This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/eNko5h0Tp_p7b7ugEBiQkhXOA20.roa
File:                     eNko5h0Tp_p7b7ugEBiQkhXOA20.roa (raw, json)
Hash identifier:          OK0LXbnfUa5IYm60HKsaC15u0Y3K/9dXchk7SJSUYf0=
Subject key identifier:   78:D9:28:E6:1D:13:A7:FA:7B:6F:BB:A0:10:18:90:92:15:CE:03:6D
Certificate issuer:       /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial:       019B7C80C5065C148D90BAC23AA225BDC9B2
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/eNko5h0Tp_p7b7ugEBiQkhXOA20.roa
Signing time:             Fri 02 Jan 2026 02:19:32 +0000
ROA not before:           Fri 02 Jan 2026 02:19:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48294
IP address blocks:        195.137.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:c5:06:5c:14:8d:90:ba:c2:3a:a2:25:bd:c9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
        Validity
            Not Before: Jan  2 02:19:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78d928e61d13a7fa7b6fbba01018909215ce036d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:ef:c5:5c:7c:23:05:a1:00:09:0b:87:8e:
                    ba:95:c8:b7:29:db:eb:5e:42:39:ed:16:e4:78:7c:
                    25:07:d0:3e:e9:a0:9a:7b:90:93:8e:6c:c3:09:a9:
                    17:29:cb:e1:5d:77:62:d6:cd:51:0f:77:61:20:14:
                    27:47:74:23:5d:83:55:3e:cf:0c:e5:b6:99:73:a2:
                    c0:94:86:9e:b3:63:cf:d0:c8:3f:f1:0c:03:2e:df:
                    6e:52:ec:f5:f3:a3:76:a7:9d:b6:b7:d3:1a:13:51:
                    0c:b7:82:1c:53:5c:b5:4c:25:ee:72:65:83:0a:d7:
                    a5:50:57:17:10:78:ff:b2:cf:2c:73:23:8b:70:07:
                    de:9a:21:3b:47:8b:6a:2a:c2:cb:57:49:e5:8c:89:
                    48:ec:a0:1b:50:92:19:db:d3:05:e1:1d:1f:88:df:
                    ed:50:c3:5b:fb:f8:67:f7:2a:8e:0d:ae:5d:b0:b8:
                    51:a0:41:16:31:f9:15:bf:bb:50:50:7e:73:f1:91:
                    9a:0d:4b:03:12:35:ce:3c:d9:e5:f4:f1:97:94:34:
                    0b:90:ef:a2:6c:0c:af:6e:20:1a:11:6b:e4:c0:be:
                    c9:68:9c:fe:79:d2:53:72:ff:b9:e8:8f:bd:71:f8:
                    a8:6c:56:98:be:3e:ea:c6:dd:62:bc:5b:6c:70:d5:
                    d9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D9:28:E6:1D:13:A7:FA:7B:6F:BB:A0:10:18:90:92:15:CE:03:6D
            X509v3 Authority Key Identifier:
                keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/eNko5h0Tp_p7b7ugEBiQkhXOA20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.137.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:72:80:57:9a:6b:cc:3d:90:13:cd:37:1a:e4:5b:52:23:6c:
         68:de:84:58:70:82:53:eb:68:5b:6a:5a:0c:86:2b:44:44:81:
         74:15:5f:98:27:36:81:b5:d9:73:c1:fc:32:8a:eb:1d:df:81:
         94:d4:76:38:30:06:7e:07:0f:4e:e4:2b:6d:42:9c:21:dd:67:
         09:0f:77:18:b5:37:0c:72:76:f9:b6:c6:d6:ea:ec:78:b2:66:
         bb:bb:f2:7a:10:95:3e:72:65:e3:36:4f:dd:f5:f0:c3:18:64:
         41:27:69:ce:cf:b7:1c:b5:b1:56:08:14:24:59:42:32:6a:f9:
         ed:ec:e1:81:e2:d9:f9:23:13:87:46:af:ea:c5:02:cf:9a:dd:
         a3:87:91:23:71:68:0e:4e:1b:17:13:d0:b1:fe:50:2e:7d:8b:
         94:97:10:d8:8c:9b:e4:a9:e4:ef:28:d4:b9:78:a9:bd:c6:37:
         7e:a8:60:a0:15:a2:75:ab:48:98:a6:57:88:bc:82:2b:2b:59:
         27:4d:16:f4:a7:43:2e:82:b4:3a:04:a2:69:cc:29:10:2d:c2:
         f5:91:96:42:83:cd:80:75:50:82:8f:28:9c:79:e3:c3:6b:b4:
         7b:aa:b3:ce:4e:37:00:33:b0:60:9a:21:6a:83:f1:d4:71:c1:
         c9:e3:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:11 2026 by rpki-client