This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/teusCgS3LurWsd8zjYQXrHloX04.roa
File:                     teusCgS3LurWsd8zjYQXrHloX04.roa (raw, json)
Hash identifier:          3awmFsX5Wn0/BjbRN3/chw8uSeDnVLCWi3foqHP86Ms=
Subject key identifier:   B5:EB:AC:0A:04:B7:2E:EA:D6:B1:DF:33:8D:84:17:AC:79:68:5F:4E
Certificate issuer:       /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial:       019B76EB096174BC09CDFE49E5005E67100C
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/teusCgS3LurWsd8zjYQXrHloX04.roa
Signing time:             Thu 01 Jan 2026 00:17:53 +0000
ROA not before:           Thu 01 Jan 2026 00:17:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211335
IP address blocks:        79.110.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:09:61:74:bc:09:cd:fe:49:e5:00:5e:67:10:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
        Validity
            Not Before: Jan  1 00:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b5ebac0a04b72eead6b1df338d8417ac79685f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:f7:35:c1:10:55:e6:4e:79:11:c7:30:0f:
                    e2:b6:9a:19:2e:cd:fe:46:ab:8f:82:37:aa:5c:f8:
                    71:26:90:1a:a9:91:76:04:36:71:fe:5a:1a:f2:27:
                    ac:28:c2:57:a6:17:3f:b2:22:f3:ed:35:f1:c4:ee:
                    73:fd:99:88:9f:9c:79:bf:b4:1e:f5:f9:76:35:b7:
                    77:0e:0c:db:6c:a0:3e:0c:da:a0:22:6b:37:0b:d8:
                    42:13:5f:c1:34:00:3c:8e:41:d8:a7:46:f2:ef:ec:
                    0a:2a:c6:87:aa:6f:88:f2:9b:24:36:1a:ec:f5:6a:
                    55:ed:c6:7f:92:ed:cf:78:d7:ed:7a:46:17:0e:b9:
                    b2:4d:bc:70:59:5e:25:cc:b1:dd:b7:61:c3:36:08:
                    74:f0:cf:1c:ac:70:76:58:d1:d3:57:97:69:9f:61:
                    26:12:c9:05:1a:99:d6:7a:96:3c:2c:3c:fb:f2:40:
                    2d:d1:d4:c8:79:a0:6b:c7:69:2c:14:cf:75:aa:1a:
                    38:31:e3:41:c1:98:75:cd:32:03:b1:ce:01:e9:7b:
                    8f:a5:3e:41:6f:c2:09:ed:90:c3:27:92:bd:66:f0:
                    e0:fc:11:02:0a:63:6a:b5:e2:f5:77:69:2d:cf:a4:
                    13:66:58:37:f1:cd:c4:06:ae:a2:1c:9c:2c:e0:17:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EB:AC:0A:04:B7:2E:EA:D6:B1:DF:33:8D:84:17:AC:79:68:5F:4E
            X509v3 Authority Key Identifier:
                keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/teusCgS3LurWsd8zjYQXrHloX04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:3d:a2:d7:c9:80:18:69:84:09:56:12:5c:35:6c:50:8c:82:
         94:d8:cc:6d:52:4e:7b:ae:83:5e:f3:3a:7f:08:88:5b:80:8e:
         7e:f2:0a:bd:9f:13:ea:2d:9a:d6:15:86:64:83:86:06:cb:61:
         6f:ba:2e:06:84:3d:7e:d3:21:1a:99:97:22:cc:94:d2:b2:9b:
         08:7e:82:80:9b:0a:63:47:f0:18:e3:c4:64:a8:cc:11:61:f9:
         36:a1:e2:77:44:88:4c:27:86:ed:b4:84:5e:20:b1:d7:a2:af:
         7c:f1:ce:e6:53:c0:8c:88:75:04:d1:45:db:3a:aa:48:b9:db:
         94:a5:5d:3b:56:4a:4a:d0:8f:e4:ea:29:f2:f0:fe:ad:c6:77:
         e7:a6:1b:e3:68:98:c2:bf:16:51:e6:9d:1b:dc:d3:c4:37:a1:
         37:41:fc:d0:e5:23:ff:28:d4:cc:30:b2:02:6e:d8:7b:73:ac:
         bf:b7:b8:b9:1d:3d:ae:d7:69:02:76:f1:85:b9:2e:3c:e1:9f:
         53:3f:8d:18:35:57:71:b2:4c:62:2f:ca:d6:f5:f1:94:1e:bc:
         4c:ec:f7:b9:4c:96:77:fa:39:1e:13:8a:8c:1f:14:39:4a:60:
         f8:01:19:0e:63:72:29:d7:d1:7e:f0:b6:b9:cc:05:79:fa:c7:
         08:33:ac:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:32 2026 by rpki-client