This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/e9AyjlXwXBjeN_sQYf5sT7IZ60k.roa
File:                     e9AyjlXwXBjeN_sQYf5sT7IZ60k.roa (raw, json)
Hash identifier:          5BeMkSTwe8lYH/6FFSl6JdJloHvDA2cuHQFyNcB8z8k=
Subject key identifier:   7B:D0:32:8E:55:F0:5C:18:DE:37:FB:10:61:FE:6C:4F:B2:19:EB:49
Certificate issuer:       /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial:       019B79EC271307467C8B5C7092D0C55BBD17
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/e9AyjlXwXBjeN_sQYf5sT7IZ60k.roa
Signing time:             Thu 01 Jan 2026 14:17:58 +0000
ROA not before:           Thu 01 Jan 2026 14:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     65011
IP address blocks:        185.3.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:27:13:07:46:7c:8b:5c:70:92:d0:c5:5b:bd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
        Validity
            Not Before: Jan  1 14:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7bd0328e55f05c18de37fb1061fe6c4fb219eb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:55:c8:68:85:49:b9:ab:09:a3:52:5f:98:
                    99:23:ec:30:01:72:03:95:de:9d:a5:14:6d:b0:7b:
                    60:20:ae:0c:03:45:0f:25:26:48:23:9c:dc:3d:ad:
                    11:97:c0:a0:83:69:68:04:13:9c:90:4a:45:9e:1d:
                    a3:a1:06:2f:2c:e9:4b:46:7e:a6:9e:99:bd:de:a9:
                    c0:71:3b:3f:09:f3:7e:e3:34:e1:90:2d:f8:89:d9:
                    79:e5:26:62:17:be:9d:af:a0:fe:50:c3:12:9d:d1:
                    d9:14:f5:44:6f:c9:53:23:ee:64:33:6d:13:f0:3e:
                    ba:20:42:29:98:36:85:68:3b:38:6c:64:e8:83:e3:
                    10:c9:a5:61:26:18:09:ae:a9:e1:3b:1e:9e:16:5b:
                    fc:1a:18:87:7f:48:df:2f:7f:97:9b:41:d7:34:59:
                    86:36:2c:3a:7c:2a:53:e3:3a:71:06:f2:9f:60:c6:
                    10:28:3e:eb:de:b6:b2:7a:84:40:0f:d1:6e:af:12:
                    b5:c8:ec:e4:29:92:f4:eb:cc:7b:5b:6d:3d:bf:6e:
                    1d:d2:23:4e:af:37:8d:d4:4e:0d:fa:dd:d4:e8:88:
                    22:2a:8a:67:b2:11:de:1d:05:eb:f5:1a:43:be:5f:
                    c6:8c:eb:97:22:8c:82:9c:7a:c1:02:26:87:7c:19:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D0:32:8E:55:F0:5C:18:DE:37:FB:10:61:FE:6C:4F:B2:19:EB:49
            X509v3 Authority Key Identifier:
                keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/e9AyjlXwXBjeN_sQYf5sT7IZ60k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.3.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:80:31:54:3d:f2:f6:71:d3:a1:50:c1:1b:63:53:da:f1:d2:
         a6:4d:59:00:d5:77:ba:2b:a1:72:8d:92:41:1e:0d:6d:47:57:
         cb:7f:d3:8c:c7:1b:1f:a3:cf:fb:27:f9:86:42:43:c8:74:97:
         18:93:54:8f:a2:ec:5f:e8:1c:d6:d8:59:62:0a:81:df:99:4b:
         3c:46:26:68:51:b5:62:ed:6c:cc:06:32:d6:c8:39:6d:65:54:
         cf:c7:f6:c3:b2:c5:6d:ca:a4:6d:21:d7:5c:30:90:83:42:86:
         b8:15:c2:87:df:b7:1e:f0:7e:33:29:35:ac:08:ad:44:b3:02:
         25:e8:92:99:7c:3c:51:b8:64:62:d3:b7:2e:d6:32:84:64:e1:
         58:45:73:be:30:de:2c:f2:04:a1:ea:3c:7a:35:8d:b0:2a:4f:
         05:e0:05:39:00:a5:f2:50:c7:f2:a7:a6:75:e3:26:01:e5:7a:
         7e:d9:ea:04:cd:61:e8:40:01:b1:62:45:d9:2b:2a:5c:0b:3c:
         93:17:82:e2:e9:31:65:9c:9d:2c:e9:5f:59:65:99:aa:30:d0:
         54:a2:4d:52:97:c1:65:72:96:0b:24:41:5d:5b:74:9d:60:c0:
         bf:26:16:dc:d8:aa:5e:ea:09:fc:75:93:e9:fe:ec:19:7e:39:
         4d:1d:a6:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57CcTB0Z8i1xwktDFW70XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMTY3YmI2YjA2MWZmZmE2MjlkZDJhODRjY2Y3ZGI0NGM3
MWEzNTEwHhcNMjYwMTAxMTQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmQwMzI4ZTU1ZjA1YzE4ZGUzN2ZiMTA2MWZlNmM0ZmIyMTllYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW9VyGiFSbmrCaNSX5iZI+wwAXID
ld6dpRRtsHtgIK4MA0UPJSZII5zcPa0Rl8Cgg2loBBOckEpFnh2joQYvLOlLRn6m
npm93qnAcTs/CfN+4zThkC34idl55SZiF76dr6D+UMMSndHZFPVEb8lTI+5kM20T
8D66IEIpmDaFaDs4bGTog+MQyaVhJhgJrqnhOx6eFlv8GhiHf0jfL3+Xm0HXNFmG
Niw6fCpT4zpxBvKfYMYQKD7r3rayeoRAD9FurxK1yOzkKZL068x7W209v24d0iNO
rzeN1E4N+t3U6IgiKopnshHeHQXr9RpDvl/GjOuXIoyCnHrBAiaHfBnpywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHvQMo5V8FwY3jf7EGH+bE+yGetJMB8GA1UdIwQY
MBaAFOwWe7awYf/6Yp3SqEzPfbRMcaNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mNTVkNDQtNTg5My00YzIyLWIwYjct
YzY1NWFkNTk0MTkzLzEvZTlBeWpsWHdYQmplTl9zUVlmNXNUN0laNjBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mNTVkNDQtNTg5My00YzIyLWIwYjctYzY1NWFkNTk0MTkz
LzEvN0JaN3RyQmhfX3BpbmRLb1RNOTl0RXh4bzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQMeMA0G
CSqGSIb3DQEBCwUAA4IBAQCMgDFUPfL2cdOhUMEbY1Pa8dKmTVkA1Xe6K6FyjZJB
Hg1tR1fLf9OMxxsfo8/7J/mGQkPIdJcYk1SPouxf6BzW2FliCoHfmUs8RiZoUbVi
7WzMBjLWyDltZVTPx/bDssVtyqRtIddcMJCDQoa4FcKH37ce8H4zKTWsCK1EswIl
6JKZfDxRuGRi07cu1jKEZOFYRXO+MN4s8gSh6jx6NY2wKk8F4AU5AKXyUMfyp6Z1
4yYB5Xp+2eoEzWHoQAGxYkXZKypcCzyTF4Li6TFlnJ0s6V9ZZZmqMNBUok1Sl8Fl
cpYLJEFdW3SdYMC/Jhbc2Kpe6gn8dZPp/uwZfjlNHaYg
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:32:13 2026 by rpki-client