This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/eEDMI9EWeOPChG5XbrAWLtEHI_w.roa
File:                     eEDMI9EWeOPChG5XbrAWLtEHI_w.roa (raw, json)
Hash identifier:          Xe0k2b+LaeqrGNhq3Bb77UB8l2FoXh1XrZU68OpxkZM=
Subject key identifier:   78:40:CC:23:D1:16:78:E3:C2:84:6E:57:6E:B0:16:2E:D1:07:23:FC
Certificate issuer:       /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial:       019B7D5C8B49301E924D8AED9FA737165BE8
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/eEDMI9EWeOPChG5XbrAWLtEHI_w.roa
Signing time:             Fri 02 Jan 2026 06:19:35 +0000
ROA not before:           Fri 02 Jan 2026 06:19:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204635
IP address blocks:        91.213.37.0/24 maxlen: 24
                          185.244.196.0/22 maxlen: 24
                          2001:67c:26ac::/48 maxlen: 48
                          2a0d:3d80::/29 maxlen: 48
                          2a0d:3d80:150::/48 maxlen: 48
                          2a0d:3d80:232::/48 maxlen: 48
                          2a0d:3d80:245::/48 maxlen: 48
                          2a0d:3d80:246::/48 maxlen: 48
                          2a0d:3d80:248::/48 maxlen: 48
                          2a0d:3d80:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:8b:49:30:1e:92:4d:8a:ed:9f:a7:37:16:5b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
        Validity
            Not Before: Jan  2 06:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7840cc23d11678e3c2846e576eb0162ed10723fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:b5:a6:ee:6d:a4:aa:5b:5d:bf:10:95:01:
                    33:6a:5e:5c:65:30:6d:2a:8f:0b:54:c7:99:0e:17:
                    d7:38:5d:a3:e3:ff:b8:a3:52:a6:6d:a9:1a:bd:07:
                    16:4f:e8:1e:b4:e7:9c:1c:da:32:d8:ce:dd:54:2f:
                    65:7b:fc:19:fe:19:0b:e6:98:e2:51:d3:ab:cd:cd:
                    58:a5:4e:87:70:87:72:26:49:bd:e4:f8:ac:4f:07:
                    1e:43:43:a0:cd:c4:95:37:bf:dd:7e:05:58:fe:4a:
                    8a:75:34:2a:35:19:4e:36:a2:27:08:91:a7:72:0e:
                    e4:67:40:ec:59:73:88:32:aa:14:97:e0:62:bc:48:
                    de:51:bf:9e:5b:4c:06:26:6b:57:62:5b:88:6c:34:
                    24:db:f9:a5:c4:5c:72:06:13:ff:53:66:bc:7c:b4:
                    b3:2f:be:24:9d:6a:92:85:b0:bc:bf:42:86:c3:4a:
                    bb:c8:b1:10:b6:8c:c4:f6:45:12:7e:83:93:0b:d9:
                    13:ac:ca:2d:37:e5:22:0c:e7:5a:2a:07:08:bd:9c:
                    d4:14:19:47:33:e5:2d:11:c9:39:e8:10:d8:85:e9:
                    e5:11:40:7f:67:92:0c:b3:57:1e:3f:51:6c:a6:3c:
                    00:60:82:a2:70:eb:1b:ba:ca:f8:7e:f1:ac:b0:de:
                    08:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:40:CC:23:D1:16:78:E3:C2:84:6E:57:6E:B0:16:2E:D1:07:23:FC
            X509v3 Authority Key Identifier:
                keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/eEDMI9EWeOPChG5XbrAWLtEHI_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.37.0/24
                  185.244.196.0/22
                IPv6:
                  2001:67c:26ac::/48
                  2a0d:3d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:b6:80:7a:45:fe:24:b5:88:84:ed:9b:f7:ae:fb:cb:8f:
         75:34:44:ba:d9:4a:d3:9f:09:cc:64:49:60:d4:28:a5:78:1a:
         d5:37:16:d6:73:ba:61:f9:0b:e8:2b:f1:3d:01:e1:ff:12:6c:
         75:93:03:71:98:56:38:d6:3b:9a:d6:04:c5:46:22:9c:d7:67:
         6a:81:96:7b:2f:9c:c1:e5:8e:b3:18:c3:52:8e:9b:5b:c9:0e:
         86:51:23:08:10:78:83:a9:d8:19:ed:57:8b:78:b3:46:ee:20:
         f0:d2:9a:10:cb:c5:52:84:0d:2c:68:48:00:95:52:df:15:ac:
         22:a8:45:40:6a:02:b9:09:6c:87:24:c0:1e:d7:0f:48:c1:1c:
         ad:4c:45:26:c8:67:8f:ff:f4:c4:09:b2:48:9d:49:04:bb:2e:
         93:a4:d8:8c:a6:e6:a8:86:d9:98:c0:5f:e0:4f:e9:b6:94:29:
         53:d0:21:ce:3a:59:ef:cb:19:78:6e:8f:42:ae:71:fe:41:56:
         bb:24:5c:96:d5:f2:68:b2:0f:b9:f1:d8:8b:6b:09:e7:6d:72:
         c0:8d:64:5f:01:6f:24:e4:9f:f4:91:eb:6c:e4:c8:95:e0:2b:
         0d:cf:35:7a:c1:00:83:9f:b7:26:8d:35:b1:23:bf:07:00:e5:
         8a:93:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:48 2026 by rpki-client