This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/eY4k3nVHNXhDpAbf9zD-eyh_Nvg.roa
File:                     eY4k3nVHNXhDpAbf9zD-eyh_Nvg.roa (raw, json)
Hash identifier:          yBq3nhPr9ZGCP1KOMc5XIOBCBvNy7/PGtea/Nu+S5pA=
Subject key identifier:   79:8E:24:DE:75:47:35:78:43:A4:06:DF:F7:30:FE:7B:28:7F:36:F8
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       019B7DCAE0BE2596B5B5AE847718D0A021F3
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/eY4k3nVHNXhDpAbf9zD-eyh_Nvg.roa
Signing time:             Fri 02 Jan 2026 08:20:06 +0000
ROA not before:           Fri 02 Jan 2026 08:20:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     63023
IP address blocks:        87.254.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:e0:be:25:96:b5:b5:ae:84:77:18:d0:a0:21:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Jan  2 08:20:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=798e24de7547357843a406dff730fe7b287f36f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:ec:56:2b:eb:6b:fd:4d:9c:ac:e9:24:dc:
                    f1:e0:ed:2f:a9:91:49:45:20:29:c1:03:00:8f:68:
                    81:c9:56:91:cf:23:6c:b4:58:28:43:07:6b:e5:c3:
                    53:c0:67:c6:12:a9:e7:51:5c:75:65:de:cc:42:96:
                    46:73:31:bf:88:d9:22:35:49:fa:a7:07:24:8e:7a:
                    65:e5:ed:13:bd:a7:aa:cf:15:5a:91:0d:d4:c5:6c:
                    14:9c:8b:86:15:64:6b:33:5a:e0:67:a7:07:30:46:
                    e0:f3:48:48:8a:27:42:2f:98:13:62:fe:fd:92:9b:
                    9d:ae:a9:8d:17:43:68:38:67:82:78:06:0d:aa:1f:
                    9f:b0:cb:8c:26:49:d1:6b:82:88:75:9d:9c:4f:9f:
                    fe:08:c2:27:42:00:3e:1e:86:77:54:9f:c0:18:79:
                    da:43:ac:da:0b:c7:9e:22:8f:22:4b:36:65:1c:87:
                    d7:45:d5:18:57:a2:4c:c4:47:f4:57:5c:ab:4e:fc:
                    a6:83:f8:ae:12:e3:b1:0e:60:49:cc:ca:8c:ca:fb:
                    e2:55:24:39:3e:01:08:50:97:27:82:ec:c2:88:d7:
                    77:07:3e:c6:12:ee:02:5c:c8:ef:be:ff:45:d7:27:
                    51:8b:67:30:8d:49:9a:6b:dd:c1:23:cf:09:c1:93:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8E:24:DE:75:47:35:78:43:A4:06:DF:F7:30:FE:7B:28:7F:36:F8
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/eY4k3nVHNXhDpAbf9zD-eyh_Nvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:a7:87:44:75:54:7f:09:a8:a4:c5:3a:5f:81:d9:2d:61:
         83:6f:b3:fd:60:73:a1:6a:61:47:a7:9c:69:8e:1b:97:6f:6a:
         81:e3:c8:e4:d4:45:84:c5:e7:f9:26:20:ec:67:49:88:dc:21:
         56:ad:60:5b:f2:62:da:43:b0:df:42:44:08:10:9d:ca:e3:c8:
         7c:42:8e:19:f9:36:8a:06:dc:19:72:42:13:bc:8e:74:7a:ce:
         4e:5e:3d:ff:34:91:d7:53:09:27:7a:99:e2:41:cc:30:4e:3c:
         cd:a7:49:cc:21:8e:a4:6d:1a:39:36:3c:e9:ec:b8:85:8d:76:
         7e:29:16:93:ac:dd:8e:a4:dc:f1:cf:51:1b:5a:40:33:9b:e1:
         d6:9a:7e:ac:20:6a:b2:e0:f3:55:19:be:1e:fb:04:a1:ad:33:
         0b:f8:e8:d0:c6:1d:fb:69:e9:d2:fb:6b:93:5a:c3:a0:be:83:
         8d:63:5f:61:27:0a:84:94:38:4b:8f:94:29:6b:57:9d:3d:8e:
         e5:00:0b:c3:b8:65:7b:ed:3d:9f:3b:8a:7f:cf:52:72:e4:88:
         28:5a:16:28:2f:60:15:a6:4a:40:b8:10:83:08:44:b5:3a:9f:
         a1:95:b3:1b:b9:3c:dc:b2:ec:88:3b:4a:e0:8a:e6:4f:2f:8b:
         a4:de:8a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:04:58 2026 by rpki-client