This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/EfI-nVg-gzX72QHAmuNUE9UONIE.roa
File:                     EfI-nVg-gzX72QHAmuNUE9UONIE.roa (raw, json)
Hash identifier:          F34ZMPc5oOuMmxzLojo59c5ASQW3Fq2frpLTOK9Elho=
Subject key identifier:   11:F2:3E:9D:58:3E:83:35:FB:D9:01:C0:9A:E3:54:13:D5:0E:34:81
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       019B7BA4F98F8CC3790A30B301E816DED6C6
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/EfI-nVg-gzX72QHAmuNUE9UONIE.roa
Signing time:             Thu 01 Jan 2026 22:19:27 +0000
ROA not before:           Thu 01 Jan 2026 22:19:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214776
IP address blocks:        212.110.141.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:f9:8f:8c:c3:79:0a:30:b3:01:e8:16:de:d6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Jan  1 22:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=11f23e9d583e8335fbd901c09ae35413d50e3481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:32:48:7e:00:80:a9:66:eb:b2:eb:b8:34:
                    a9:9a:53:45:a3:f8:2a:03:b8:cc:7c:ba:af:a4:bb:
                    c9:78:e0:c2:0e:70:95:f4:72:0d:46:4e:c5:85:b2:
                    fb:a4:09:03:b9:2a:88:7a:5f:ef:bb:f3:c6:ef:89:
                    23:8f:22:a4:b6:04:55:ea:a5:b6:09:99:c3:ea:4a:
                    16:f8:b9:3a:0c:dc:7c:3c:1c:b5:c7:5e:42:0b:2f:
                    ab:d8:c7:40:cf:f3:7c:83:64:8f:18:f4:8a:07:c8:
                    9f:61:de:b9:35:1c:fa:8b:e2:3c:b8:6a:e3:3c:bb:
                    19:a2:74:f2:47:a3:da:68:c8:d9:78:e0:7d:da:f1:
                    9f:bf:a7:9c:bc:f9:71:4b:78:1e:01:17:bf:89:d7:
                    b9:96:a1:b8:7e:92:d5:3f:a7:48:51:84:49:15:68:
                    45:b5:b9:04:09:22:48:af:3b:35:e9:c2:57:5c:03:
                    5b:11:a9:2a:a3:f6:8f:41:53:cd:72:e5:39:d3:54:
                    89:99:a1:44:b0:f9:1c:3b:b4:57:8c:3e:33:87:be:
                    ac:1f:d9:8a:62:ad:66:43:a3:ad:3b:a7:3f:f3:9d:
                    64:b7:f9:da:73:30:89:9d:30:fa:22:69:65:6c:57:
                    a5:8c:f0:e6:00:4d:4d:af:94:89:5d:9a:44:e9:ed:
                    9a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F2:3E:9D:58:3E:83:35:FB:D9:01:C0:9A:E3:54:13:D5:0E:34:81
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/EfI-nVg-gzX72QHAmuNUE9UONIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.110.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:32:b1:7e:98:e0:44:9e:85:de:a4:b1:8f:78:ea:d5:63:
         fd:e9:a6:37:5a:f7:8c:32:65:eb:a1:3b:e0:70:0b:8f:eb:3b:
         a6:16:68:87:3f:9f:84:0c:60:1a:9b:a8:f1:99:3b:a8:9a:80:
         87:49:03:e8:2d:8b:ea:a5:d7:b1:e6:77:f5:b4:80:6b:03:96:
         f4:ad:fc:b9:2a:5c:dd:7a:f1:c9:69:b3:79:0f:39:45:53:8b:
         4e:b7:6a:46:81:ca:b7:da:f1:05:f7:d3:53:49:aa:10:85:59:
         a3:65:e6:b4:d7:54:58:1f:9a:19:78:ce:16:d7:d4:0b:89:95:
         a5:bd:7b:42:08:06:fe:93:4c:91:22:d5:57:ec:cf:55:8f:ab:
         3e:68:69:7e:c3:fa:e2:50:a6:28:42:6c:0e:55:16:05:d2:79:
         fa:72:af:89:9b:0d:d0:8e:65:ec:91:3d:c3:d4:f5:42:2a:55:
         0a:0d:6a:31:1c:8e:75:b3:5c:bb:9e:30:f2:56:97:ea:f9:fd:
         36:e8:c3:f3:49:f6:6a:bd:62:5c:a4:cb:7f:45:c3:92:c6:38:
         4d:2a:ae:f7:20:0e:59:b0:8e:d2:df:62:1a:7d:76:67:7e:72:
         31:ea:98:64:24:b1:05:c6:0c:62:48:20:16:85:4f:6d:06:90:
         78:0f:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 08:10:10 2026 by rpki-client