This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EazaKvE8Pin1pEeSGyAhliKbeBs.roa
File:                     EazaKvE8Pin1pEeSGyAhliKbeBs.roa (raw, json)
Hash identifier:          +dskl+ubgLgBT0so/P7DjCeRkWnhYiZfQ6nAv8gy0NM=
Subject key identifier:   11:AC:DA:2A:F1:3C:3E:29:F5:A4:47:92:1B:20:21:96:22:9B:78:1B
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       019B7E37E6CACF44996E59BAA1C60BBEED86
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EazaKvE8Pin1pEeSGyAhliKbeBs.roa
Signing time:             Fri 02 Jan 2026 10:19:11 +0000
ROA not before:           Fri 02 Jan 2026 10:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43754
IP address blocks:        178.239.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:e6:ca:cf:44:99:6e:59:ba:a1:c6:0b:be:ed:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Jan  2 10:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=11acda2af13c3e29f5a447921b202196229b781b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:da:0e:4d:05:31:4d:fe:c4:18:61:17:cb:
                    70:2d:5f:2b:e4:37:db:84:9c:13:17:bc:54:7b:3f:
                    73:c2:3b:56:91:61:4b:74:8b:4a:7b:79:5e:52:99:
                    62:25:22:94:b9:e0:cd:cc:4d:8a:e9:56:19:fd:41:
                    3a:6c:ae:7a:3f:94:85:0b:9b:d5:28:bf:b2:7f:0f:
                    37:de:f9:2d:1f:89:78:b8:c5:9c:ef:31:88:8e:63:
                    80:85:4e:0e:d7:83:c9:54:5d:66:67:3b:13:c7:a0:
                    da:83:b7:5b:e3:85:d3:f6:9a:6d:d5:e1:4e:8b:4e:
                    e4:bc:c5:42:4f:e8:8c:27:c1:b5:fc:81:cb:d2:37:
                    a4:ad:05:ba:d1:14:d9:09:97:3a:e7:b3:30:75:ba:
                    90:f1:39:70:43:60:82:a0:40:8f:d0:6b:2a:d9:7c:
                    18:fc:29:f4:0a:52:03:2a:41:55:d7:df:b8:10:d3:
                    6e:0f:a3:ec:f0:33:2d:3d:55:c2:d9:66:2a:40:ac:
                    5e:ec:4e:1c:87:2e:f6:b8:f1:2f:b9:e5:10:29:2b:
                    ba:6e:7e:ac:2b:05:6a:17:aa:96:6e:a0:d9:14:42:
                    19:a1:be:ca:5b:df:46:77:8b:a2:67:2f:91:4a:a9:
                    3f:e3:85:22:1e:d4:31:06:98:13:5b:38:15:5a:22:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AC:DA:2A:F1:3C:3E:29:F5:A4:47:92:1B:20:21:96:22:9B:78:1B
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EazaKvE8Pin1pEeSGyAhliKbeBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.239.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:ff:87:b2:5a:48:fa:ca:ed:ec:ba:e4:d9:20:0f:ea:24:
         2c:a3:02:b4:2d:fa:45:0f:c0:66:a5:1e:7d:5b:db:77:84:a0:
         82:15:67:85:1f:28:d0:de:a0:54:cb:7c:e3:0f:52:63:5c:af:
         48:d5:51:f8:ad:be:3a:aa:81:92:a8:b2:99:64:7e:f5:b5:53:
         38:99:ba:74:57:d5:9f:fd:ce:97:6e:8c:03:6e:55:dd:b5:fb:
         64:1c:29:dc:8d:2a:c5:09:38:7d:8b:f7:59:f0:cc:0e:8e:95:
         92:3c:43:b0:1d:f6:ec:23:d6:2c:22:79:1e:ec:d5:8d:68:14:
         15:e1:3b:04:9a:94:87:2c:88:f5:c2:eb:a4:3f:c3:13:df:26:
         52:85:11:e1:cd:f5:4b:d5:a8:b2:97:80:7e:0b:dc:01:67:58:
         11:2c:c1:c5:b8:e1:c7:58:d2:b3:37:db:30:83:c1:6f:78:ec:
         20:5a:77:ed:80:31:a5:60:05:06:0b:5e:38:80:bb:ae:67:ed:
         75:72:c1:91:a3:0b:47:f9:a6:61:0e:64:a8:4b:99:3a:53:fd:
         c0:5b:6b:d4:91:ad:08:8f:4a:23:a6:ff:66:5e:13:ef:30:8b:
         1b:4c:38:38:04:42:8c:7f:e4:19:26:28:19:d7:df:a6:58:af:
         a0:1c:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:33:19 2026 by rpki-client