This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eqwxW_73SsfybtamGFjU8BT6lss.roa
File:                     eqwxW_73SsfybtamGFjU8BT6lss.roa (raw, json)
Hash identifier:          eZIEEacqr0QeRaw//AWmV7fNo+uhUfn87QEEoeHj8N4=
Subject key identifier:   7A:AC:31:5B:FE:F7:4A:C7:F2:6E:D6:A6:18:58:D4:F0:14:FA:96:CB
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       019B79102D80EE2DE24C899EB6A490BB2C46
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eqwxW_73SsfybtamGFjU8BT6lss.roa
Signing time:             Thu 01 Jan 2026 10:17:41 +0000
ROA not before:           Thu 01 Jan 2026 10:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61317
IP address blocks:        80.246.225.0/24 maxlen: 24
                          80.246.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:2d:80:ee:2d:e2:4c:89:9e:b6:a4:90:bb:2c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jan  1 10:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7aac315bfef74ac7f26ed6a61858d4f014fa96cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:ca:df:77:70:c1:e6:1e:68:1f:66:28:b0:
                    b4:f6:44:d7:a5:e0:d6:49:fe:a2:ba:56:2e:fb:ee:
                    a5:a8:90:dc:ba:bd:2b:54:5b:8e:6d:e8:89:ff:26:
                    63:3d:5d:c4:9c:53:75:96:8a:89:f2:13:70:73:5d:
                    6f:34:f3:e0:20:3f:d5:8d:27:59:ea:99:d6:ac:09:
                    76:29:34:55:66:d9:7d:44:24:6f:2f:b1:76:da:d8:
                    21:b3:d3:cf:69:52:62:a4:62:af:ba:0a:31:5b:7f:
                    1f:0e:23:8a:55:32:1f:e2:76:87:dc:03:13:81:45:
                    32:c7:6b:61:84:ba:f8:75:a9:41:b7:4f:b1:16:d2:
                    7c:63:78:68:09:83:f0:bb:b2:e9:c1:98:32:ea:48:
                    99:68:cc:af:44:da:4b:73:98:d0:c6:4b:67:99:92:
                    c0:0e:8a:d4:ce:3d:24:72:b4:a3:83:55:42:b0:ab:
                    16:12:6b:ae:1d:c2:87:d0:ea:4f:3d:0c:9b:82:dd:
                    c3:20:68:16:72:3a:a6:e8:8e:38:21:97:b0:e2:4a:
                    f1:33:33:f3:fb:0e:14:ba:22:3f:5f:25:e5:0d:98:
                    69:45:60:b7:87:8e:4e:e1:e6:95:44:0f:6b:4f:c3:
                    7c:47:40:cc:aa:c5:89:2b:da:2a:9e:01:c0:e5:df:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AC:31:5B:FE:F7:4A:C7:F2:6E:D6:A6:18:58:D4:F0:14:FA:96:CB
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eqwxW_73SsfybtamGFjU8BT6lss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.225.0/24
                  80.246.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:ba:de:04:bf:07:8a:0a:84:c7:18:71:7f:34:40:d1:9b:ee:
         75:fa:4f:0e:c8:91:57:e9:a6:04:92:1e:31:d1:ca:af:df:a2:
         72:63:97:ba:5f:82:1f:32:69:54:a2:58:38:bc:e5:6c:1c:63:
         e6:b4:64:59:69:aa:d3:4d:53:05:29:14:4a:5d:2c:95:2c:31:
         2d:d3:01:5b:a5:84:1a:a8:1b:30:8b:75:b1:ca:2d:92:6e:e3:
         6d:b0:2c:11:73:6f:83:9e:eb:11:b6:28:f9:84:f7:22:60:46:
         38:fc:5d:40:48:5f:b9:d2:fe:02:58:d5:80:97:f0:ae:ce:db:
         71:cb:02:76:f9:12:33:75:8e:a3:b4:fe:f5:fa:13:a8:1c:1c:
         b3:ac:33:f6:36:26:1e:ba:54:74:3e:03:d2:a0:9e:83:4c:73:
         f9:1e:db:76:86:7e:ab:4a:1f:eb:56:59:f2:83:80:e1:d9:62:
         23:c3:a9:7c:19:80:26:cf:e7:1c:3f:44:84:42:4e:ab:31:3b:
         d8:92:fa:67:15:04:c0:71:4c:71:0d:42:75:40:e5:b2:20:51:
         f5:7b:3b:c3:87:89:c2:f7:df:5a:3d:95:35:70:53:b4:fc:ad:
         67:75:6b:ed:d4:8c:aa:37:8e:4f:7c:17:a1:f3:dc:aa:76:ab:
         93:8e:27:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 12:55:34 2026 by rpki-client