This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eWUpEPoOg9OjyKcdFOcTFaTViAY.roa
File:                     eWUpEPoOg9OjyKcdFOcTFaTViAY.roa (raw, json)
Hash identifier:          QqtUA+zqs438xNz5Nll6fWSK2qmUASF3CX2OUL+oOS0=
Subject key identifier:   79:65:29:10:FA:0E:83:D3:A3:C8:A7:1D:14:E7:13:15:A4:D5:88:06
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019B23255E6AB005382136954409911BCE8F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eWUpEPoOg9OjyKcdFOcTFaTViAY.roa
Signing time:             Mon 15 Dec 2025 17:53:30 +0000
ROA not before:           Mon 15 Dec 2025 17:53:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     397630
IP address blocks:        89.106.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:23:25:5e:6a:b0:05:38:21:36:95:44:09:91:1b:ce:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Dec 15 17:53:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79652910fa0e83d3a3c8a71d14e71315a4d58806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:d9:aa:b5:db:a5:f3:50:1f:f4:5b:8a:5d:
                    30:2e:74:d0:85:1c:57:b4:81:3e:5a:33:c9:82:4f:
                    88:08:8d:90:44:2c:cb:e4:6b:96:c0:ba:36:21:87:
                    bc:28:40:2e:69:23:3d:d2:00:3d:f8:f0:cf:a4:c3:
                    07:ed:bb:27:a7:5e:f5:03:e1:9c:ba:41:3c:d9:53:
                    52:cd:2a:fe:6a:43:63:72:36:b5:02:c9:7b:67:15:
                    c0:9f:43:4d:18:e8:fe:2e:e1:09:33:5f:76:e1:b5:
                    8e:2c:9c:f9:a9:21:57:9e:56:a4:8c:0e:c5:ba:d9:
                    e6:ce:9a:b4:cc:6f:9b:02:1e:84:82:0b:c6:93:8f:
                    56:9f:46:d3:80:1a:dc:48:7e:f0:66:28:21:76:d5:
                    e6:eb:04:04:84:df:e2:31:2d:d9:17:92:0c:b1:b0:
                    af:eb:f8:ac:ac:ab:2a:55:ad:c1:3d:10:4e:24:e2:
                    52:e0:7e:75:26:58:e1:8a:8f:0c:d7:4c:0d:d6:6c:
                    76:c5:c6:25:03:ec:f2:94:29:d0:d3:39:c0:10:57:
                    1b:cc:01:93:f4:9a:0f:e0:73:ec:f7:5a:06:2f:73:
                    99:2c:0b:a5:ee:2c:55:cb:aa:ab:cc:50:03:36:8a:
                    d4:28:2c:0b:31:8c:81:be:fe:82:f3:3c:e7:f1:33:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:65:29:10:FA:0E:83:D3:A3:C8:A7:1D:14:E7:13:15:A4:D5:88:06
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/eWUpEPoOg9OjyKcdFOcTFaTViAY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:bd:a0:ca:fd:58:46:59:51:f5:ba:19:2b:a8:9d:a4:50:4c:
         d3:6a:57:53:21:5d:22:b0:89:a7:be:08:d5:10:fb:05:51:a3:
         97:82:95:32:8e:05:dc:5d:f9:80:30:31:b9:94:99:ab:fc:56:
         1f:6a:ef:a5:1d:39:2b:cb:cc:e7:cb:5d:64:99:09:c8:bf:1b:
         ae:e7:b6:aa:0a:99:47:e1:51:a3:d6:fb:ca:e1:16:35:b6:90:
         ae:8c:09:fa:a6:5e:4a:30:01:30:17:f4:0d:67:be:76:57:e7:
         64:0b:ff:6e:3a:b4:5f:f4:c8:03:b7:32:23:af:35:ec:15:c3:
         bf:2c:60:b3:e4:98:1b:a0:77:2c:75:92:4f:58:f3:fc:46:92:
         3a:a7:33:0d:cc:f3:a1:f4:e8:08:5b:ca:2b:95:4b:80:3b:33:
         f8:08:a9:aa:c9:e4:77:ca:1b:0b:df:b5:4a:8c:ca:28:d5:e2:
         4a:1d:22:fb:39:38:fe:c5:13:2e:03:ad:9a:1c:63:28:3d:17:
         45:16:58:89:c6:85:f1:79:45:8f:c9:05:df:bd:ae:32:48:fc:
         3c:2d:f7:de:22:d8:bb:be:d0:5b:c4:6f:52:79:8f:0c:99:51:
         53:b3:37:34:ac:b1:a1:e5:1e:68:01:f6:ce:bd:68:de:5c:81:
         4c:49:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:06:56 2025 by rpki-client