This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/eCVV0K1bqV0R61HU7ADuPUKGN5k.roa
File:                     eCVV0K1bqV0R61HU7ADuPUKGN5k.roa (raw, json)
Hash identifier:          0ptbGkdsQxcBcl2xWRnP4uwcVp/VklDg6cOGmTAQCOw=
Subject key identifier:   78:25:55:D0:AD:5B:A9:5D:11:EB:51:D4:EC:00:EE:3D:42:86:37:99
Certificate issuer:       /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial:       019B7EA646CC2987963E46F60639562AAF42
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/eCVV0K1bqV0R61HU7ADuPUKGN5k.roa
Signing time:             Fri 02 Jan 2026 12:19:44 +0000
ROA not before:           Fri 02 Jan 2026 12:19:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48387
IP address blocks:        195.88.60.0/23 maxlen: 24
                          2001:67c:10a8::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:46:cc:29:87:96:3e:46:f6:06:39:56:2a:af:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
        Validity
            Not Before: Jan  2 12:19:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=782555d0ad5ba95d11eb51d4ec00ee3d42863799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:ea:1f:49:5a:7b:a0:78:5c:b4:83:43:3f:
                    44:cb:42:9f:2f:f3:78:f5:0d:c1:2c:57:73:c3:a9:
                    99:30:70:50:8c:e2:77:f1:29:18:a5:6e:8f:62:00:
                    99:fe:1e:9b:c3:17:45:8c:34:9a:03:e5:38:67:88:
                    5b:ff:7d:1c:04:06:c7:50:54:cc:52:17:3f:82:64:
                    fa:d6:26:9d:48:46:04:4e:a7:4c:ff:7e:53:be:f1:
                    da:89:2f:e4:0f:0c:82:bd:03:a7:89:5c:d6:bc:5b:
                    67:60:ff:62:3c:8c:f5:f0:89:de:e9:e4:75:b1:b3:
                    41:8d:35:8c:a5:c0:89:58:76:91:64:bc:05:94:46:
                    5c:24:1a:27:6d:cb:b3:4d:02:14:c4:b2:6d:42:61:
                    fa:d5:5c:ba:84:64:21:61:ed:48:f2:93:9e:41:14:
                    c7:a3:1c:70:ea:c0:92:86:d3:74:12:fe:83:4c:ad:
                    08:a4:85:57:cd:aa:ae:b6:ef:0b:79:54:df:28:36:
                    4e:4c:85:44:89:20:26:9b:37:ab:c1:7c:51:0e:d0:
                    6c:c9:c6:39:41:66:96:a1:6b:d6:fd:67:d9:dc:6e:
                    7a:42:90:d6:98:56:98:7b:7d:4f:09:2f:f6:a7:75:
                    be:e4:f9:b6:b3:f5:64:fa:21:d9:b5:bb:fe:8e:7e:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:55:D0:AD:5B:A9:5D:11:EB:51:D4:EC:00:EE:3D:42:86:37:99
            X509v3 Authority Key Identifier:
                keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/eCVV0K1bqV0R61HU7ADuPUKGN5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.60.0/23
                IPv6:
                  2001:67c:10a8::/47

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:39:2a:3a:3c:f4:59:ff:42:6e:e2:56:15:d0:df:51:cb:
         82:af:12:29:20:3b:f7:0b:af:2d:70:28:fa:8e:26:e7:65:de:
         e5:92:e1:4e:16:81:7d:e2:89:ad:03:06:70:49:32:50:c0:e9:
         a1:e6:61:5e:c9:91:05:60:f8:47:ce:e5:85:d9:05:54:cc:81:
         cf:b9:cb:19:13:36:c1:be:f3:7c:23:fe:a4:fd:00:38:6f:e8:
         cd:2b:4c:48:5f:57:a1:18:1a:5c:12:74:7d:32:a4:2d:1e:26:
         0e:75:4a:28:99:ef:31:8b:e5:e8:98:f0:8d:b3:05:ec:fb:3e:
         02:25:67:89:ef:dd:3b:ba:6a:6e:18:11:31:b4:d7:9e:bb:04:
         23:55:f9:b3:0a:7f:ec:9f:57:06:a9:8d:0d:59:80:5e:91:6f:
         b7:f7:ea:d6:73:2a:bc:1b:54:ee:f4:cb:ad:35:50:18:68:e6:
         9d:7a:f8:48:33:3d:fe:4f:41:18:8e:8f:fc:fd:8a:bb:d3:df:
         24:de:43:9f:a6:ec:f0:69:21:ec:0d:6a:43:8c:87:ec:a7:3e:
         2f:4b:47:45:f6:92:c2:62:20:bb:13:37:1b:4c:26:3a:3d:71:
         1c:3c:ee:3f:f3:81:f0:80:d3:70:fd:31:88:c0:03:b2:7b:e3:
         83:59:f6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:07:41 2026 by rpki-client