This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa
File:                     eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa (raw, json)
Hash identifier:          KqnBx9Z7NrcBEhqssBHFNIjBHPFvdg987eaQWuWEZFQ=
Subject key identifier:   78:41:7F:CE:A0:14:C5:9A:17:AA:FF:C0:16:F9:A2:2F:73:FF:36:0E
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       019B79107E2E0E02FF08D610BAF8D59DEA0F
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa
Signing time:             Thu 01 Jan 2026 10:18:02 +0000
ROA not before:           Thu 01 Jan 2026 10:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9009
IP address blocks:        45.147.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:7e:2e:0e:02:ff:08:d6:10:ba:f8:d5:9d:ea:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jan  1 10:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78417fcea014c59a17aaffc016f9a22f73ff360e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:be:b5:28:00:38:ea:12:c9:e9:d7:18:c6:
                    c7:98:3a:50:1c:50:40:4b:81:dc:d9:06:af:d4:f5:
                    ba:4a:a7:91:a0:b2:5e:7c:3d:fb:75:ba:db:1e:e5:
                    80:fa:e7:c1:5e:a9:f4:9a:8e:0c:d2:8a:28:a4:d7:
                    67:2a:d3:2a:47:ca:05:40:62:46:a3:4f:e3:69:94:
                    d9:ca:8c:40:6e:c0:b8:d2:eb:a0:60:4f:f3:dc:c1:
                    30:1e:b5:ae:72:9f:7a:e3:b7:03:87:e0:f8:f6:96:
                    c2:14:b1:1c:b8:56:0a:9a:de:84:8b:ea:d1:44:21:
                    5b:67:64:d1:8a:84:da:fd:f5:36:4b:a4:56:8a:78:
                    79:1e:37:43:e4:ea:58:20:c6:9f:76:ca:1a:61:95:
                    7c:82:bc:69:76:76:67:5d:d2:63:a4:cb:90:2a:45:
                    3a:12:31:bf:cd:50:ed:da:03:50:14:41:a2:95:e7:
                    b1:57:18:8b:33:6d:49:c7:85:38:bd:5b:51:d3:57:
                    18:1d:ea:2a:48:77:55:be:2f:87:af:eb:88:18:a5:
                    cb:6e:99:86:cb:4d:a3:22:0b:87:f8:f2:62:6e:10:
                    b0:b7:76:13:71:08:75:95:1b:36:68:49:df:84:d7:
                    8c:65:e3:3d:f8:6d:9e:37:93:4d:ad:a2:ad:15:55:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:41:7F:CE:A0:14:C5:9A:17:AA:FF:C0:16:F9:A2:2F:73:FF:36:0E
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eEF_zqAUxZoXqv_AFvmiL3P_Ng4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:3a:9a:e3:e8:b5:40:73:c0:ef:dc:53:3d:ce:28:4f:26:52:
         87:d4:47:f2:ce:fb:de:79:a7:71:f2:2a:e6:bd:49:4a:90:c6:
         b8:b3:5d:da:09:80:39:33:3c:8a:5a:19:a2:e4:fc:60:6e:e4:
         b2:8a:b8:0e:92:5a:f2:7e:6a:74:dd:35:68:80:ea:dd:ec:51:
         6c:d9:3f:2d:5e:04:37:2f:1b:ca:5c:01:c7:36:da:60:96:20:
         23:19:80:7e:42:fd:f9:a5:68:26:33:38:8b:c4:6a:ef:1f:3a:
         d1:29:ac:fc:ae:47:e3:15:21:e3:30:2a:dd:5b:8b:83:52:b2:
         fe:07:77:bf:8c:4a:d3:3f:20:0c:77:6f:7f:ef:63:6c:ce:53:
         b2:5f:45:ed:16:39:3f:e1:3d:21:dd:eb:40:4e:f3:39:40:64:
         64:7d:bb:62:5a:4b:f0:f7:11:06:e2:07:89:62:e9:42:4f:f5:
         37:bd:60:6e:aa:49:7e:d9:2a:64:41:70:49:e7:2e:6e:60:37:
         b5:57:3f:bf:7c:6c:c1:0e:65:28:49:e9:d4:77:a1:11:32:48:
         8f:bd:49:ed:ed:77:bf:6c:36:7f:11:6b:fd:e7:c3:ea:d3:dc:
         5e:2b:fa:49:85:40:97:e6:97:76:61:5e:8e:f6:b6:b3:41:07:
         1e:27:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:42 2026 by rpki-client