This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/3NE1-ierdloX8nhN3iBkvRLmeck.roa
File:                     3NE1-ierdloX8nhN3iBkvRLmeck.roa (raw, json)
Hash identifier:          gQY+8HGUw14ADa6TeHXGdaEBXGR4Hxky1qeV/2hoxfs=
Subject key identifier:   DC:D1:35:FA:27:AB:76:5A:17:F2:78:4D:DE:20:64:BD:12:E6:79:C9
Certificate issuer:       /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial:       019B78A25982016CF00A858681E5C7CAD708
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/3NE1-ierdloX8nhN3iBkvRLmeck.roa
Signing time:             Thu 01 Jan 2026 08:17:44 +0000
ROA not before:           Thu 01 Jan 2026 08:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211820
IP address blocks:        94.154.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:59:82:01:6c:f0:0a:85:86:81:e5:c7:ca:d7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
        Validity
            Not Before: Jan  1 08:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dcd135fa27ab765a17f2784dde2064bd12e679c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:83:26:9d:be:f0:d9:97:a2:d4:f1:15:b7:
                    aa:60:1a:1b:28:05:7d:e6:f8:b4:24:62:5b:a5:81:
                    b2:69:e4:c2:34:f2:46:26:d9:e8:fc:7b:39:50:1b:
                    a4:95:e3:90:69:35:ca:86:f3:09:ab:69:fc:e7:06:
                    d6:ba:d9:b9:70:c3:4c:ea:6a:85:3f:38:fc:0e:f5:
                    02:aa:a5:f8:26:6c:e6:86:b4:db:e4:ea:21:e7:7e:
                    5c:55:d6:16:a6:d5:e0:aa:33:2b:28:73:b4:9f:59:
                    d6:50:ce:6c:72:41:a0:87:59:75:d3:61:c8:da:f2:
                    a7:5b:10:cb:d9:56:58:b3:55:ba:42:f1:27:ed:9b:
                    fc:96:0c:55:da:17:68:c2:4c:00:db:db:cb:c6:3c:
                    41:5f:22:56:1d:e8:8c:6d:1b:62:a4:f9:5b:00:7a:
                    dd:f4:8c:34:b1:db:00:68:31:58:1f:69:04:50:c8:
                    03:ee:5d:11:b6:ba:e9:a2:4f:a0:dd:4e:c0:31:01:
                    02:5a:ce:09:c9:0b:c2:c0:f5:c2:5d:00:73:26:9a:
                    a2:89:37:97:95:c1:2b:cb:70:19:37:66:c5:80:9f:
                    da:3e:11:b0:aa:66:bd:83:af:68:cd:36:9d:58:e6:
                    26:70:d8:6f:53:8e:15:25:e5:c3:78:34:3c:9d:14:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D1:35:FA:27:AB:76:5A:17:F2:78:4D:DE:20:64:BD:12:E6:79:C9
            X509v3 Authority Key Identifier:
                keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/3NE1-ierdloX8nhN3iBkvRLmeck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:49:2b:8e:70:aa:16:33:9c:09:58:f7:d5:e5:3a:66:57:29:
         94:45:cf:a4:ba:39:c3:31:0b:20:1f:0c:62:79:d4:f8:94:91:
         25:c6:9c:95:66:10:99:53:94:43:23:6e:26:4d:2d:a7:69:4d:
         84:42:37:cc:3b:e7:be:c1:c2:dc:76:41:43:30:e1:e2:22:db:
         23:c1:12:2c:bb:57:8e:fd:d0:4c:a4:35:df:f3:0f:db:01:c5:
         49:ed:b7:be:c4:7e:ef:63:ea:b5:d0:fc:eb:85:a0:f0:c1:f9:
         27:d1:90:82:42:89:38:15:13:b0:d2:d6:05:9e:06:58:32:44:
         d3:4b:25:60:4c:15:dc:79:aa:e0:b4:a6:87:8a:b8:bf:04:0d:
         51:b7:e1:bf:c9:4b:b8:9a:17:c3:c4:d0:ab:34:5c:d9:5b:73:
         a2:39:88:f8:22:d5:0c:67:b9:43:8a:ba:1e:ef:e2:f5:aa:65:
         bf:e2:03:b2:44:a1:f6:dd:7e:05:4c:83:21:18:f4:2d:f3:fb:
         50:ad:21:74:68:f2:c4:8a:28:ba:14:66:3e:ed:9b:84:e8:e7:
         4a:cf:be:65:8b:ed:5d:73:b5:48:41:17:46:ff:de:70:dd:92:
         10:c7:be:0f:91:b7:45:fb:5b:2d:7e:66:48:1f:43:e9:d9:1f:
         2e:88:ce:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:09 2026 by rpki-client