This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/E80jGEYfLElDqUoZ-chDRB1qCK0.roa
File:                     E80jGEYfLElDqUoZ-chDRB1qCK0.roa (raw, json)
Hash identifier:          utzWYe6st9xOk92EA2JXpbtTX4vQm0NmwUYg16KiqY4=
Subject key identifier:   13:CD:23:18:46:1F:2C:49:43:A9:4A:19:F9:C8:43:44:1D:6A:08:AD
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       019B77C757BC4183E94BC171A22B7E949D6F
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/E80jGEYfLElDqUoZ-chDRB1qCK0.roa
Signing time:             Thu 01 Jan 2026 04:18:31 +0000
ROA not before:           Thu 01 Jan 2026 04:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        62.179.128.0/17 maxlen: 17
                          92.235.0.0/19 maxlen: 19
                          92.235.32.0/21 maxlen: 21
                          92.235.40.0/21 maxlen: 21
                          92.235.49.0/24 maxlen: 24
                          92.235.50.0/23 maxlen: 23
                          92.235.52.0/22 maxlen: 22
                          92.235.56.0/21 maxlen: 21
                          92.235.96.0/19 maxlen: 19
                          92.235.128.0/17 maxlen: 17
                          94.168.128.0/17 maxlen: 17
                          2001:67c:794::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 13:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:57:bc:41:83:e9:4b:c1:71:a2:2b:7e:94:9d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Jan  1 04:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13cd2318461f2c4943a94a19f9c843441d6a08ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:45:d3:c0:3b:f4:3d:67:e6:cc:8c:91:91:
                    83:55:e7:21:3d:ac:53:a2:6d:55:39:14:14:b4:31:
                    4d:ab:d2:63:71:dc:36:1f:f4:52:ec:5b:f8:0d:55:
                    ad:ce:8b:1f:14:f9:de:05:0c:f2:6d:e7:82:01:12:
                    8c:4b:4e:4f:e7:55:cf:27:da:31:7a:b7:db:52:8c:
                    f3:f4:09:15:a6:a9:5c:6b:bb:0c:4d:10:61:48:3e:
                    61:f6:0f:83:3d:db:3e:ac:18:c0:74:2d:86:e8:3f:
                    65:e0:07:9a:67:39:ab:70:1d:c7:6c:96:65:0d:fb:
                    91:4b:cb:0f:ca:59:d9:ad:66:fe:29:b7:d2:38:98:
                    df:2f:58:ce:5c:44:38:ee:34:00:cc:56:f3:65:00:
                    80:d0:8f:a6:c9:37:f6:94:49:02:23:2d:82:59:41:
                    82:24:1d:e2:9d:12:11:e9:6d:b9:3c:21:65:b0:0e:
                    e9:c5:75:8b:c8:d7:88:97:de:1b:c6:76:0d:29:67:
                    ab:00:e2:a5:9f:35:a4:56:74:79:cf:2a:65:30:ea:
                    45:f4:1a:e0:cf:c6:b5:4b:f1:5e:2b:bc:c2:34:d5:
                    6f:ec:bf:9a:60:51:d3:f9:bf:0a:be:0f:6c:54:17:
                    e1:3e:af:30:40:57:7c:e5:b3:0d:49:cd:f5:7b:50:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CD:23:18:46:1F:2C:49:43:A9:4A:19:F9:C8:43:44:1D:6A:08:AD
