This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/InEXra7irfSAsxw7JJL7p31GBBI.roa
File:                     InEXra7irfSAsxw7JJL7p31GBBI.roa (raw, json)
Hash identifier:          EUAgUOR1Oi4IdkAV6gH+lBgJUN5TnMYMZk5GbzRlyqw=
Subject key identifier:   22:71:17:AD:AE:E2:AD:F4:80:B3:1C:3B:24:92:FB:A7:7D:46:04:12
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019B9EBC892718DD120C47791B1E22FC66D0
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/InEXra7irfSAsxw7JJL7p31GBBI.roa
Signing time:             Thu 08 Jan 2026 17:51:54 +0000
ROA not before:           Thu 08 Jan 2026 17:51:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     401776
IP address blocks:        43.242.137.0/24 maxlen: 24
                          124.158.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9e:bc:89:27:18:dd:12:0c:47:79:1b:1e:22:fc:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Jan  8 17:51:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=227117adaee2adf480b31c3b2492fba77d460412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:39:75:e1:94:75:c5:40:05:38:3c:90:fd:ea:
                    80:56:30:36:c7:6f:7d:2a:01:41:8c:b0:91:58:06:
                    a4:2d:a8:a3:d3:fd:b4:63:ae:9e:82:20:ae:6a:43:
                    c9:b3:90:1d:8c:ce:eb:ab:35:f2:14:8d:e3:d9:db:
                    e2:73:2a:13:4c:2c:c0:e3:92:b4:4c:6c:c1:e5:c6:
                    74:a3:22:4a:19:14:d6:23:ba:e1:4f:81:91:4d:6e:
                    10:4e:89:a8:de:6a:80:d3:61:c3:1a:8b:ae:0b:35:
                    87:b1:76:ac:6b:7a:d5:b1:31:19:d2:3f:a1:ac:11:
                    86:01:c0:e8:f3:a1:51:ad:6b:69:3c:9e:1b:37:48:
                    c1:69:56:c8:23:50:b6:b8:1b:ab:4d:ff:2c:7d:44:
                    9e:dc:1f:f1:d5:c4:5e:8a:e0:1c:d2:2a:0a:27:91:
                    9e:6e:ca:86:cc:6e:56:20:0d:d0:7a:fa:62:30:c7:
                    c3:3a:8c:5f:55:7a:d0:0a:58:54:f1:41:e6:93:6a:
                    2a:ab:22:59:11:6b:fa:19:0f:03:ee:a6:fb:e8:07:
                    c2:46:7c:b2:04:65:b5:95:28:ef:58:94:62:b5:dc:
                    39:f2:72:57:b4:94:7b:a9:75:6d:be:b4:6b:5d:cc:
                    c9:1f:90:5a:49:59:d4:84:08:0f:a8:24:3a:90:29:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:71:17:AD:AE:E2:AD:F4:80:B3:1C:3B:24:92:FB:A7:7D:46:04:12
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/InEXra7irfSAsxw7JJL7p31GBBI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.137.0/24
                  124.158.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:3b:39:70:81:d8:35:9b:e7:15:36:5e:8b:04:e9:25:8d:
         cb:a7:4c:5f:57:44:e6:bb:80:65:d2:9d:af:2e:3a:d9:90:db:
         2e:0b:18:f5:e5:4e:d6:06:47:c5:26:aa:37:95:31:b4:d5:3e:
         3d:02:35:30:e4:fb:04:7f:cc:a2:7f:b3:f6:bf:dc:1e:58:da:
         fd:76:ee:c1:e2:7e:53:77:a4:a6:88:93:93:ae:9d:97:bd:49:
         5c:28:b2:93:e7:3a:ec:da:40:d2:d2:e6:5f:9c:9e:3d:42:15:
         ca:0c:2b:41:01:99:ba:38:5a:23:36:fa:52:e2:df:9c:d0:3c:
         51:db:0c:4a:0d:b6:5c:1b:f9:d7:f7:59:d2:5b:81:01:5e:2d:
         07:78:7a:0a:26:c1:fe:7c:b7:50:68:3e:0e:ff:f0:2c:3c:0a:
         ee:27:b2:09:2b:2b:c6:ce:61:71:10:e2:e4:8e:d5:b4:9c:28:
         61:6d:53:b6:c7:a3:64:39:c9:2b:a2:f7:76:e1:2d:0d:5c:fe:
         ff:b1:59:ba:41:d8:97:83:74:d6:17:7a:a8:eb:30:27:14:e9:
         f2:f1:d3:59:70:56:45:bb:aa:ac:eb:c1:61:e1:9d:04:c8:3f:
         f2:ca:fb:99:ba:78:f1:14:3c:3c:3d:73:b2:5c:48:b2:5d:cc:
         d8:1c:50:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 22:19:36 2026 by rpki-client