This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa
File:                     EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa (raw, json)
Hash identifier:          +IXgSVtEGOzuUxPa9aH2GgJttKlcpQRRHhr1qNoMAVo=
Subject key identifier:   11:4F:FA:30:DF:CC:25:97:F7:5D:1B:D5:21:41:0E:55:8C:20:35:9A
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       019B79101D0F0E71BA6010977F918563E668
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa
Signing time:             Thu 01 Jan 2026 10:17:37 +0000
ROA not before:           Thu 01 Jan 2026 10:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149766
IP address blocks:        46.37.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:1d:0f:0e:71:ba:60:10:97:7f:91:85:63:e6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jan  1 10:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=114ffa30dfcc2597f75d1bd521410e558c20359a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:cb:55:39:78:66:d2:6e:f1:65:1b:b1:25:
                    80:81:90:92:1c:e6:74:8f:fb:7a:4a:e9:84:62:0f:
                    8b:c1:32:6a:fb:a2:1c:03:84:67:c9:2c:30:33:5d:
                    79:47:b7:ff:d2:32:41:7c:4d:45:71:18:be:b3:69:
                    4d:9b:2e:48:7e:c5:29:44:5a:ea:4a:b9:ae:e5:b3:
                    e6:c9:c3:3f:ae:f4:c9:fb:ba:a3:0a:13:fd:1d:33:
                    7d:b5:7d:60:76:bc:de:8f:7d:1d:5c:8c:f7:40:c9:
                    48:65:7f:6b:20:93:d9:10:13:fd:4a:fa:6a:c3:f4:
                    fe:95:d8:82:c3:f0:41:06:4a:e4:20:99:e3:84:6b:
                    d1:9d:ba:3f:6d:95:f2:a4:44:6d:f2:8d:84:7f:34:
                    0c:88:e8:f9:42:46:43:61:f0:26:94:90:be:a7:2c:
                    38:7c:04:20:19:5a:88:d3:26:32:16:d8:fc:e2:fe:
                    04:d2:2f:c2:4b:70:bf:25:dc:c2:03:c3:99:a4:72:
                    86:bb:49:c9:72:ef:05:18:30:96:b4:28:0b:ec:ad:
                    0c:ca:e2:ec:2e:fe:9a:e3:87:12:a2:18:f2:cc:39:
                    bb:5d:15:d5:7c:c7:4f:ab:10:92:c2:2a:73:b8:1f:
                    28:1c:79:4a:16:d1:c4:d3:e0:35:f3:3b:b1:81:4c:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4F:FA:30:DF:CC:25:97:F7:5D:1B:D5:21:41:0E:55:8C:20:35:9A
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:23:47:22:04:9b:70:0c:f1:f4:27:8e:3f:03:bc:da:38:ca:
         40:a4:ec:aa:31:76:53:f2:15:1f:df:9e:75:72:f1:be:a1:f5:
         da:d8:0b:77:a1:76:26:9d:14:76:4d:13:1d:15:9d:fa:fb:28:
         a1:a3:67:a0:5f:da:46:ae:97:91:3b:d2:21:81:13:55:0f:22:
         c2:75:cf:aa:c6:64:c8:cd:1d:5c:8b:a5:c5:6d:b5:fd:a7:7e:
         b8:8b:8d:11:0d:de:56:d7:19:6d:9e:8d:8e:bc:c5:c5:86:d6:
         14:44:62:2d:ca:26:c0:88:5a:b0:99:95:38:b9:e0:b8:44:71:
         59:b7:39:76:72:05:4a:83:5e:eb:3f:ba:7c:54:9c:9a:49:1a:
         dd:37:47:7c:4e:c1:c1:62:d3:8a:5f:61:d9:06:1a:0b:31:cf:
         dc:9f:a0:1f:6f:16:1e:48:8f:0d:c3:67:86:b2:46:59:29:57:
         ae:74:a5:a1:85:a1:7d:55:d9:b8:c3:88:c4:3c:dc:8b:00:af:
         aa:ba:5d:45:00:8c:9f:35:0e:74:0c:f9:37:3e:ed:d2:14:85:
         bd:19:76:d4:be:09:f7:67:d7:b8:f7:c9:3b:61:47:2b:23:0f:
         95:1f:c6:eb:f7:fc:81:88:d1:4c:8e:3c:ca:95:77:da:a4:cf:
         be:95:88:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:01:07 2026 by rpki-client