This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ejpv_S1z5EVhW50bpbq3xxge2fs.roa
File:                     ejpv_S1z5EVhW50bpbq3xxge2fs.roa (raw, json)
Hash identifier:          SP/eeRWsFCAamiVCk3hH2BWL/nyqnlqLe83vZlsL0BQ=
Subject key identifier:   7A:3A:6F:FD:2D:73:E4:45:61:5B:9D:1B:A5:BA:B7:C7:18:1E:D9:FB
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019AE559BCCAF997E66E33DDB0F025293FE6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ejpv_S1z5EVhW50bpbq3xxge2fs.roa
Signing time:             Wed 03 Dec 2025 17:54:14 +0000
ROA not before:           Wed 03 Dec 2025 17:54:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     401776
IP address blocks:        151.243.189.0/24 maxlen: 24
                          151.243.191.0/24 maxlen: 24
                          151.244.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e5:59:bc:ca:f9:97:e6:6e:33:dd:b0:f0:25:29:3f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Dec  3 17:54:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a3a6ffd2d73e445615b9d1ba5bab7c7181ed9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:34:af:55:ef:b7:5a:82:e5:83:0c:72:49:
                    58:c1:20:e9:09:08:08:84:1b:81:78:4f:d3:f0:2d:
                    5f:ca:bc:14:ab:57:0e:04:ce:bc:e7:36:c1:d2:5e:
                    34:ea:59:11:b7:e3:69:f0:a9:8b:7b:8e:5e:db:55:
                    36:0c:9a:67:f0:26:5c:c9:9f:9b:d6:ce:11:24:06:
                    53:ff:93:53:e2:78:25:3b:d7:28:59:3e:e0:2c:47:
                    05:fe:e8:dc:de:fe:c9:fc:70:19:b0:a1:54:34:6b:
                    b2:35:e8:3f:3f:a7:f1:67:06:ec:3c:46:31:ae:9e:
                    3a:b4:1f:93:1b:41:bf:e7:30:66:52:82:c1:9a:94:
                    ab:bb:44:e5:07:07:23:c0:e4:05:19:06:45:88:b6:
                    ce:e3:b4:57:ce:26:f8:95:bb:8a:5a:bc:8a:38:98:
                    a2:eb:9b:ae:fb:02:4b:03:11:5b:33:f5:2a:ed:df:
                    7a:bc:38:4c:22:5d:2c:6c:96:d6:a6:cc:d2:cc:a3:
                    ca:e1:4c:b1:ec:16:6b:8c:6f:3a:e4:b8:80:b3:f5:
                    7b:6d:b1:29:63:50:88:47:11:43:3a:c8:dd:5d:12:
                    e4:06:3a:82:3a:1f:6e:e4:5c:46:fa:3e:01:d2:d1:
                    5b:eb:8d:7a:1a:2e:ab:5a:bc:0c:1a:2c:b4:64:a6:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:6F:FD:2D:73:E4:45:61:5B:9D:1B:A5:BA:B7:C7:18:1E:D9:FB
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ejpv_S1z5EVhW50bpbq3xxge2fs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.243.189.0/24
                  151.243.191.0/24
                  151.244.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:bc:a8:db:39:3f:46:51:d9:52:ac:5a:83:2c:6a:80:c5:
         c4:96:b5:30:02:ac:f0:1e:31:0f:c8:48:1e:04:fd:6c:3f:fc:
         46:36:8a:97:16:ad:f6:b4:b4:aa:7f:cf:8b:3f:a9:a1:08:74:
         7a:27:df:a8:aa:ac:00:74:7b:f9:22:71:5a:cc:2f:46:78:16:
         05:94:4f:db:c6:37:69:3d:36:8a:ef:7c:59:b0:f2:c5:63:84:
         5c:ff:23:fa:f3:a7:3e:9f:3c:06:05:51:3e:1d:d2:02:15:a0:
         ff:4b:8f:03:ca:55:f1:f9:ea:c6:e5:a2:5a:b3:c3:a4:83:e1:
         52:72:dc:ce:95:0a:83:c1:a7:69:30:87:78:cc:b6:8d:8d:f1:
         2d:20:7b:e3:52:37:9c:05:2b:99:a6:55:8f:68:db:2a:ca:72:
         53:0c:7c:07:0e:cc:a3:68:58:6f:34:3f:a6:34:cd:54:d3:64:
         dd:f2:66:23:e3:d3:f5:6d:35:3b:ff:04:1b:10:3f:63:72:7b:
         9e:04:87:71:92:7e:85:39:fb:d1:11:31:67:89:42:20:d3:e8:
         d4:be:ba:43:54:0a:3c:98:7c:72:58:4f:bf:48:18:88:bc:2b:
         4a:a9:c9:66:ae:ae:19:78:ae:4c:10:5d:93:d1:d5:13:88:9b:
         38:3c:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:37:41 2025 by rpki-client