This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/euo56ZtX6v5B0AKUx9R-FKNO9EA.roa
File:                     euo56ZtX6v5B0AKUx9R-FKNO9EA.roa (raw, json)
Hash identifier:          w3fmR0eCcrM0dELQMZ8IdSvLZfYhYkLBqG/PpUnPMls=
Subject key identifier:   7A:EA:39:E9:9B:57:EA:FE:41:D0:02:94:C7:D4:7E:14:A3:4E:F4:40
Certificate issuer:       /CN=c273fff178ed52fd1de7093112423b6417cea2d3
Certificate serial:       019C2E341BE7780AFF164B825D8C1B063644
Authority key identifier: C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/euo56ZtX6v5B0AKUx9R-FKNO9EA.roa
Signing time:             Thu 05 Feb 2026 14:28:12 +0000
ROA not before:           Thu 05 Feb 2026 14:28:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6799
IP address blocks:        91.213.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2e:34:1b:e7:78:0a:ff:16:4b:82:5d:8c:1b:06:36:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Validity
            Not Before: Feb  5 14:28:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7aea39e99b57eafe41d00294c7d47e14a34ef440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:b2:27:57:98:fb:2a:81:40:7b:8c:cf:64:
                    97:33:d5:ea:21:a5:dc:74:30:87:0b:da:9e:2b:8e:
                    e5:43:70:f1:04:13:d2:9c:68:15:17:5a:aa:5b:03:
                    f6:88:a9:b9:3d:e3:1b:03:de:2e:2e:3b:8a:f8:51:
                    6a:fa:49:4d:dc:f4:78:16:54:39:ad:06:ed:16:e0:
                    6e:70:80:7d:fa:c5:22:ae:39:e1:4e:43:2b:23:51:
                    67:e5:1e:06:ee:31:75:cf:90:b4:a1:16:e2:07:80:
                    83:39:b8:ce:b3:80:91:74:9e:c2:eb:63:4e:98:78:
                    ba:56:3b:0d:33:6a:78:9d:05:98:d6:23:3f:e8:93:
                    9f:f5:2b:7f:78:dc:c7:b0:c5:c3:50:4e:d2:00:a5:
                    e0:c6:f4:05:a1:e9:74:cc:f5:e0:f7:76:31:75:e4:
                    e9:46:c5:b0:8e:44:a1:1c:c3:1d:3b:04:62:37:1a:
                    0a:c4:fc:5c:1a:bf:8b:44:91:3a:c8:c0:5c:4d:24:
                    fd:57:30:01:d3:a5:8c:c3:eb:33:d4:db:99:e2:90:
                    3c:cb:11:2a:b3:d3:0f:47:69:76:7c:7a:7e:8f:88:
                    2b:79:99:bf:a3:aa:53:53:cb:0c:af:21:e7:fb:2e:
                    b4:f3:84:f3:ef:a3:85:79:e5:43:28:42:20:dd:8c:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EA:39:E9:9B:57:EA:FE:41:D0:02:94:C7:D4:7E:14:A3:4E:F4:40
            X509v3 Authority Key Identifier:
                keyid:C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/euo56ZtX6v5B0AKUx9R-FKNO9EA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:21:c7:6b:6b:ed:ca:88:1e:10:4f:67:2a:89:d0:e2:59:
         42:83:42:db:41:18:41:16:49:75:f5:c2:f1:eb:6a:cf:18:6e:
         ab:1b:6b:8f:cd:99:9c:26:1a:f3:3d:95:12:18:b0:d4:30:19:
         db:aa:25:c7:fd:d6:c0:b6:84:ff:27:ea:c1:55:1d:24:65:d1:
         49:5e:8c:9c:c6:c1:34:27:eb:30:c9:9b:70:a1:94:4e:55:53:
         f8:14:4f:7a:cd:ae:ac:0c:d5:35:94:c2:b1:00:39:16:e7:a6:
         7c:da:3b:68:0f:eb:44:bd:3e:25:43:48:5a:a6:76:9d:d9:39:
         7d:f7:f0:be:93:90:e4:2c:81:89:85:4b:d4:f2:b8:ca:f1:3d:
         b6:25:d2:72:5e:30:b0:b8:8e:4b:e0:1b:ce:bd:e2:f5:99:ae:
         78:43:fe:5d:90:f1:2a:03:8f:02:56:5d:5f:b3:1b:38:2a:6e:
         9d:23:b8:30:48:a7:49:1b:df:ce:6e:21:6c:74:cc:a8:bd:29:
         d2:4f:23:2c:db:db:34:7f:cc:12:b4:4d:24:30:19:1c:5c:a1:
         36:8d:35:2a:89:d6:4f:a2:40:76:64:51:e7:86:f5:61:e7:31:
         95:41:6e:49:e0:64:e2:b0:0b:b3:6b:71:03:67:47:bf:f8:30:
         cb:cb:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:09 2026 by rpki-client