This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/aTwl_06eKgN-7Ji1g80MtelQtJg.roa
File:                     aTwl_06eKgN-7Ji1g80MtelQtJg.roa (raw, json)
Hash identifier:          /CzAIKlGk8B5id0rpbTAezRaHR40d5ivxFrB/UK/mW8=
Subject key identifier:   69:3C:25:FF:4E:9E:2A:03:7E:EC:98:B5:83:CD:0C:B5:E9:50:B4:98
Certificate issuer:       /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial:       019B7834526AB16CF3A7CE288EA94967263F
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/aTwl_06eKgN-7Ji1g80MtelQtJg.roa
Signing time:             Thu 01 Jan 2026 06:17:33 +0000
ROA not before:           Thu 01 Jan 2026 06:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197502
IP address blocks:        213.192.116.0/23 maxlen: 23
                          213.192.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:52:6a:b1:6c:f3:a7:ce:28:8e:a9:49:67:26:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
        Validity
            Not Before: Jan  1 06:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=693c25ff4e9e2a037eec98b583cd0cb5e950b498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1b:69:f2:89:35:f7:22:5d:f4:bc:d1:62:fc:
                    86:57:4a:d6:d7:18:e5:61:7b:a8:32:25:2f:e8:04:
                    b6:dc:0f:40:d1:ce:ba:bd:dd:90:47:d9:ec:15:ef:
                    7d:5a:1b:b1:92:60:29:8c:40:fd:0f:97:44:64:68:
                    e0:4e:df:c0:9a:d9:9f:9c:f7:41:26:74:2d:65:b0:
                    12:40:fb:76:28:fb:bf:6d:bd:1c:ef:37:1a:80:10:
                    14:48:fe:d7:40:03:fd:7e:86:2f:56:7e:3e:47:02:
                    fb:2c:e3:d9:37:21:a9:2a:43:e5:24:61:8e:ca:60:
                    03:2a:49:56:55:a2:f7:05:4c:d5:db:b5:8d:ce:4d:
                    ec:2f:3d:ee:a6:ab:4a:fb:f4:21:09:d5:12:90:0e:
                    a6:8a:b5:e3:b8:98:42:c8:31:9e:21:87:3d:9a:0a:
                    3b:b7:fb:d8:bc:d4:b4:c6:15:25:92:1b:5a:28:8b:
                    ef:ec:81:da:7e:30:43:0d:1a:71:6d:7e:0b:68:e0:
                    bb:4d:4b:47:96:6c:44:57:71:10:15:59:dc:98:bd:
                    f2:9a:11:43:bb:cf:2f:92:8f:8d:a2:c9:1a:59:5c:
                    9b:88:41:10:d7:ce:b2:f4:17:e2:d4:a2:80:38:f3:
                    ec:db:57:f9:b6:c5:d5:b8:89:02:f5:f9:c6:c7:73:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3C:25:FF:4E:9E:2A:03:7E:EC:98:B5:83:CD:0C:B5:E9:50:B4:98
            X509v3 Authority Key Identifier:
                keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/aTwl_06eKgN-7Ji1g80MtelQtJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.192.116.0-213.192.118.255

    Signature Algorithm: sha256WithRSAEncryption
         74:d5:d7:b5:09:23:aa:ab:c7:f1:40:ba:66:13:fd:02:41:07:
         20:14:10:58:7b:73:14:a7:22:b0:38:35:5a:19:69:8b:3f:6c:
         b3:87:0c:5b:55:c8:53:22:a5:e0:b0:a2:1b:1c:44:6c:7a:c4:
         01:cd:97:ab:8a:8e:08:87:43:41:10:35:85:8b:25:3c:77:a8:
         91:18:cc:ef:b7:ac:c7:fb:f1:73:96:34:07:01:7f:c9:89:f2:
         31:57:1d:d5:ce:77:22:65:df:1b:98:ca:94:ad:5a:bf:40:5d:
         10:5f:8f:e3:6e:23:ee:d9:37:4f:30:35:a1:36:16:7d:21:bd:
         7c:e8:1a:9a:89:7f:76:2e:35:22:7a:74:2f:a8:33:13:f6:06:
         a9:1e:80:83:6d:1e:a6:b2:b6:0e:5d:d0:87:0c:29:b3:2a:12:
         0e:bc:fe:2f:55:0e:ed:ef:ee:50:c2:cc:27:ed:47:11:57:37:
         00:8c:fb:e7:91:8c:b7:db:94:60:ff:3c:9b:97:5f:96:c5:e6:
         bb:9e:0d:59:b4:89:cb:b0:57:af:4c:91:91:25:1f:b7:c6:d7:
         5a:d4:3b:63:27:7e:67:c9:a2:3f:bd:27:81:0e:34:c3:a0:8c:
         50:48:4e:e5:f9:68:fd:4e:bb:02:3c:4b:4c:f9:53:15:ba:27:
         6b:5d:b9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:56 2026 by rpki-client