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/E80jGEYfLElDqUoZ-chDRB1qCK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.179.128.0/17
                  92.235.0.0-92.235.47.255
                  92.235.49.0-92.235.63.255
                  92.235.96.0-92.235.255.255
                  94.168.128.0/17
                IPv6:
                  2001:67c:794::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:45:69:3e:f3:c6:6d:53:18:df:61:3e:e3:d6:67:0e:3e:85:
         40:d4:87:8b:0f:03:3c:14:92:8f:c2:ff:ec:9e:8b:4c:a2:41:
         0d:4e:46:d0:af:1b:bd:b5:4c:4a:33:28:92:74:41:ea:66:4e:
         24:39:58:35:80:7e:19:06:22:24:f7:2f:1f:fb:a9:39:26:cd:
         0f:d8:4d:4b:37:e9:c2:d0:c6:99:94:a0:66:b7:05:97:a1:77:
         0e:bb:38:15:94:49:ba:8d:da:66:77:db:fb:88:55:22:cd:ee:
         05:38:69:84:35:4f:f1:27:88:a0:e2:3e:8b:b1:86:76:ba:f8:
         92:e5:5c:5a:13:aa:d2:61:74:90:9e:c1:8c:25:fa:b0:27:44:
         04:4b:07:ea:4a:2d:70:36:d8:82:e5:03:f2:a1:de:e4:6d:65:
         7f:04:bc:f3:f9:4b:ae:c6:f3:bb:2f:f3:ea:c8:b1:3d:d5:a2:
         f3:bf:24:c8:9d:74:1e:25:1c:6e:3e:49:7f:04:a8:13:14:5b:
         d8:b2:0e:58:b9:6f:35:24:71:8b:60:1b:9d:20:10:70:7f:01:
         16:02:2d:29:db:3c:f5:04:20:05:5b:8b:b6:97:06:02:ef:63:
         8f:70:0c:0f:04:06:78:a3:3f:c9:be:8e:bf:34:07:5b:e4:11:
         81:8d:53:60
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZt3x1e8QYPpS8Fxoit+lJ1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2NkMjMxODQ2MWYyYzQ5NDNhOTRhMTlmOWM4NDM0NDFkNmEwOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YlF08A79D1n5syMkZGDVechPaxT
om1VORQUtDFNq9Jjcdw2H/RS7Fv4DVWtzosfFPneBQzybeeCARKMS05P51XPJ9ox
erfbUozz9AkVpqlca7sMTRBhSD5h9g+DPds+rBjAdC2G6D9l4AeaZzmrcB3HbJZl
DfuRS8sPylnZrWb+KbfSOJjfL1jOXEQ47jQAzFbzZQCA0I+myTf2lEkCIy2CWUGC
JB3inRIR6W25PCFlsA7pxXWLyNeIl94bxnYNKWerAOKlnzWkVnR5zyplMOpF9Brg
z8a1S/FeK7zCNNVv7L+aYFHT+b8Kvg9sVBfhPq8wQFd85bMNSc31e1AoEQIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFBPNIxhGHyxJQ6lKGfnIQ0QdagitMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEvRTgwakdFWWZMRWxEcVVvWi1jaERSQjFxQ0swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA6BAIAATA0AwQHPrOAMAsD
AwBc6wMEBFzrIDAMAwQAXOsxAwQGXOsAMAsDBAVc62ADAwJc6AMEB16ogDAPBAIA
AjAJAwcAIAEGfAeUMA0GCSqGSIb3DQEBCwUAA4IBAQBMRWk+88ZtUxjfYT7j1mcO
PoVA1IeLDwM8FJKPwv/snotMokENTkbQrxu9tUxKMyiSdEHqZk4kOVg1gH4ZBiIk
9y8f+6k5Js0P2E1LN+nC0MaZlKBmtwWXoXcOuzgVlEm6jdpmd9v7iFUize4FOGmE
NU/xJ4ig4j6LsYZ2uviS5VxaE6rSYXSQnsGMJfqwJ0QESwfqSi1wNtiC5QPyod7k
bWV/BLzz+UuuxvO7L/PqyLE91aLzvyTInXQeJRxuPkl/BKgTFFvYsg5YuW81JHGL
YBudIBBwfwEWAi0p2zz1BCAFW4u2lwYC72OPcAwPBAZ4oz/Jvo6/NAdb5BGBjVNg
-----END CERTIFICATE-----
Generated at Wed Jan 7 23:51:49 2026 by rpki-client