This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/iuyoeGHJ2HtKzNIRjDQXGF_P-CU.roa
File:                     iuyoeGHJ2HtKzNIRjDQXGF_P-CU.roa (raw, json)
Hash identifier:          ZnVPMJXUndFPgr3XLqfOVPInWvP+3NWpUFJHhSkpQhI=
Subject key identifier:   8A:EC:A8:78:61:C9:D8:7B:4A:CC:D2:11:8C:34:17:18:5F:CF:F8:25
Certificate issuer:       /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial:       019B7B3683E8F1DDE81494E0B7F48ED05499
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/iuyoeGHJ2HtKzNIRjDQXGF_P-CU.roa
Signing time:             Thu 01 Jan 2026 20:18:48 +0000
ROA not before:           Thu 01 Jan 2026 20:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41127
IP address blocks:        212.74.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:83:e8:f1:dd:e8:14:94:e0:b7:f4:8e:d0:54:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
        Validity
            Not Before: Jan  1 20:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8aeca87861c9d87b4accd2118c3417185fcff825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:19:70:07:19:da:cf:31:7e:cd:25:97:9c:
                    c3:5d:1e:57:b5:02:a7:d5:12:c7:30:a6:94:7c:86:
                    86:6e:6a:dd:2a:db:4d:da:d5:dd:ff:d1:15:c2:63:
                    57:09:9a:db:91:df:3d:da:95:a9:f8:30:7d:a8:6e:
                    a2:33:5c:78:e8:40:00:8e:d2:af:27:bf:f0:66:f7:
                    bb:42:2d:a4:fe:31:d5:8b:ab:a8:17:cc:37:3f:96:
                    6f:44:a0:7d:1d:0d:a1:50:c5:e0:f5:85:bc:2d:e1:
                    9c:b2:7b:a6:a7:d9:f5:c6:52:b2:d5:8d:88:fc:1d:
                    3d:bb:8f:19:cf:b7:cd:ee:89:92:78:9c:37:bb:4c:
                    2b:04:77:a6:7b:eb:41:c8:01:b0:1d:1b:c3:fd:99:
                    a4:45:43:61:5a:d0:7b:84:d7:a5:7c:8a:bf:06:1e:
                    02:b9:0a:91:05:8e:58:f0:19:15:20:de:b6:14:82:
                    76:a3:f7:01:27:99:68:40:8c:8b:dc:1c:6f:f1:d7:
                    b1:cc:8c:de:32:ec:e9:b0:9d:19:02:0d:50:b3:10:
                    02:eb:c1:2e:53:b6:01:92:75:f8:0e:bd:e2:bf:c3:
                    92:fb:45:ba:0d:50:5e:2f:7c:24:54:41:4b:3d:d0:
                    df:24:11:dd:53:16:8f:4c:82:23:49:66:46:85:ce:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EC:A8:78:61:C9:D8:7B:4A:CC:D2:11:8C:34:17:18:5F:CF:F8:25
            X509v3 Authority Key Identifier:
                keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/iuyoeGHJ2HtKzNIRjDQXGF_P-CU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.74.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:66:50:09:c3:15:39:77:c0:f0:dc:9b:4b:db:ff:80:b1:10:
         90:f6:51:92:30:f1:02:a9:61:a1:df:ea:57:47:e3:8c:f7:92:
         11:a4:d5:d2:94:30:c3:09:29:0b:2f:a6:bb:1f:ac:48:2e:f4:
         80:5f:33:05:3b:1a:bc:2e:f5:78:53:ea:54:92:98:ba:e5:e1:
         55:38:4b:3d:02:52:dc:26:cf:ba:ca:e1:ae:ca:6d:fd:99:24:
         5f:0d:22:f6:5c:44:01:b8:b1:0f:ea:24:0f:0d:8f:10:4d:1b:
         30:b5:3a:38:b5:12:a0:86:3d:07:dd:a8:dc:c2:83:c2:fc:80:
         a7:9f:9f:ae:20:fd:34:2f:0e:24:47:4c:6f:9b:f9:bc:27:43:
         a3:d9:58:7a:a5:66:bb:21:4e:c4:ad:c9:5d:1d:42:3a:8e:d9:
         f2:9d:f0:ea:c3:4c:52:c2:e1:a7:24:78:34:e7:55:f7:4c:b5:
         ee:71:fc:48:41:c7:db:9f:21:92:0e:31:30:8d:82:d8:c6:7a:
         a9:6b:11:69:af:25:14:6b:27:cf:95:64:fa:00:bc:6f:dd:ed:
         f3:13:49:44:1d:85:97:ff:aa:f6:83:39:50:2a:70:ba:0f:d4:
         ff:59:b3:45:b1:df:20:44:fb:b5:43:f8:14:4b:37:f4:47:f1:
         8b:e3:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:17 2026 by rpki-client