This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/eIWcz11n1PjQmKMq28yQMraoei4.roa
File:                     eIWcz11n1PjQmKMq28yQMraoei4.roa (raw, json)
Hash identifier:          l+JkKmb9S4y5YrSkGvH0iejPgNSj/cfbPp9hnVGEH1c=
Subject key identifier:   78:85:9C:CF:5D:67:D4:F8:D0:98:A3:2A:DB:CC:90:32:B6:A8:7A:2E
Certificate issuer:       /CN=ee0abba552f46b94edf22394feec1d0459f20140
Certificate serial:       019B797F128D08792E14F965C7774D660AD2
Authority key identifier: EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/eIWcz11n1PjQmKMq28yQMraoei4.roa
Signing time:             Thu 01 Jan 2026 12:18:49 +0000
ROA not before:           Thu 01 Jan 2026 12:18:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44526
IP address blocks:        195.216.206.0/23 maxlen: 23
                          195.216.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:12:8d:08:79:2e:14:f9:65:c7:77:4d:66:0a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0abba552f46b94edf22394feec1d0459f20140
        Validity
            Not Before: Jan  1 12:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78859ccf5d67d4f8d098a32adbcc9032b6a87a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:53:83:84:11:f1:a4:29:c2:a1:da:88:a4:
                    38:c9:01:cf:7a:0f:45:c9:af:af:58:f3:3c:c6:83:
                    cb:4e:88:1f:36:a3:24:ba:cc:af:e7:b0:33:5c:4f:
                    73:84:de:17:69:ff:10:15:37:b1:4c:9a:eb:3b:61:
                    ee:54:3b:f3:21:27:99:09:33:9b:5b:08:54:61:af:
                    95:a3:f3:df:af:c0:f4:13:34:03:f4:bc:fe:27:fc:
                    08:27:8c:dd:7d:78:a0:37:31:1b:a2:d2:57:1b:30:
                    ba:09:a1:90:99:5a:df:25:fa:09:9d:20:57:0c:c9:
                    0f:7c:f7:b5:72:19:d9:9b:32:88:7f:a7:16:b9:55:
                    87:9f:75:b8:d6:6e:6a:6e:c4:fb:ba:c8:39:fa:42:
                    dc:2f:d7:d3:b1:fe:e1:17:0e:d9:db:eb:cd:a3:d5:
                    63:d1:a2:8a:ab:ac:4b:2b:c0:6b:9b:43:a4:8e:e6:
                    23:d3:b3:29:73:19:df:64:ac:e7:2c:ba:8f:f2:d0:
                    f8:14:34:89:fa:e1:43:e0:a9:73:74:08:87:7d:50:
                    94:5c:ec:d8:13:c4:a7:6f:2e:18:cd:d4:5b:cf:cf:
                    56:12:00:d6:c6:18:ce:3f:28:2b:44:80:28:4f:84:
                    f5:68:25:03:b8:da:19:3c:1e:d5:ea:4d:51:f4:2e:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:85:9C:CF:5D:67:D4:F8:D0:98:A3:2A:DB:CC:90:32:B6:A8:7A:2E
            X509v3 Authority Key Identifier:
                keyid:EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/eIWcz11n1PjQmKMq28yQMraoei4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:1a:df:07:e4:76:09:18:2e:9c:5a:6e:9f:c1:fd:81:3b:
         1a:70:52:0d:a3:c0:66:65:48:54:ff:21:18:fb:c8:7c:e5:89:
         31:1d:b8:61:df:8d:cd:b6:44:1f:68:57:cf:bd:46:97:4d:e2:
         f6:7d:3a:51:93:78:6e:53:50:33:88:bf:ca:e2:42:eb:60:68:
         ac:dd:ac:0f:02:29:68:e0:2d:67:a2:30:7c:83:b9:e6:19:b9:
         3c:69:bc:3d:cd:76:fd:5e:2e:78:dc:4a:6f:f7:f1:54:de:3d:
         dd:d9:ef:ed:e8:76:e7:5e:ef:01:0f:52:b8:dd:14:e7:3e:a4:
         33:cd:81:bc:e6:81:08:fb:04:e6:3b:37:ea:85:9f:57:fe:c9:
         b3:92:da:af:e5:fe:56:bf:07:30:63:d1:b9:94:ef:bd:7a:10:
         17:94:5f:d4:b2:16:ab:94:23:5c:27:6d:b2:dd:b3:7a:a3:77:
         91:a3:06:ce:f1:a9:7c:30:5c:42:f4:34:63:6d:e1:53:83:90:
         ef:bb:c8:ed:89:12:ab:f6:c5:c8:e0:85:0f:cb:64:29:4f:83:
         ef:d4:24:72:25:b0:bd:ef:cd:5c:4e:97:a4:1f:8c:01:ab:15:
         7f:92:6c:91:84:e4:db:80:fe:17:e9:05:c4:c4:3e:08:a2:14:
         7b:86:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:25:51 2026 by rpki-client