This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa
File:                     Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa (raw, json)
Hash identifier:          qQ/zUElPipJtSapfn3wrRR1KfyHaSlWeiqF/oVIx/d0=
Subject key identifier:   12:29:5B:FD:41:70:BF:B0:10:28:11:E5:20:29:8F:DA:98:22:FC:54
Certificate issuer:       /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial:       019BE0A4DE90C89463502BE10380A3A675A0
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa
Signing time:             Wed 21 Jan 2026 13:00:59 +0000
ROA not before:           Wed 21 Jan 2026 13:00:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     139648
IP address blocks:        62.216.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:a4:de:90:c8:94:63:50:2b:e1:03:80:a3:a6:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
        Validity
            Not Before: Jan 21 13:00:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12295bfd4170bfb0102811e520298fda9822fc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:59:5a:0b:e9:46:39:8f:ce:ed:d2:05:74:c7:
                    e1:e5:91:00:63:e9:67:df:73:e3:6f:c7:73:0b:00:
                    77:70:e0:37:da:60:c5:e0:26:a4:46:3e:37:2b:7b:
                    dc:47:46:ae:02:21:14:fe:c4:12:3c:bb:58:93:67:
                    86:18:d0:42:e6:a4:1e:8f:4c:21:ed:ed:e4:df:0f:
                    cc:1b:d3:6a:2f:2c:a1:01:77:35:4f:03:f0:b1:96:
                    98:82:91:bc:a0:78:bc:d8:3b:74:28:69:e2:16:42:
                    47:45:45:86:c3:28:1f:e9:74:dd:a5:20:0a:db:59:
                    62:b2:73:15:0d:40:76:08:97:3d:65:cf:0d:64:fb:
                    35:c4:6f:92:87:36:d4:6d:d5:84:92:1e:2c:65:bf:
                    4b:61:aa:6f:08:99:fc:ae:8c:92:d6:04:e0:90:5f:
                    d6:7d:2b:8c:82:91:9f:46:bb:44:15:aa:a4:9b:7f:
                    f1:fe:db:f4:9c:d6:db:a6:5b:bd:ef:40:14:35:6e:
                    fe:28:63:8e:fe:cb:f1:50:4e:64:be:0b:67:0d:31:
                    df:65:66:7c:22:7a:0d:e1:c3:1e:1f:96:7d:a8:ab:
                    30:1f:a1:02:eb:5e:0f:d3:c4:16:6b:50:05:0f:3f:
                    6f:13:68:e2:fb:83:84:ac:88:9a:97:50:4d:22:8d:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:29:5B:FD:41:70:BF:B0:10:28:11:E5:20:29:8F:DA:98:22:FC:54
            X509v3 Authority Key Identifier:
                keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Eilb_UFwv7AQKBHlICmP2pgi_FQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.216.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ce:55:33:be:a0:5e:a6:c5:77:2e:aa:3a:c2:1a:46:78:39:
         96:15:ab:21:e6:07:46:5d:f6:21:2b:9d:b1:22:ca:09:5e:c0:
         b9:94:3e:7f:68:65:ae:e6:4d:f8:a8:2a:39:e8:31:ae:e3:6b:
         a4:0f:26:f1:ac:64:d2:1a:2d:53:e1:52:e0:43:70:80:82:6e:
         d9:2b:25:cd:25:f5:64:4f:72:2a:f0:e3:ec:80:a5:97:0d:18:
         24:96:4b:35:d2:30:82:a8:47:0a:9d:a5:aa:fc:cd:29:f7:55:
         2f:3c:2d:ab:c2:22:d1:d0:fd:25:97:33:d4:32:1f:2b:79:7e:
         25:d8:fb:f3:33:ee:18:58:ec:7d:01:55:d9:72:57:0a:0f:2c:
         ac:d1:61:41:7a:5e:c7:60:89:2d:5f:1a:ee:0e:c5:74:29:c8:
         05:38:5e:56:ed:3c:e2:a3:db:31:6a:4f:7c:39:b4:f7:54:4d:
         29:00:b5:72:3c:ac:b4:f9:d6:d6:f5:d0:77:3f:69:ed:07:8e:
         a5:c5:15:9e:ac:a1:12:b4:2f:de:a3:51:a0:e8:15:ba:f6:04:
         60:3b:b8:1c:22:99:f2:5e:7f:08:81:83:43:55:e5:21:ff:72:
         65:b8:79:aa:41:6b:e7:f0:94:5f:f1:92:79:1e:52:16:e2:ee:
         a7:ac:a6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 23:34:15 2026 by rpki-client