This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/EoQWf8s-UErJmlOBlPJEFo0RMEk.roa
File:                     EoQWf8s-UErJmlOBlPJEFo0RMEk.roa (raw, json)
Hash identifier:          48xv/WbSMU9QSiVIqjrBi285FOyvkViNd8lcNne/SD0=
Subject key identifier:   12:84:16:7F:CB:3E:50:4A:C9:9A:53:81:94:F2:44:16:8D:11:30:49
Certificate issuer:       /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial:       019B7E3841BDBA1E9B73A319E8519C9CE9AE
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/EoQWf8s-UErJmlOBlPJEFo0RMEk.roa
Signing time:             Fri 02 Jan 2026 10:19:34 +0000
ROA not before:           Fri 02 Jan 2026 10:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31416
IP address blocks:        2a00:18f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:41:bd:ba:1e:9b:73:a3:19:e8:51:9c:9c:e9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5164534979e60a564701232b2e5200889542606
        Validity
            Not Before: Jan  2 10:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1284167fcb3e504ac99a538194f244168d113049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a9:57:f5:26:06:98:15:b8:15:b7:1e:f5:8d:
                    d5:4d:e1:6e:5d:41:64:44:7a:08:0f:9c:77:87:1f:
                    3a:fb:70:65:fc:1f:5d:23:93:b8:83:03:08:93:d6:
                    c4:16:cd:7f:93:08:a1:11:97:24:0b:aa:b9:53:79:
                    be:0e:54:78:93:fd:53:fe:c6:97:f3:9c:e2:19:e7:
                    a2:2a:80:1b:9b:3b:d9:31:00:1f:dd:29:bd:a3:11:
                    b0:cc:41:47:b2:61:97:cd:37:ad:f3:fb:3b:7c:bf:
                    31:06:8f:03:00:e4:04:18:0d:e0:a0:2d:44:60:0f:
                    86:fa:83:f2:09:6c:9c:28:32:f4:86:4b:46:0d:34:
                    44:33:81:a7:e7:06:92:99:72:1d:f1:7b:91:1f:bf:
                    89:fd:10:05:93:dc:02:7e:53:a6:72:35:7b:d8:6f:
                    db:0a:73:07:09:5f:74:13:27:ec:66:9e:8c:53:5f:
                    ea:8d:9f:21:50:66:b4:3c:09:06:ce:53:82:03:29:
                    13:db:03:6b:ad:59:1b:ac:61:a9:4e:cd:63:b4:d6:
                    79:58:d2:71:91:f1:af:81:e9:0a:f4:cb:39:9f:08:
                    0e:94:29:64:13:92:4d:6e:87:a6:a0:60:b4:cb:0d:
                    5f:e2:77:0b:2c:36:e4:b7:81:61:8f:0a:e2:6a:52:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:84:16:7F:CB:3E:50:4A:C9:9A:53:81:94:F2:44:16:8D:11:30:49
            X509v3 Authority Key Identifier:
                keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/EoQWf8s-UErJmlOBlPJEFo0RMEk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:18f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:62:7d:88:1b:19:10:4c:90:37:1d:74:04:6a:c8:be:f3:a4:
         e3:0c:52:78:8a:04:c6:62:b8:9c:87:08:99:e7:b2:07:49:25:
         80:fc:ca:1d:6e:6f:e5:67:bf:40:ca:57:9d:6e:a8:21:94:8d:
         62:52:62:17:25:9c:5b:42:1e:59:92:90:65:96:a4:91:12:31:
         4b:04:63:60:92:90:86:d7:98:36:80:0f:1f:c4:4c:0b:8b:af:
         f1:1b:9f:e7:6a:b9:89:10:b5:c2:03:e1:37:99:7b:00:f4:48:
         99:7d:4f:51:80:d9:48:9a:39:37:45:83:6f:01:5b:5f:38:1d:
         db:58:67:96:be:32:59:f9:08:8f:52:f3:15:aa:82:15:e5:aa:
         8f:5f:3e:24:13:ec:bf:a0:64:26:ac:15:9c:ec:42:2d:28:75:
         25:d8:f5:d2:fc:40:15:1e:ea:eb:96:0f:b0:3f:a6:26:d2:2d:
         1c:3c:aa:eb:15:ae:6e:e1:cb:a6:44:85:31:96:89:38:d0:92:
         b9:e2:6f:05:1e:c4:49:87:ed:db:89:98:45:be:04:b9:c9:c9:
         41:ea:28:c4:6e:6e:c7:f8:3b:3e:bc:11:6e:5b:fc:1f:44:b0:
         df:46:9b:35:85:0c:5a:2c:44:1d:4a:cf:6b:8a:1c:c5:10:7b:
         ef:31:72:1a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt+OEG9uh6bc6MZ6FGcnOmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MTY0NTM0OTc5ZTYwYTU2NDcwMTIzMmIyZTUyMDA4ODk1
NDI2MDYwHhcNMjYwMTAyMTAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjg0MTY3ZmNiM2U1MDRhYzk5YTUzODE5NGYyNDQxNjhkMTEzMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qlX9SYGmBW4Fbce9Y3VTeFuXUFk
RHoID5x3hx86+3Bl/B9dI5O4gwMIk9bEFs1/kwihEZckC6q5U3m+DlR4k/1T/saX
85ziGeeiKoAbmzvZMQAf3Sm9oxGwzEFHsmGXzTet8/s7fL8xBo8DAOQEGA3goC1E
YA+G+oPyCWycKDL0hktGDTREM4Gn5waSmXId8XuRH7+J/RAFk9wCflOmcjV72G/b
CnMHCV90EyfsZp6MU1/qjZ8hUGa0PAkGzlOCAykT2wNrrVkbrGGpTs1jtNZ5WNJx
kfGvgekK9Ms5nwgOlClkE5JNboemoGC0yw1f4ncLLDbkt4FhjwrialJWbQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBKEFn/LPlBKyZpTgZTyRBaNETBJMB8GA1UdIwQY
MBaAFOUWRTSXnmClZHASMrLlIAiJVCYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEt
ZDFlZWIyOWM5NTFiLzEvRW9RV2Y4cy1VRXJKbWxPQmxQSkVGbzBSTUVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEtZDFlZWIyOWM5NTFi
LzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgAY+DAN
BgkqhkiG9w0BAQsFAAOCAQEAU2J9iBsZEEyQNx10BGrIvvOk4wxSeIoExmK4nIcI
meeyB0klgPzKHW5v5We/QMpXnW6oIZSNYlJiFyWcW0IeWZKQZZakkRIxSwRjYJKQ
hteYNoAPH8RMC4uv8Ruf52q5iRC1wgPhN5l7APRImX1PUYDZSJo5N0WDbwFbXzgd
21hnlr4yWfkIj1LzFaqCFeWqj18+JBPsv6BkJqwVnOxCLSh1Jdj10vxAFR7q65YP
sD+mJtItHDyq6xWubuHLpkSFMZaJONCSueJvBR7ESYft24mYRb4EucnJQeooxG5u
x/g7PrwRblv8H0Sw30abNYUMWixEHUrPa4ocxRB77zFyGg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:18 2026 by rpki-client