This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/EIJhIjJtEMnHVUQ212bTckjgB0I.roa
File:                     EIJhIjJtEMnHVUQ212bTckjgB0I.roa (raw, json)
Hash identifier:          EybXD780CwAqGIpHjiQwUZRlhbfLzk1+eybY/uGp/io=
Subject key identifier:   10:82:61:22:32:6D:10:C9:C7:55:44:36:D7:66:D3:72:48:E0:07:42
Certificate issuer:       /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial:       019B7B3553CB8D707A233C741499B019160C
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/EIJhIjJtEMnHVUQ212bTckjgB0I.roa
Signing time:             Thu 01 Jan 2026 20:17:30 +0000
ROA not before:           Thu 01 Jan 2026 20:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62429
IP address blocks:        31.24.87.0/24 maxlen: 24
                          185.124.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:53:cb:8d:70:7a:23:3c:74:14:99:b0:19:16:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
        Validity
            Not Before: Jan  1 20:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=10826122326d10c9c7554436d766d37248e00742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:96:61:70:13:a7:44:62:15:a7:a6:24:43:
                    40:90:e0:ce:b6:37:e1:55:6e:6c:b7:98:2b:ad:da:
                    8e:e9:ab:ac:36:e3:64:e8:b4:0e:17:ea:8b:dd:81:
                    04:e6:95:65:d4:d0:c4:ff:81:a8:84:72:17:3d:ee:
                    95:05:0b:ba:63:92:b2:fb:b1:fd:38:d0:82:da:22:
                    62:b1:e8:94:4a:f6:df:44:49:41:6a:8f:a2:20:cf:
                    2a:c7:6b:1a:0d:0e:11:ef:3b:73:5a:8a:c9:76:8c:
                    aa:ad:e8:ed:a4:61:92:da:fe:78:f8:d2:09:db:d3:
                    f4:15:2b:0b:35:5c:be:0c:07:fb:ae:e9:c3:e2:a9:
                    5f:d4:ee:27:1d:15:4e:22:6d:73:b3:70:85:d2:d7:
                    82:57:04:b4:ae:9b:4f:8b:41:f7:a2:60:58:a9:dc:
                    39:25:39:29:9e:1a:f8:3a:06:2e:78:98:65:38:9e:
                    cd:d8:ad:23:30:95:58:c6:ed:42:fc:8f:e0:56:e3:
                    7f:05:ae:8c:ae:8b:6c:9b:cb:18:42:cd:cc:5e:c0:
                    fd:6b:1b:ff:4c:cc:03:6c:ed:ee:0c:31:8b:46:96:
                    75:90:04:81:4a:c0:cb:84:91:e0:a4:05:b8:63:dc:
                    35:36:84:b5:d4:cd:29:66:be:51:8c:5f:6b:85:b0:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:82:61:22:32:6D:10:C9:C7:55:44:36:D7:66:D3:72:48:E0:07:42
            X509v3 Authority Key Identifier:
                keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/EIJhIjJtEMnHVUQ212bTckjgB0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.87.0/24
                  185.124.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:38:b3:8c:ed:da:c2:76:23:96:52:01:a0:cc:26:6d:77:2c:
         62:64:e6:bb:4b:3b:e6:4a:b7:99:34:47:ed:9c:c0:95:62:bc:
         db:1a:a1:a5:fa:16:54:cc:e1:47:1d:01:6f:7c:a4:c3:3b:3c:
         36:8b:75:a9:39:e2:e9:d7:0a:e2:dd:75:97:d3:02:90:65:19:
         1a:2a:dd:59:4b:59:13:74:1e:18:60:3e:20:3a:86:23:3b:d8:
         cd:1a:3d:cb:9d:9c:d9:02:15:49:2a:29:ba:71:86:70:63:2f:
         ec:5e:f4:bf:fa:f6:9f:38:c9:c1:2d:f5:ce:19:4e:24:13:51:
         be:9d:4e:f6:ca:08:e2:24:8c:f5:b6:5e:4d:52:f5:ba:aa:f9:
         4a:4d:01:9a:70:d5:84:d7:57:f4:7b:c9:76:01:88:ce:24:8c:
         27:08:d0:e3:e7:f9:57:24:ec:0f:fb:df:c4:ae:fb:c1:b3:37:
         b5:82:79:0a:2b:ab:f7:55:e0:27:ef:d8:3f:e0:d6:2d:a3:ab:
         b5:68:94:51:67:09:86:47:8c:cc:24:1b:da:c7:9d:a9:64:e5:
         01:c4:88:4c:ce:5d:74:a9:18:22:04:d0:8a:3f:d9:fd:f2:cb:
         69:2f:5f:8b:12:a4:76:14:27:77:69:0c:dd:0f:38:af:be:eb:
         c3:dc:00:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:25:48 2026 by rpki-client