This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/arRXEDQu4ezQScl8N1kwDYWEUTA.roa
File:                     arRXEDQu4ezQScl8N1kwDYWEUTA.roa (raw, json)
Hash identifier:          ubPgNFBnWZXISvamvl80AgMPXYqGnpjauqbO6JMCTVc=
Subject key identifier:   6A:B4:57:10:34:2E:E1:EC:D0:49:C9:7C:37:59:30:0D:85:84:51:30
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       019B7B36E3B663B5AF046791D975C5E04281
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/arRXEDQu4ezQScl8N1kwDYWEUTA.roa
Signing time:             Thu 01 Jan 2026 20:19:13 +0000
ROA not before:           Thu 01 Jan 2026 20:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14445
IP address blocks:        79.110.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 14:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:e3:b6:63:b5:af:04:67:91:d9:75:c5:e0:42:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jan  1 20:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ab45710342ee1ecd049c97c3759300d85845130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b4:98:45:5d:0d:86:a7:ba:da:06:c2:5a:b8:
                    37:3c:fc:c2:57:f1:12:9e:75:92:39:a4:9f:2d:33:
                    bf:9f:9b:2d:82:9a:89:88:6e:6a:5a:e8:cc:ff:89:
                    be:4f:08:21:e1:32:7a:9d:ad:34:7e:97:79:61:43:
                    74:f0:8c:a4:eb:a9:17:31:e7:a4:4a:f2:fe:28:36:
                    81:09:1d:eb:9b:43:89:d4:9f:70:2f:ca:45:a0:4c:
                    24:ab:9e:62:57:5a:84:9c:91:fe:95:67:d1:a5:c1:
                    7d:0a:56:ea:01:2a:61:f9:93:4c:41:6b:4c:a9:87:
                    14:4f:0b:64:f7:fb:70:0e:80:21:08:5b:0a:e9:9d:
                    48:7e:6c:63:47:c4:e8:f8:65:67:47:2d:75:42:f5:
                    ea:7d:43:b9:f4:fe:3c:29:da:aa:f9:22:9c:3c:1a:
                    82:8d:8d:c1:9e:25:da:9f:bb:75:26:5c:a4:cc:6b:
                    7d:a9:fd:89:52:7d:b2:e7:af:f9:49:4e:f4:66:6f:
                    e5:4b:77:1e:cb:1b:32:d2:52:ee:2a:63:5e:86:21:
                    50:99:a8:5d:a7:37:14:40:52:1b:fa:6f:9e:0e:63:
                    35:15:ac:2a:15:62:99:f3:a1:c7:6f:54:dc:a9:50:
                    12:b6:06:ce:bb:7a:28:f8:92:cc:3e:e0:28:22:46:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B4:57:10:34:2E:E1:EC:D0:49:C9:7C:37:59:30:0D:85:84:51:30
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/arRXEDQu4ezQScl8N1kwDYWEUTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:20:b8:da:2d:6c:00:c1:13:96:23:d4:f9:c9:6f:a6:b1:f9:
         a8:ea:29:9f:1c:97:90:f9:ae:bc:d3:9e:0b:0a:30:96:86:3e:
         56:70:74:0e:9f:2b:aa:d5:b4:3c:7a:bb:e6:ec:cd:49:cc:77:
         a9:2c:44:1a:8d:76:0d:55:26:ba:ad:2d:3e:b4:8e:e0:fb:41:
         6d:ab:e9:50:dc:79:c8:d5:bd:94:a7:59:fc:a6:64:bb:2e:b5:
         45:dd:e0:7a:b4:90:10:27:4a:69:b4:98:ba:e1:68:84:3f:0b:
         5e:7c:c7:74:85:ee:73:67:41:4a:d5:80:e7:c8:a6:7e:11:4b:
         14:65:dd:20:59:3d:f4:43:cb:90:d4:9f:a9:32:e4:db:b4:6e:
         75:7f:0e:b9:b1:a1:12:84:7f:6f:c3:00:d9:2e:17:2b:a4:48:
         17:20:ab:e1:0d:3c:fd:85:55:e1:d9:b8:a8:89:2d:8b:2d:22:
         9c:75:cc:8b:d6:bb:bd:fc:31:49:c5:fe:74:30:2a:19:a0:87:
         6f:2b:fa:15:a5:97:fd:66:a3:89:36:d3:30:6e:55:83:5e:cb:
         a8:51:e3:5a:b4:09:40:69:1d:55:3c:54:3a:0e:b2:ff:7f:57:
         a7:a5:0d:b5:98:ce:15:d9:2a:c2:78:c7:bd:07:a2:48:69:ae:
         f5:34:a7:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NuO2Y7WvBGeR2XXF4EKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWI0NTcxMDM0MmVlMWVjZDA0OWM5N2MzNzU5MzAwZDg1ODQ1MTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LSYRV0Nhqe62gbCWrg3PPzCV/ES
nnWSOaSfLTO/n5stgpqJiG5qWujM/4m+Twgh4TJ6na00fpd5YUN08Iyk66kXMeek
SvL+KDaBCR3rm0OJ1J9wL8pFoEwkq55iV1qEnJH+lWfRpcF9ClbqASph+ZNMQWtM
qYcUTwtk9/twDoAhCFsK6Z1IfmxjR8To+GVnRy11QvXqfUO59P48Kdqq+SKcPBqC
jY3BniXan7t1JlykzGt9qf2JUn2y56/5SU70Zm/lS3ceyxsy0lLuKmNehiFQmahd
pzcUQFIb+m+eDmM1FawqFWKZ86HHb1TcqVAStgbOu3oo+JLMPuAoIkZdTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGq0VxA0LuHs0EnJfDdZMA2FhFEwMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvYXJSWEVEUXU0ZXpRU2NsOE4xa3dEWVdFVVRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26nMA0G
CSqGSIb3DQEBCwUAA4IBAQBzILjaLWwAwROWI9T5yW+msfmo6imfHJeQ+a68054L
CjCWhj5WcHQOnyuq1bQ8ervm7M1JzHepLEQajXYNVSa6rS0+tI7g+0Ftq+lQ3HnI
1b2Up1n8pmS7LrVF3eB6tJAQJ0pptJi64WiEPwtefMd0he5zZ0FK1YDnyKZ+EUsU
Zd0gWT30Q8uQ1J+pMuTbtG51fw65saEShH9vwwDZLhcrpEgXIKvhDTz9hVXh2bio
iS2LLSKcdcyL1ru9/DFJxf50MCoZoIdvK/oVpZf9ZqOJNtMwblWDXsuoUeNatAlA
aR1VPFQ6DrL/f1enpQ21mM4V2SrCeMe9B6JIaa71NKdQ
-----END CERTIFICATE-----
Generated at Sat Jan 10 00:25:07 2026 by rpki-client