This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ez0h1YvRTjVD8EeF8e-2rkpsZQ4.roa
File:                     ez0h1YvRTjVD8EeF8e-2rkpsZQ4.roa (raw, json)
Hash identifier:          Y1wxLBKyC8clOLvzEiEX84Xj9qRj5fSSgYebieOFlIc=
Subject key identifier:   7B:3D:21:D5:8B:D1:4E:35:43:F0:47:85:F1:EF:B6:AE:4A:6C:65:0E
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A23FDFC1DBF3D60E2F3081DF9AAE19
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ez0h1YvRTjVD8EeF8e-2rkpsZQ4.roa
Signing time:             Thu 01 Jan 2026 08:17:37 +0000
ROA not before:           Thu 01 Jan 2026 08:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8190
IP address blocks:        212.134.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:3f:df:c1:db:f3:d6:0e:2f:30:81:df:9a:ae:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b3d21d58bd14e3543f04785f1efb6ae4a6c650e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:ff:b5:65:c7:02:fc:43:d3:8f:7a:c2:c5:
                    07:9d:81:82:a8:f8:e2:41:f9:6d:3f:ba:48:f3:a6:
                    6d:5c:ee:c6:f9:18:5c:4b:e3:36:aa:c5:71:db:d6:
                    b7:6c:4c:55:7a:48:29:60:73:4c:e8:c0:e4:ea:24:
                    f2:bc:2f:54:d0:6d:0e:ef:8f:69:dd:de:3c:d4:59:
                    6a:64:f8:c2:57:6c:a7:f9:d4:72:d7:ce:0a:bf:a3:
                    3e:34:f3:ce:63:81:ba:34:ab:a7:65:a5:dc:44:f2:
                    c1:e2:31:84:cf:78:58:f3:02:0e:36:8e:85:6e:be:
                    69:31:61:90:26:96:3a:e8:ff:bd:28:b0:06:dc:27:
                    73:f5:8c:e2:5e:7c:a1:87:25:d3:25:fa:2f:f3:be:
                    0d:0d:63:04:e2:24:6d:3f:65:76:8f:a1:55:0c:f9:
                    cd:d5:52:4e:58:95:eb:b7:b9:f7:25:12:b6:bc:4c:
                    64:e6:58:95:b5:f7:e0:89:6b:c6:85:67:b8:19:e9:
                    41:8b:08:43:00:ea:69:a8:7f:18:9d:62:fa:9a:e6:
                    0e:e8:59:fc:e5:13:76:76:34:c5:46:c7:6e:4b:a7:
                    2b:2a:43:47:7b:fb:e6:18:83:2b:3b:c4:c3:48:61:
                    d9:fc:8a:d7:b7:f6:f7:d3:ea:37:db:a4:82:fb:fb:
                    82:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3D:21:D5:8B:D1:4E:35:43:F0:47:85:F1:EF:B6:AE:4A:6C:65:0E
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ez0h1YvRTjVD8EeF8e-2rkpsZQ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.134.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:4d:7a:b2:0b:c9:f8:3c:05:2f:d7:af:82:26:f9:7b:73:f7:
         4e:18:f1:3f:8e:f3:be:19:73:a2:6f:4a:f6:3b:f6:e0:dd:d3:
         05:dd:d4:9a:19:a2:1e:7a:a5:29:79:ec:85:02:ab:c5:7d:43:
         f2:9f:f6:0b:fe:39:94:d4:86:03:f7:51:11:4c:7c:14:69:7d:
         79:b4:8d:0a:76:65:d2:58:cf:39:5b:a9:b7:07:76:7e:0c:54:
         28:49:36:58:92:f8:99:00:53:f5:6c:cb:66:ce:67:d5:3f:c3:
         4a:66:6e:96:63:bb:1e:48:b7:4b:86:6b:f7:c2:fe:35:57:33:
         7a:39:0c:7e:25:47:74:55:37:d6:26:b0:10:3b:c5:6e:06:28:
         9e:34:f4:e3:c0:0a:81:fa:ce:89:92:ba:52:d3:47:cc:8d:76:
         49:d2:9a:62:bb:7e:a2:fc:d0:ec:ee:dd:c0:96:4d:cc:05:86:
         ac:a4:3b:86:5a:c4:87:b3:57:cf:41:84:79:fb:50:04:e7:34:
         06:a3:79:5c:6a:05:6f:e3:e0:e4:e5:b2:5d:0a:81:99:7b:40:
         ce:09:e6:b6:eb:7a:4e:02:e4:89:d7:46:e5:20:c9:d6:02:07:
         cb:f5:9f:c3:e9:41:a8:29:3e:fe:d2:f4:e5:fb:82:51:da:58:
         6c:79:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 08:14:50 2026 by rpki-client