This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/ebTSPPyg-VVW95sh4YIFTx9KFNM.roa
File:                     ebTSPPyg-VVW95sh4YIFTx9KFNM.roa (raw, json)
Hash identifier:          fvczqgkgOmhs5e7zYAZCGPaXspjsXrHeEw67/C/U03I=
Subject key identifier:   79:B4:D2:3C:FC:A0:F9:55:56:F7:9B:21:E1:82:05:4F:1F:4A:14:D3
Certificate issuer:       /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial:       019B775954944667AD2FF07E6B8E57C3DD6E
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/ebTSPPyg-VVW95sh4YIFTx9KFNM.roa
Signing time:             Thu 01 Jan 2026 02:18:21 +0000
ROA not before:           Thu 01 Jan 2026 02:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206314
IP address blocks:        91.226.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:54:94:46:67:ad:2f:f0:7e:6b:8e:57:c3:dd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
        Validity
            Not Before: Jan  1 02:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79b4d23cfca0f95556f79b21e182054f1f4a14d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:74:38:28:14:04:c7:bb:4a:bc:88:f1:b7:be:
                    f3:19:70:91:fd:20:79:e3:10:5b:a5:68:3f:70:97:
                    bd:61:ee:8a:5d:f3:8e:d9:8e:df:45:78:48:3d:d5:
                    26:cf:f4:eb:e3:4b:ed:2f:0d:0a:41:96:34:08:04:
                    5f:42:4e:dc:3d:c0:b2:3f:77:74:03:84:33:3f:8a:
                    a4:48:db:03:b3:87:9c:d4:14:21:a1:d4:81:b0:d8:
                    03:e6:69:3c:44:21:80:97:1c:07:61:44:53:34:73:
                    bd:a7:0a:d0:a6:9e:c6:6a:4c:d2:f2:f2:c7:ee:10:
                    08:bb:28:b3:d6:80:e7:97:8e:ec:20:10:66:47:5b:
                    30:84:80:6e:44:56:4c:14:fe:a4:27:fc:b6:f6:d7:
                    18:1b:1f:77:e0:27:1d:5c:35:56:48:29:d0:86:c7:
                    e9:dc:d1:4f:87:c1:99:82:6d:5e:61:21:57:9e:05:
                    87:c3:87:14:00:e5:7b:bd:5c:fd:89:36:d1:ce:7f:
                    24:0f:db:2f:d2:49:32:1e:4a:7c:19:8d:60:8c:86:
                    44:27:64:91:e0:72:53:82:d0:05:a8:b0:1f:37:8b:
                    2b:cf:3e:e6:de:ae:29:79:9f:57:af:23:40:64:74:
                    35:3c:c4:47:8f:25:a6:28:74:60:0e:0c:9f:38:f7:
                    0a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B4:D2:3C:FC:A0:F9:55:56:F7:9B:21:E1:82:05:4F:1F:4A:14:D3
            X509v3 Authority Key Identifier:
                keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/ebTSPPyg-VVW95sh4YIFTx9KFNM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:78:a5:86:fc:96:d4:29:d3:5c:66:68:0e:74:ad:19:a5:04:
         ba:46:1d:6b:fa:be:96:f7:5f:a0:46:9a:83:da:73:24:9c:d1:
         5b:26:db:bd:07:9a:b1:65:4a:0e:22:fa:21:a7:c6:4e:4d:56:
         75:a3:90:c2:80:c3:84:24:67:11:73:df:55:c0:bd:41:b3:e5:
         5c:4f:43:93:1e:bb:81:d7:ad:4a:62:0d:bb:80:1d:16:fe:79:
         60:b2:b2:ac:46:07:25:53:23:6c:7c:f6:7d:ce:dd:f7:d7:3d:
         a0:63:65:3f:93:fd:9d:ae:25:bf:6a:68:80:86:d2:21:20:48:
         37:fb:4a:ef:41:21:4e:ae:02:b0:30:f9:31:1b:0c:66:78:c9:
         1f:86:a9:d7:20:aa:50:81:1c:35:98:98:d5:72:cc:a3:71:f7:
         ea:36:9a:eb:bc:fb:4f:c8:e7:3e:10:60:c0:7d:30:7f:ad:f9:
         4d:86:cb:a0:9c:83:fb:4f:7d:05:3f:aa:e9:ef:3d:7b:90:b9:
         62:c4:82:82:2f:91:30:92:4a:8d:d3:d0:fb:84:05:75:a4:9d:
         54:ce:f1:63:9a:39:81:37:49:2d:0b:71:a8:5d:92:af:6f:ed:
         d0:eb:eb:cc:fa:05:38:d7:f8:86:f6:d4:00:8a:8b:f1:c6:45:
         2b:dc:c2:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WVSURmetL/B+a45Xw91uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDdmODE3ZDdlNmRlZDU2ZWRlZGM0NDQ4OGNkNDFjMDUy
YTBkYzUwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWI0ZDIzY2ZjYTBmOTU1NTZmNzliMjFlMTgyMDU0ZjFmNGExNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznQ4KBQEx7tKvIjxt77zGXCR/SB5
4xBbpWg/cJe9Ye6KXfOO2Y7fRXhIPdUmz/Tr40vtLw0KQZY0CARfQk7cPcCyP3d0
A4QzP4qkSNsDs4ec1BQhodSBsNgD5mk8RCGAlxwHYURTNHO9pwrQpp7GakzS8vLH
7hAIuyiz1oDnl47sIBBmR1swhIBuRFZMFP6kJ/y29tcYGx934CcdXDVWSCnQhsfp
3NFPh8GZgm1eYSFXngWHw4cUAOV7vVz9iTbRzn8kD9sv0kkyHkp8GY1gjIZEJ2SR
4HJTgtAFqLAfN4srzz7m3q4peZ9XryNAZHQ1PMRHjyWmKHRgDgyfOPcKCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHm00jz8oPlVVvebIeGCBU8fShTTMB8GA1UdIwQY
MBaAFP7X+BfX5t7Vbt7cREiM1BwFKg3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80ZjA1NTEtNjkyMi00NWJmLTk3ZDMt
N2NmOWE1ZmI2YTljLzEvZWJUU1BQeWctVlZXOTVzaDRZSUZUeDlLRk5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80ZjA1NTEtNjkyMi00NWJmLTk3ZDMtN2NmOWE1ZmI2YTlj
LzEvX3RmNEY5Zm0zdFZ1M3R4RVNJelVIQVVxRGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+LsMA0G
CSqGSIb3DQEBCwUAA4IBAQCZeKWG/JbUKdNcZmgOdK0ZpQS6Rh1r+r6W91+gRpqD
2nMknNFbJtu9B5qxZUoOIvohp8ZOTVZ1o5DCgMOEJGcRc99VwL1Bs+VcT0OTHruB
161KYg27gB0W/nlgsrKsRgclUyNsfPZ9zt331z2gY2U/k/2driW/amiAhtIhIEg3
+0rvQSFOrgKwMPkxGwxmeMkfhqnXIKpQgRw1mJjVcsyjcffqNprrvPtPyOc+EGDA
fTB/rflNhsugnIP7T30FP6rp7z17kLlixIKCL5EwkkqN09D7hAV1pJ1UzvFjmjmB
N0ktC3GoXZKvb+3Q6+vM+gU41/iG9tQAiovxxkUr3MJX
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:38 2026 by rpki-client