This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/E0WOservMgR3JKWcCGOeeSVBFRU.roa
File:                     E0WOservMgR3JKWcCGOeeSVBFRU.roa (raw, json)
Hash identifier:          wh3qW4F8kxypeloNC06p2uUoMCHJdfMPgMolntJXb0k=
Subject key identifier:   13:45:8E:B1:EA:EF:32:04:77:24:A5:9C:08:63:9E:79:25:41:15:15
Certificate issuer:       /CN=48a2e811f00bae16a447423f11e24217142cff7c
Certificate serial:       019B7BA5414B206EF6C5052188ED63B4E912
Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/E0WOservMgR3JKWcCGOeeSVBFRU.roa
Signing time:             Thu 01 Jan 2026 22:19:46 +0000
ROA not before:           Thu 01 Jan 2026 22:19:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216393
IP address blocks:        89.37.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:41:4b:20:6e:f6:c5:05:21:88:ed:63:b4:e9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c
        Validity
            Not Before: Jan  1 22:19:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13458eb1eaef32047724a59c08639e7925411515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:71:8d:ef:73:6b:a0:f0:cc:5f:5d:9f:74:
                    f9:98:74:ad:fa:d2:3c:2c:a4:db:5f:82:7b:32:c0:
                    4b:4f:e6:1b:d5:e5:72:98:f4:00:ce:ec:58:c2:f0:
                    00:a4:cf:0e:74:7c:50:42:50:85:6c:d6:ea:ec:e6:
                    ee:1b:8a:e9:57:c3:7c:75:89:d3:72:c5:8e:e8:cf:
                    6b:e0:2e:c4:92:48:5d:30:e7:1b:aa:75:13:86:9a:
                    af:43:a2:4e:fa:bf:b8:60:98:00:25:36:14:98:69:
                    4b:33:43:0c:5f:da:10:94:8d:5c:e0:9f:99:b9:a6:
                    12:bd:17:34:ee:d8:df:b5:3a:cc:41:a3:d6:69:9b:
                    65:a9:b5:f4:f8:ff:f9:c4:eb:11:95:a2:1d:87:3b:
                    38:43:2c:55:c8:b5:94:ab:a0:0a:20:da:1d:ac:1e:
                    37:0f:ea:56:2c:f0:6d:e4:f5:86:27:8a:82:5e:18:
                    33:85:f9:46:32:28:8a:3e:67:4d:cc:b7:d4:91:7b:
                    97:ed:dd:f0:ce:18:b2:97:5d:c2:27:c8:6a:25:c7:
                    6a:0a:6c:b3:01:69:fc:f1:01:8f:fc:b2:f8:81:13:
                    28:70:70:24:89:d7:ca:aa:d5:0a:40:2b:c3:84:a7:
                    84:c4:e3:cd:a0:00:05:d1:4c:02:28:13:39:1b:38:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:45:8E:B1:EA:EF:32:04:77:24:A5:9C:08:63:9E:79:25:41:15:15
            X509v3 Authority Key Identifier:
                keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/E0WOservMgR3JKWcCGOeeSVBFRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.37.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:64:6f:2d:16:f9:bc:cf:1e:d7:f6:80:1c:2d:70:b6:03:
         95:c6:f7:0e:0e:09:ab:71:ca:c0:ea:cd:8b:32:24:b5:ba:87:
         c9:de:c9:2b:86:0b:76:b0:31:4d:29:4f:c9:83:68:84:89:fa:
         c4:bf:6a:5e:81:f8:f6:86:2a:c6:ac:27:13:4b:6b:58:07:a4:
         6b:be:07:de:dc:b2:98:21:b6:e6:fb:23:ea:5b:fb:cc:f1:dd:
         0d:99:cf:74:1f:ef:51:ae:11:41:19:6c:c3:f4:54:d9:4a:6a:
         fd:f1:11:6e:02:68:7c:1f:56:5c:48:56:a2:00:bb:98:34:dd:
         79:e6:e3:8c:51:08:c0:6d:97:30:5e:0c:04:5c:3a:e0:a5:85:
         da:7d:0d:c1:10:4d:21:12:60:35:0f:f5:80:9f:4f:97:9c:7b:
         35:df:aa:54:cc:b7:af:58:ee:90:94:0d:0b:f7:e2:89:d4:81:
         29:cf:8d:01:df:93:59:2a:ff:98:6d:d8:74:7f:7f:93:53:04:
         3c:fe:51:73:5e:a6:8a:e9:f8:c8:ae:2d:5e:2d:ee:d5:89:97:
         e3:72:d5:3f:a6:37:ef:17:ce:e6:fc:e7:e6:6e:a0:57:ba:12:
         35:8a:b5:9e:29:d9:02:b9:d9:82:1d:c0:74:f7:f2:67:6b:c4:
         ed:d7:1e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:43:41 2026 by rpki-client