This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/xEzLiuXT72IlmSlpaZ1gDZgUcxA.roa
File:                     xEzLiuXT72IlmSlpaZ1gDZgUcxA.roa (raw, json)
Hash identifier:          MBkLJQWV2ZtMDdoyyRqknXzBBdtAikrUJIMeCoM/Wfw=
Subject key identifier:   C4:4C:CB:8A:E5:D3:EF:62:25:99:29:69:69:9D:60:0D:98:14:73:10
Certificate issuer:       /CN=e8477ad21cb789143313c40b19f8cc0023de88a6
Certificate serial:       019BF9B9036C948E4A652AC19693EB1CBF69
Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/xEzLiuXT72IlmSlpaZ1gDZgUcxA.roa
Signing time:             Mon 26 Jan 2026 09:53:30 +0000
ROA not before:           Mon 26 Jan 2026 09:53:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49127
IP address blocks:        86.106.75.0/24 maxlen: 24
                          2a05:cbc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:b9:03:6c:94:8e:4a:65:2a:c1:96:93:eb:1c:bf:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6
        Validity
            Not Before: Jan 26 09:53:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c44ccb8ae5d3ef6225992969699d600d98147310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:76:1a:61:65:56:e5:48:44:cc:ed:f6:a0:
                    1f:c7:d7:c9:6d:de:e6:a2:9a:26:08:77:17:c9:f5:
                    04:1a:7e:23:3e:af:f3:c0:39:40:d5:e2:74:bb:6f:
                    0e:f6:bf:09:c6:a2:3c:a9:57:3e:ec:24:43:5e:05:
                    4d:15:60:aa:e5:ee:f0:3b:ce:6a:8b:30:dc:85:4a:
                    28:ca:ed:c3:c1:80:df:5e:48:fe:7c:b2:9f:ef:4d:
                    09:ce:b8:34:3e:d1:8c:c7:f7:0a:e9:3a:52:55:b0:
                    bb:25:c8:2f:66:4e:e4:00:47:0a:34:52:b7:ec:cf:
                    24:67:a7:5f:ae:fa:53:eb:95:75:0a:f0:7a:9c:06:
                    d7:bd:df:29:53:3e:a8:1d:89:b5:13:38:03:67:c4:
                    e0:ab:9e:6b:04:98:09:ce:86:5d:f6:a8:9f:c7:e1:
                    ac:2b:73:e2:b4:f3:8e:3b:ec:f1:a0:7a:23:4b:b9:
                    7b:10:e9:79:f4:5e:8e:38:9d:b4:46:cb:bd:55:04:
                    44:18:a0:6a:9a:36:e5:62:75:ce:73:01:68:10:35:
                    09:ff:40:88:ec:da:5c:c1:ef:7f:d5:5f:95:ad:2f:
                    cd:8a:51:74:e1:99:6b:64:5a:31:3a:78:28:fd:65:
                    04:fb:e1:97:44:b0:61:4d:25:cf:65:67:5f:2d:10:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4C:CB:8A:E5:D3:EF:62:25:99:29:69:69:9D:60:0D:98:14:73:10
            X509v3 Authority Key Identifier:
                keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/xEzLiuXT72IlmSlpaZ1gDZgUcxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.75.0/24
                IPv6:
                  2a05:cbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:7c:97:bd:ed:b9:7c:0b:5a:ae:25:78:37:c8:39:6d:6a:d5:
         5f:35:27:d2:73:d3:e7:34:59:92:63:8f:b6:7d:fc:69:c0:10:
         6c:23:e2:92:6d:8d:67:32:2b:69:4f:63:f9:0b:bb:c9:4a:e4:
         e0:bb:7b:f4:11:02:3a:ec:65:bb:78:59:6c:f8:0a:64:db:6e:
         d3:d1:ce:8a:d2:1e:1b:57:1a:05:18:47:f7:18:f2:ac:ae:62:
         59:e2:2e:3b:0a:eb:54:4a:2d:57:91:f0:72:85:aa:53:6e:81:
         34:75:95:5b:3f:f4:95:a6:7c:9f:ad:2d:56:ca:33:c4:f9:5c:
         c1:7e:db:b4:f6:cd:b9:98:97:54:69:ca:b5:69:b8:24:14:8a:
         04:88:25:46:7f:97:4f:b4:53:6d:33:c7:bf:db:b3:82:b8:c6:
         bf:cd:cc:98:e6:50:aa:6e:06:f8:89:58:83:08:b8:71:bb:0a:
         2d:f5:9e:bd:fe:12:3e:52:ac:7a:f4:95:21:f5:c0:de:0d:94:
         7b:fd:d6:e4:01:ac:99:db:c6:31:79:0b:63:63:58:03:ca:9e:
         3c:f8:8c:55:c5:7d:f7:03:c4:82:bc:30:8a:46:eb:9e:98:bf:
         3f:15:45:44:64:e8:92:7b:86:e5:20:ba:f4:79:53:6f:51:e2:
         35:31:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:59:31 2026 by rpki-client