c:b0:9d:32:be:3a:ca:7b:b9:8a:09:
                    85:8d:16:d4:66:b2:b4:1d:ec:20:42:a9:73:e7:2e:
                    03:2a:ab:24:3c:fb:5f:92:55:41:41:69:1e:5b:8b:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AA:B3:7E:EF:96:B2:D8:59:97:D7:0C:C7:77:78:9C:F9:F4:6E:C6
            X509v3 Authority Key Identifier:
                keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/eKqzfu-WsthZl9cMx3d4nPn0bsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:6c:f2:2c:89:e7:b0:cd:2d:2e:36:c1:d1:4e:7f:f8:7d:ec:
         fc:a9:2f:51:2b:fe:d9:6f:ff:df:3f:5a:c3:70:47:ef:78:e0:
         cc:00:1f:79:81:52:fa:2c:ae:4e:e1:2e:d5:2f:4d:bf:59:30:
         90:36:83:b0:3f:98:c1:63:f6:c8:95:05:74:6e:c6:f4:0b:ef:
         81:c3:2e:60:1a:8f:b5:17:7e:57:43:68:d3:e3:df:e1:82:4e:
         3e:fc:bb:a2:33:17:22:91:48:74:f5:5f:35:bc:f8:7c:19:ca:
         b9:da:cd:ea:d2:cd:18:a5:fd:8d:71:4d:f8:31:d7:05:46:bc:
         3b:0f:24:71:47:31:d9:fe:3c:7c:47:10:7f:a8:e8:29:1d:03:
         82:15:a5:aa:62:b8:81:ef:8c:f4:4f:ec:3f:71:a7:03:2a:82:
         52:35:4e:d5:1c:71:39:9d:54:aa:75:e4:3b:45:04:57:f9:8d:
         d8:88:83:a1:62:22:61:f0:4e:7d:ad:5e:12:97:1a:dd:31:7f:
         c1:48:fc:52:8b:46:2c:ac:ab:d7:93:53:0b:f9:66:c5:68:ef:
         e1:33:20:b9:a9:37:c9:e7:35:36:47:25:cc:6c:9e:48:c2:37:
         5a:88:8a:ec:ce:71:c8:c2:16:fd:8c:91:c7:20:c5:cd:9e:89:
         3c:00:f6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:11 2026 by rpki-client