This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/euykxJ3WjspN-qBMxs7ZONHmb7U.roa
File:                     euykxJ3WjspN-qBMxs7ZONHmb7U.roa (raw, json)
Hash identifier:          TMaFLPTY6eGm7WPriyY/nMPS56Sk9q9sf1AwuMKPgDU=
Subject key identifier:   7A:EC:A4:C4:9D:D6:8E:CA:4D:FA:A0:4C:C6:CE:D9:38:D1:E6:6F:B5
Certificate issuer:       /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial:       019B7BA46330F035A200096D0748730940F9
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/euykxJ3WjspN-qBMxs7ZONHmb7U.roa
Signing time:             Thu 01 Jan 2026 22:18:49 +0000
ROA not before:           Thu 01 Jan 2026 22:18:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201213
IP address blocks:        91.199.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:63:30:f0:35:a2:00:09:6d:07:48:73:09:40:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
        Validity
            Not Before: Jan  1 22:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7aeca4c49dd68eca4dfaa04cc6ced938d1e66fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:d9:9c:72:3a:15:0e:a3:04:65:00:42:cc:
                    ee:fd:f1:e6:b1:cd:15:25:29:e4:15:0e:85:9b:6b:
                    62:47:0b:23:20:16:92:d8:e6:cd:57:2c:2f:3d:5a:
                    c7:7c:cb:c2:6c:1e:64:d0:16:9b:3f:6e:7f:4b:57:
                    d2:02:23:8a:e6:9e:c9:4a:aa:05:30:a8:55:2d:41:
                    ca:11:90:b7:1e:7d:ca:57:27:28:88:f0:14:84:ac:
                    d4:5d:b1:71:66:f1:2e:01:96:02:fe:80:51:45:5a:
                    43:66:65:b1:7b:57:c1:10:d7:8d:82:1d:34:d3:0c:
                    7a:a6:05:ba:ab:05:f9:12:1a:2e:0f:97:34:4a:8e:
                    3e:fe:98:36:3d:90:f2:4b:4d:14:ae:a8:65:f6:da:
                    f6:a3:df:f7:c9:99:1b:7c:ff:2c:c2:7b:a1:ab:65:
                    9d:72:79:0f:c3:48:c1:d6:43:ba:7e:78:79:be:63:
                    7a:68:7b:7e:07:21:71:86:6d:28:ac:7f:bc:ad:75:
                    bc:9b:aa:6b:4e:15:36:77:a8:15:94:90:df:2a:9d:
                    58:f0:b2:52:4c:7f:ff:0a:9b:85:e4:7c:cf:95:4f:
                    06:0d:74:f2:61:2e:ab:34:00:47:05:8c:10:52:d3:
                    19:47:99:2e:0b:75:b1:69:9e:22:64:57:54:af:18:
                    65:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EC:A4:C4:9D:D6:8E:CA:4D:FA:A0:4C:C6:CE:D9:38:D1:E6:6F:B5
            X509v3 Authority Key Identifier:
                keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/euykxJ3WjspN-qBMxs7ZONHmb7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:c8:47:7c:2e:dc:56:29:da:97:62:4c:cb:3f:00:cb:5d:
         92:49:5f:6d:db:f2:29:03:d9:53:18:79:17:e4:9b:1a:0e:5d:
         99:ce:10:fa:15:f5:ef:4f:1e:22:dc:33:f7:36:1c:9e:c4:48:
         87:46:0e:e0:ec:fc:04:e4:12:6d:ad:17:0c:bd:82:6b:ea:cf:
         ac:85:d0:12:62:91:ae:fd:09:18:c9:26:be:d4:07:4f:24:f4:
         8f:b3:17:14:5f:aa:cd:c4:7e:f0:43:ce:05:ce:cc:fa:45:0a:
         e1:8f:13:c6:26:98:4b:6c:f1:a0:ec:d1:b2:55:28:90:46:d2:
         87:7e:c0:b7:aa:64:89:48:a4:20:23:1c:5b:53:c2:50:cd:72:
         13:9e:8c:12:ea:e0:1a:04:e8:61:ae:61:b9:a6:60:14:d3:c1:
         a5:d2:62:6f:e0:79:d3:77:50:c2:06:24:47:37:c4:98:f8:0a:
         02:1c:8a:23:e6:4f:a0:ed:f4:b5:9f:ab:e2:a4:7b:33:fb:59:
         0c:ed:56:9f:bc:46:40:b9:23:ee:74:a9:e6:1c:36:de:f5:65:
         82:a2:29:a0:3f:83:d6:40:85:35:41:67:bc:0b:75:18:49:a8:
         93:f4:27:4b:a1:12:83:cc:72:ee:7b:15:56:c6:50:5f:48:c9:
         95:b4:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:36 2026 by rpki-client