This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e8pAfHUyRr_bIr3VmyeX3feesi4.roa
File:                     e8pAfHUyRr_bIr3VmyeX3feesi4.roa (raw, json)
Hash identifier:          SHNdFxX0a4HpefNxb0WZAxhnEArg+v6ZUycYSgV71Z4=
Subject key identifier:   7B:CA:40:7C:75:32:46:BF:DB:22:BD:D5:9B:27:97:DD:F7:9E:B2:2E
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A255C6EA7C922811197D5C328ABBDF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e8pAfHUyRr_bIr3VmyeX3feesi4.roa
Signing time:             Thu 01 Jan 2026 08:17:43 +0000
ROA not before:           Thu 01 Jan 2026 08:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138888
IP address blocks:        95.177.63.0/24 maxlen: 24
                          95.177.67.0/24 maxlen: 24
                          95.177.74.0/24 maxlen: 24
                          213.177.226.0/23 maxlen: 23
                          213.177.230.0/23 maxlen: 23
                          213.177.234.0/23 maxlen: 23
                          213.177.238.0/23 maxlen: 23
                          213.177.242.0/23 maxlen: 23
                          213.177.246.0/23 maxlen: 23
                          213.177.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:55:c6:ea:7c:92:28:11:19:7d:5c:32:8a:bb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7bca407c753246bfdb22bdd59b2797ddf79eb22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:fa:7e:41:7c:44:58:6a:23:44:db:91:de:
                    c3:31:cf:d5:73:5d:0b:18:9f:d7:b8:47:fc:2a:0e:
                    89:6c:7c:6a:97:a4:37:8f:23:42:eb:d2:7a:a0:8a:
                    39:82:f2:52:c2:8e:a4:df:0a:95:58:e2:50:19:8d:
                    b7:7d:58:77:ff:86:46:fa:61:f7:93:fe:32:f9:43:
                    41:65:e9:79:69:3e:d0:66:ff:a7:17:65:c9:59:16:
                    e2:1f:94:ff:20:af:c7:28:8d:5a:01:44:c1:1b:3b:
                    27:c2:af:a2:60:39:5f:c5:1e:0e:42:5a:1b:d2:81:
                    6c:8c:e9:29:6d:08:c3:3d:ba:2a:ad:2a:3d:69:81:
                    c9:70:86:fc:42:9a:42:dc:7f:26:f0:0b:8b:68:23:
                    14:16:ab:b6:62:fe:f9:2d:f4:c2:4c:3e:9c:84:87:
                    f5:9a:f2:32:0a:2a:d0:c1:16:70:41:5e:16:7b:6f:
                    60:75:45:ce:39:89:d4:64:66:04:a1:a2:9b:38:12:
                    f6:29:38:c0:2b:60:c5:fd:8a:e5:d8:e1:80:ac:8e:
                    4d:85:f5:47:b9:2d:e6:93:29:05:8c:5c:33:48:d1:
                    8e:b1:63:89:b2:b3:1e:81:20:d9:40:35:5d:0e:c6:
                    e8:39:66:77:0c:93:74:f9:b5:4c:99:b1:54:8b:8a:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CA:40:7C:75:32:46:BF:DB:22:BD:D5:9B:27:97:DD:F7:9E:B2:2E
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e8pAfHUyRr_bIr3VmyeX3feesi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.177.63.0/24
                  95.177.67.0/24
                  95.177.74.0/24
                  213.177.226.0/23
                  213.177.230.0/23
                  213.177.234.0/23
                  213.177.238.0/23
                  213.177.242.0/23
                  213.177.246.0/23
                  213.177.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:33:19:98:6c:93:24:f5:97:31:63:2a:47:70:2a:b6:a7:
         d0:04:f1:02:2e:51:a5:6f:73:07:b6:1c:6a:ae:50:a7:b0:b8:
         8b:92:8a:fd:e4:7c:e0:de:90:d2:74:6c:8d:60:2b:a0:75:e4:
         a6:0c:10:ed:b9:2d:50:47:69:14:15:46:c8:91:59:50:b9:c9:
         8d:c9:4a:4c:d4:c7:e7:f3:4f:21:17:e8:b4:a2:50:58:c0:4e:
         0e:37:c0:5e:fb:9b:57:4e:87:02:81:0a:21:9f:d6:81:c6:ff:
         02:62:59:52:2c:b0:ed:29:6a:c6:f3:68:84:1e:8b:22:19:4a:
         dd:1b:35:ea:03:58:86:61:5b:33:b5:a2:5f:71:75:5d:75:8c:
         bd:e3:b3:54:d7:d7:81:bf:ac:5d:b4:d3:4f:ed:47:9e:f2:ad:
         7d:f1:4a:c2:9a:99:44:26:3f:39:79:9e:bc:50:8b:b7:75:34:
         82:f8:ad:ae:fd:69:d6:6b:0d:61:da:45:72:16:7f:01:10:54:
         36:8a:9b:f2:47:6f:4d:17:9e:f4:ee:f1:43:fd:32:ec:73:38:
         c2:f1:3d:a0:d4:46:81:c0:e4:3f:cd:93:fd:64:fe:b9:04:8b:
         e9:a1:b8:fb:88:30:f1:a7:91:db:7f:5d:19:93:42:7a:d3:83:
         e7:69:47:57
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZt4olXG6nySKBEZfVwyirvfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmNhNDA3Yzc1MzI0NmJmZGIyMmJkZDU5YjI3OTdkZGY3OWViMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN/6fkF8RFhqI0Tbkd7DMc/Vc10L
GJ/XuEf8Kg6JbHxql6Q3jyNC69J6oIo5gvJSwo6k3wqVWOJQGY23fVh3/4ZG+mH3
k/4y+UNBZel5aT7QZv+nF2XJWRbiH5T/IK/HKI1aAUTBGzsnwq+iYDlfxR4OQlob
0oFsjOkpbQjDPboqrSo9aYHJcIb8QppC3H8m8AuLaCMUFqu2Yv75LfTCTD6chIf1
mvIyCirQwRZwQV4We29gdUXOOYnUZGYEoaKbOBL2KTjAK2DF/Yrl2OGArI5NhfVH
uS3mkykFjFwzSNGOsWOJsrMegSDZQDVdDsboOWZ3DJN0+bVMmbFUi4p+aQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFHvKQHx1Mka/2yK91Zsnl933nrIuMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZThwQWZIVXlScl9iSXIzVm15ZVgzZmVlc2k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAX7E/AwQA
X7FDAwQAX7FKAwQB1bHiAwQB1bHmAwQB1bHqAwQB1bHuAwQB1bHyAwQB1bH2AwQB
1bH6MA0GCSqGSIb3DQEBCwUAA4IBAQBGzjMZmGyTJPWXMWMqR3AqtqfQBPECLlGl
b3MHthxqrlCnsLiLkor95Hzg3pDSdGyNYCugdeSmDBDtuS1QR2kUFUbIkVlQucmN
yUpM1Mfn808hF+i0olBYwE4ON8Be+5tXTocCgQohn9aBxv8CYllSLLDtKWrG82iE
HosiGUrdGzXqA1iGYVsztaJfcXVddYy947NU19eBv6xdtNNP7Uee8q198UrCmplE
Jj85eZ68UIu3dTSC+K2u/WnWaw1h2kVyFn8BEFQ2ipvyR29NF5707vFD/TLsczjC
8T2g1EaBwOQ/zZP9ZP65BIvpobj7iDDxp5Hbf10Zk0J604PnaUdX
-----END CERTIFICATE-----
Generated at Mon Jan 19 08:14:49 2026 by rpki-client