This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/MeyXNG_bLtxPNwjrWc4lFx6JeOo.roa
File:                     MeyXNG_bLtxPNwjrWc4lFx6JeOo.roa (raw, json)
Hash identifier:          /l+JnqGiTQwDPE5vvTHQU+XCg4rivjzP4ZBaPNog3Q4=
Subject key identifier:   31:EC:97:34:6F:DB:2E:DC:4F:37:08:EB:59:CE:25:17:1E:89:78:EA
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       019B783451F07B2E6AC4090452527AEC85BA
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/MeyXNG_bLtxPNwjrWc4lFx6JeOo.roa
Signing time:             Thu 01 Jan 2026 06:17:33 +0000
ROA not before:           Thu 01 Jan 2026 06:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50828
IP address blocks:        213.192.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:51:f0:7b:2e:6a:c4:09:04:52:52:7a:ec:85:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Jan  1 06:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=31ec97346fdb2edc4f3708eb59ce25171e8978ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:88:45:bd:0c:22:fe:a4:f4:54:da:62:3b:
                    0e:15:ff:7b:7c:56:33:e7:af:d2:f3:58:be:45:02:
                    6b:a5:55:43:8b:2b:75:be:c1:77:3a:70:8f:20:ea:
                    2b:cb:01:15:92:39:07:91:f0:94:de:23:26:39:08:
                    99:a0:a4:93:11:0d:b4:81:e9:84:e6:2a:a0:53:9a:
                    2d:6b:6d:66:f6:fd:aa:4a:76:e3:76:0b:32:79:a2:
                    37:ab:54:11:2e:c4:b0:a4:26:44:52:0f:37:51:68:
                    27:22:0a:d1:44:4b:8f:eb:d2:d8:eb:2b:1d:2d:bd:
                    0f:32:4a:0c:b1:e8:55:35:fe:27:a9:38:71:10:e9:
                    f8:6a:ab:70:18:ae:05:02:d3:ef:95:5a:a7:6c:41:
                    8b:b2:77:87:31:4a:73:71:7e:b4:2e:b6:16:5c:f5:
                    77:84:15:d6:1f:ec:ac:78:e3:86:27:c0:88:df:81:
                    25:72:70:60:54:90:34:47:bb:38:63:29:90:53:db:
                    de:86:3c:28:27:96:8f:d7:f4:91:f7:4a:34:e4:fa:
                    4c:a4:af:89:e9:c6:79:cb:e0:8b:a7:87:7a:2d:8e:
                    1b:6e:a5:82:98:9d:7c:cc:f6:3b:f8:3a:16:7a:ac:
                    dc:57:2c:81:51:46:25:ff:a7:0f:a3:bb:9e:b9:cf:
                    d1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EC:97:34:6F:DB:2E:DC:4F:37:08:EB:59:CE:25:17:1E:89:78:EA
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/MeyXNG_bLtxPNwjrWc4lFx6JeOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.192.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:82:b1:c3:a8:6d:00:ec:04:af:e9:5e:06:f6:52:d4:79:
         a6:c5:f9:05:eb:88:0d:c5:96:42:a7:01:c4:3d:f6:e4:43:22:
         14:8b:9e:9a:b9:b3:bc:fc:1d:a8:e7:fc:e2:30:50:0f:99:ad:
         30:65:22:f5:f6:13:c7:f2:84:5e:0e:7d:24:44:26:bf:90:c0:
         1e:47:d4:77:28:64:6b:48:c4:c1:7a:f6:68:57:1b:e4:06:70:
         49:f6:4a:17:1d:16:06:b6:db:6c:92:8d:58:12:6b:41:ac:b3:
         6c:08:46:fa:33:18:04:4e:67:fc:d1:aa:c3:b7:85:4d:5a:f1:
         ea:35:5b:92:e0:8d:d7:de:a6:a2:1c:e8:d0:45:2f:22:b1:dd:
         36:81:b7:72:43:a9:58:94:22:95:8b:a8:fa:46:f7:65:03:ba:
         1c:8e:04:d7:38:30:8e:80:20:4a:3f:77:2a:07:b2:37:11:99:
         78:3b:52:01:0c:f3:3c:6d:0d:c5:12:1e:1e:2f:36:6c:43:da:
         4e:17:c0:fb:23:5f:90:fc:f6:81:68:fe:36:27:d1:e8:97:a8:
         7a:c4:30:f3:be:88:b9:f6:6c:1c:0c:1f:ff:92:23:72:6e:f3:
         38:44:bd:69:0d:e0:71:1f:00:8e:79:23:09:d2:4f:ee:06:13:
         51:3f:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:02 2026 by rpki-client