This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/edoHN6_JsP-n0lJvF27iJ8eI6P4.roa
File:                     edoHN6_JsP-n0lJvF27iJ8eI6P4.roa (raw, json)
Hash identifier:          8NDkYnaMysyzTRQRKzPfGA1yeZmwSTwDWWtshuRs65s=
Subject key identifier:   79:DA:07:37:AF:C9:B0:FF:A7:D2:52:6F:17:6E:E2:27:C7:88:E8:FE
Certificate issuer:       /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial:       019B7F80A10DEB52CE3D4819D6C2C09C6C5F
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/edoHN6_JsP-n0lJvF27iJ8eI6P4.roa
Signing time:             Fri 02 Jan 2026 16:18:14 +0000
ROA not before:           Fri 02 Jan 2026 16:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209847
IP address blocks:        185.216.13.0/24 maxlen: 24
                          2a13:6300::/32 maxlen: 32
                          2a13:6301::/32 maxlen: 32
                          2a13:6303::/32 maxlen: 32
                          2a13:6304::/32 maxlen: 32
                          2a13:6305::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:80:a1:0d:eb:52:ce:3d:48:19:d6:c2:c0:9c:6c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
        Validity
            Not Before: Jan  2 16:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79da0737afc9b0ffa7d2526f176ee227c788e8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a4:16:7f:00:16:2a:62:8c:d4:e9:99:40:da:
                    33:58:6d:a9:b3:ec:d7:bd:c3:0f:00:60:af:87:69:
                    bf:5b:1f:df:78:c6:2f:41:3b:dd:fc:10:08:2a:9f:
                    61:1a:f7:08:18:4a:a0:5f:17:97:7a:a8:fc:3a:e1:
                    57:5d:44:29:91:ed:a8:49:c0:4e:a0:08:03:8d:dd:
                    5a:e6:69:cd:5f:a2:47:41:e6:21:61:53:0e:66:4f:
                    c1:9f:2a:94:d8:a3:36:ca:82:2a:4e:03:1b:d6:1a:
                    28:d3:4a:e2:6a:80:09:c6:b0:99:2a:bd:e4:7e:ce:
                    57:18:fb:41:28:b3:45:5f:e5:17:82:1b:33:c0:37:
                    a5:59:a2:07:47:08:df:0b:68:93:28:91:e6:42:5e:
                    c0:1e:2b:29:f2:eb:46:9f:f1:80:1e:ce:f8:aa:04:
                    4b:ee:49:3d:4d:94:a1:03:06:30:8c:d9:30:2e:31:
                    9b:cb:89:f4:34:31:45:73:5f:b5:b4:62:dd:0e:bf:
                    a9:24:01:ca:44:68:05:b0:66:90:68:d7:86:97:51:
                    94:50:95:36:81:12:b6:14:47:6a:73:0f:bd:21:d0:
                    9b:5d:23:4d:c9:13:9c:28:f9:62:8e:be:43:e6:27:
                    52:6a:39:e6:89:fc:74:5d:b3:75:50:f2:cc:d9:5d:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DA:07:37:AF:C9:B0:FF:A7:D2:52:6F:17:6E:E2:27:C7:88:E8:FE
            X509v3 Authority Key Identifier:
                keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/edoHN6_JsP-n0lJvF27iJ8eI6P4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.13.0/24
                IPv6:
                  2a13:6300::/31
                  2a13:6303::-2a13:6305:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:41:f6:fb:aa:6c:a4:de:6e:ea:67:77:6c:5f:17:08:18:
         f9:a7:90:fe:3a:7e:b5:cc:53:85:b9:9c:5e:0e:66:9b:33:5c:
         8c:94:ab:d0:f2:5a:f0:f9:8c:2a:23:13:0f:1f:00:76:b4:1a:
         ee:d5:93:0a:f4:e7:91:d8:29:2b:8b:1e:f6:23:2c:bb:c4:08:
         8f:34:40:1f:49:61:6f:72:b4:96:57:77:6c:65:97:99:c8:d9:
         e1:01:fe:90:73:2a:61:db:32:6d:12:43:c3:47:17:45:5f:92:
         e6:74:80:de:0e:7e:7b:26:6d:13:77:17:15:64:0e:a9:9f:3f:
         22:1f:f7:33:f0:a6:86:ad:7a:fa:f6:ff:35:0e:6f:d0:a1:c5:
         fe:b8:53:f2:49:a2:15:a0:4c:f0:61:08:dd:e9:18:b0:5b:8d:
         7c:9f:5e:70:d1:c3:e6:c2:ab:85:5a:bb:92:c4:b0:ef:60:3a:
         dd:b4:c2:e5:34:b3:90:b1:aa:8a:3c:ef:58:75:99:9d:9c:bd:
         18:f1:e2:02:3e:b0:08:1e:7f:e3:f8:66:d7:3f:36:1f:22:98:
         44:a4:ec:bf:2c:6f:0f:aa:30:58:57:eb:31:b0:5e:fe:df:f9:
         75:65:e2:84:b6:97:d4:2c:0b:12:ad:5a:1c:80:5c:2b:d1:e7:
         fa:c7:46:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:53:53 2026 by rpki-client