This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N9C_JWPiFkOC1j2judupgEeq0iU.roa
File:                     N9C_JWPiFkOC1j2judupgEeq0iU.roa (raw, json)
Hash identifier:          onz9tBjIM6iuiH8fpkpnTg4bf4irpTsQvTxzH8Ai1N8=
Subject key identifier:   37:D0:BF:25:63:E2:16:43:82:D6:3D:A3:B9:DB:A9:80:47:AA:D2:25
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019B23255DDBB252AA761F6B83B5FE6A5224
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N9C_JWPiFkOC1j2judupgEeq0iU.roa
Signing time:             Mon 15 Dec 2025 17:53:30 +0000
ROA not before:           Mon 15 Dec 2025 17:53:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     54252
IP address blocks:        89.106.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:25:5d:db:b2:52:aa:76:1f:6b:83:b5:fe:6a:52:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Dec 15 17:53:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=37d0bf2563e2164382d63da3b9dba98047aad225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:ce:63:e3:fa:1f:4d:a8:98:e7:a2:80:e2:
                    1d:c1:c3:06:55:54:21:e1:69:56:60:19:93:70:29:
                    cc:37:ec:a8:e2:f4:e2:db:8a:8a:37:fb:58:62:ff:
                    05:da:59:ef:07:14:70:da:27:73:01:42:cb:1a:82:
                    a3:c3:6e:c2:ba:ad:4d:01:69:81:3c:b9:11:db:bd:
                    01:72:59:52:1a:eb:40:0b:55:e6:75:dc:32:6e:b0:
                    ca:91:17:25:a0:92:a6:ae:ff:b4:66:c0:93:91:ff:
                    f6:4f:06:07:0a:a9:18:11:08:cf:a9:43:21:a9:44:
                    0f:3b:c9:0d:a9:c8:a6:4d:35:a0:3d:a8:fc:a3:e6:
                    66:55:56:58:57:56:d3:29:12:f5:53:10:57:1a:8b:
                    c4:0a:9d:4b:db:4e:25:ae:2c:fa:5b:1f:0a:09:9b:
                    f2:fe:2c:c7:93:62:c1:ac:17:e7:a6:97:b0:cc:05:
                    39:b6:c7:1b:26:a2:33:95:76:7e:64:28:c3:51:e5:
                    47:f9:98:ca:bf:25:d8:2f:c8:9b:56:67:ac:5f:6a:
                    d5:b7:3f:51:7b:8f:b0:fd:3e:c3:17:0e:f9:c6:f3:
                    7a:ed:b5:0c:29:f9:32:81:e2:be:d2:57:76:b4:62:
                    70:2c:67:6b:29:66:0e:aa:ad:37:63:21:89:f9:40:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D0:BF:25:63:E2:16:43:82:D6:3D:A3:B9:DB:A9:80:47:AA:D2:25
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N9C_JWPiFkOC1j2judupgEeq0iU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:4d:9f:a4:8f:73:61:ae:51:65:5d:b7:ad:83:c0:8c:2b:6b:
         aa:f1:36:f4:d2:da:ed:e8:62:cf:34:f6:11:e8:18:d1:7c:48:
         fa:8b:3b:60:c0:d8:e3:b9:7e:b4:a3:7b:2e:48:19:b3:e4:d6:
         dc:41:6f:db:25:77:9e:ce:d5:c0:f2:38:e1:be:01:31:96:62:
         0a:c1:5f:11:e2:77:b8:42:42:70:ed:c7:77:7e:09:c8:fa:dd:
         61:b1:bb:24:c8:8b:d6:ee:08:88:cc:5c:0b:5f:ad:23:32:1a:
         43:8b:34:c9:93:f1:f6:cb:18:63:df:1d:ad:93:27:71:e4:83:
         4c:b4:48:4d:f5:a3:3b:97:41:c8:7b:76:38:34:5e:cb:a4:06:
         f4:b3:5e:52:16:03:50:75:22:f5:f3:7d:e2:fa:5f:cf:33:6f:
         89:b6:0b:7a:ee:3a:a5:ee:78:fe:96:d7:c2:25:08:6b:79:43:
         1f:bb:04:7a:aa:9e:3a:ad:60:3e:b5:11:27:b2:68:49:d0:5f:
         c8:7c:13:9b:7a:35:66:b9:d7:76:42:b1:87:84:93:91:3c:53:
         61:13:74:56:9a:f8:96:64:96:2e:1c:c8:db:99:2f:5c:e1:e6:
         c7:40:19:ca:d2:e8:0f:50:aa:15:35:4d:bd:54:71:82:d9:e9:
         bf:ff:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:06:47 2025 by rpki-client