This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eU6KvDXh3AnKpZ8uRrGRC97ecog.roa
File:                     eU6KvDXh3AnKpZ8uRrGRC97ecog.roa (raw, json)
Hash identifier:          9ZmYjbsfpoejWQKC4vJErnfHaDzDzvwy63FGI+kAyAM=
Subject key identifier:   79:4E:8A:BC:35:E1:DC:09:CA:A5:9F:2E:46:B1:91:0B:DE:DE:72:88
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A23BC82418E1D50139F2A0282BA49C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eU6KvDXh3AnKpZ8uRrGRC97ecog.roa
Signing time:             Thu 01 Jan 2026 08:17:36 +0000
ROA not before:           Thu 01 Jan 2026 08:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3741
IP address blocks:        87.83.53.0/24 maxlen: 24
                          195.172.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:3b:c8:24:18:e1:d5:01:39:f2:a0:28:2b:a4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=794e8abc35e1dc09caa59f2e46b1910bdede7288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:2e:23:c0:48:af:e7:1e:ca:52:70:72:e1:
                    0d:7b:61:7e:2f:b2:b8:a4:0b:59:ba:81:4f:c2:ad:
                    3f:77:3d:63:8e:80:99:60:51:10:5d:a9:71:26:29:
                    70:7e:b2:92:f4:49:6e:72:b3:ba:a9:03:a1:17:f2:
                    9a:2f:72:5d:38:03:9a:37:7f:e3:fb:67:4c:15:26:
                    09:c8:ae:2e:f9:27:c0:d9:91:35:bc:94:90:c1:e4:
                    4a:b6:34:49:cb:38:0b:3a:20:13:10:50:2b:06:55:
                    80:08:b8:2b:3b:cc:05:5f:a1:55:a2:2e:23:63:03:
                    5a:1b:1a:bb:ae:86:e8:fc:8c:95:40:e3:10:f8:62:
                    55:08:51:a6:8e:1d:8f:5a:85:58:af:4b:97:fd:49:
                    44:7b:8b:56:6b:3e:50:49:00:09:d0:98:34:5d:be:
                    52:5d:50:a3:fa:a1:ae:7a:53:a4:75:b4:6e:b4:ee:
                    76:14:86:9e:c1:3b:a8:78:f8:e3:1c:58:a6:c8:9b:
                    11:ae:74:ce:c0:5e:26:2c:1d:8f:07:f6:df:2f:cb:
                    67:6d:7c:cc:28:bd:d8:a4:e5:1c:ca:5b:ca:26:db:
                    3e:12:31:a3:72:b4:96:96:f6:de:cb:a6:95:a2:9b:
                    4c:0e:6e:7e:76:4b:cb:7a:ba:16:1f:d9:60:b7:04:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4E:8A:BC:35:E1:DC:09:CA:A5:9F:2E:46:B1:91:0B:DE:DE:72:88
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eU6KvDXh3AnKpZ8uRrGRC97ecog.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.83.53.0/24
                  195.172.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:6d:c8:fa:d1:f1:75:42:48:6c:56:c2:68:40:0a:84:71:66:
         8b:f3:43:c9:19:ca:ea:7a:e5:12:ef:23:23:0f:93:57:0b:68:
         04:d4:31:63:30:25:73:d9:fa:ad:a9:b8:17:af:6f:40:28:bb:
         05:ba:13:4d:19:26:9b:7e:68:9c:06:3c:7f:04:c6:2d:cb:f9:
         e2:15:0f:53:7a:d5:c7:0a:b3:99:b0:15:ec:59:59:05:37:79:
         1f:80:b5:bd:2a:db:75:82:b6:cd:be:f6:bf:6c:2a:5c:a9:f1:
         8a:4b:65:f5:5c:fb:c1:b8:e5:e7:50:f1:d4:88:7a:41:81:b1:
         7d:c8:fa:51:ac:be:a4:2c:c9:6c:1f:e7:5b:6b:86:00:d0:4e:
         a5:7a:a0:84:d6:6f:a2:f9:ea:b0:86:e8:3b:17:ac:8b:70:71:
         77:fe:77:ff:7c:73:5f:ae:9b:15:76:7f:a5:9d:0b:4e:82:2c:
         ca:0a:27:0c:00:b7:4b:77:b9:47:06:a3:73:46:13:db:cd:d0:
         e5:b2:eb:bd:cc:a6:95:6e:34:70:0c:bb:5f:80:93:b2:32:0d:
         17:a1:b4:6b:42:ff:9e:c5:c7:74:b4:b6:77:d7:ff:b2:a0:65:
         82:a8:3a:f8:5e:79:48:44:5a:10:ec:27:75:4e:6f:ab:cf:c5:
         78:53:ba:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt4ojvIJBjh1QE58qAoK6ScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMTAxMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTRlOGFiYzM1ZTFkYzA5Y2FhNTlmMmU0NmIxOTEwYmRlZGU3Mjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6EuI8BIr+ceylJwcuENe2F+L7K4
pAtZuoFPwq0/dz1jjoCZYFEQXalxJilwfrKS9ElucrO6qQOhF/KaL3JdOAOaN3/j
+2dMFSYJyK4u+SfA2ZE1vJSQweRKtjRJyzgLOiATEFArBlWACLgrO8wFX6FVoi4j
YwNaGxq7robo/IyVQOMQ+GJVCFGmjh2PWoVYr0uX/UlEe4tWaz5QSQAJ0Jg0Xb5S
XVCj+qGuelOkdbRutO52FIaewTuoePjjHFimyJsRrnTOwF4mLB2PB/bfL8tnbXzM
KL3YpOUcylvKJts+EjGjcrSWlvbey6aVoptMDm5+dkvLeroWH9lgtwT5cQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHlOirw14dwJyqWfLkaxkQve3nKIMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZVU2S3ZEWGgzQW5LcFo4dVJyR1JDOTdlY29nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV1M1AwQA
w6yQMA0GCSqGSIb3DQEBCwUAA4IBAQCjbcj60fF1QkhsVsJoQAqEcWaL80PJGcrq
euUS7yMjD5NXC2gE1DFjMCVz2fqtqbgXr29AKLsFuhNNGSabfmicBjx/BMYty/ni
FQ9TetXHCrOZsBXsWVkFN3kfgLW9Ktt1grbNvva/bCpcqfGKS2X1XPvBuOXnUPHU
iHpBgbF9yPpRrL6kLMlsH+dba4YA0E6leqCE1m+i+eqwhug7F6yLcHF3/nf/fHNf
rpsVdn+lnQtOgizKCicMALdLd7lHBqNzRhPbzdDlsuu9zKaVbjRwDLtfgJOyMg0X
obRrQv+excd0tLZ31/+yoGWCqDr4XnlIRFoQ7Cd1Tm+rz8V4U7oe
-----END CERTIFICATE-----
Generated at Mon Jan 19 08:14:52 2026 by rpki-client