This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/iENB1Spx9V_JeHkY-UbptgejZiE.roa
File:                     iENB1Spx9V_JeHkY-UbptgejZiE.roa (raw, json)
Hash identifier:          ES4qZEdwWMYEICC/I+62oZDSZUFAJeYLS9pH0fQiUlo=
Subject key identifier:   88:43:41:D5:2A:71:F5:5F:C9:78:79:18:F9:46:E9:B6:07:A3:66:21
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       019B7DC88A864970FFDC57D5E58355503076
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/iENB1Spx9V_JeHkY-UbptgejZiE.roa
Signing time:             Fri 02 Jan 2026 08:17:33 +0000
ROA not before:           Fri 02 Jan 2026 08:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212566
IP address blocks:        95.161.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c8:8a:86:49:70:ff:dc:57:d5:e5:83:55:50:30:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Jan  2 08:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=884341d52a71f55fc9787918f946e9b607a36621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:72:be:f7:21:13:71:c5:d9:43:bf:e6:48:
                    04:cb:8a:23:4e:fc:bf:29:5c:0a:59:fb:59:ee:32:
                    04:d1:b0:b7:b8:f4:88:02:9e:37:dd:37:3b:c2:35:
                    36:0d:5e:27:8d:30:d6:da:87:55:46:35:19:d8:1c:
                    dd:6e:80:f7:8a:28:f7:0d:70:7c:07:cd:e5:5e:fc:
                    72:f8:a9:22:86:70:7a:86:58:07:f3:b1:38:d4:d0:
                    59:5b:bc:20:28:5c:73:bb:72:d2:b7:57:95:02:d9:
                    c4:32:be:3a:60:12:b7:3a:60:6f:4d:20:51:66:86:
                    47:be:23:5c:07:c4:a6:4f:1d:4c:88:00:45:c6:58:
                    b5:8e:4b:f7:6b:8b:8a:e3:b1:81:3b:82:89:91:33:
                    ff:f0:68:0a:c0:37:29:1b:5c:e4:2f:11:44:dc:64:
                    13:49:e7:1e:c7:01:14:80:5b:ba:20:1f:21:c6:98:
                    77:03:3c:7f:18:53:4b:5c:6a:51:f5:cb:09:9d:29:
                    c2:58:38:d8:78:63:88:bb:65:25:0d:09:62:e2:e5:
                    b6:b4:0f:90:30:9b:a7:4e:c8:49:92:64:fd:82:ff:
                    9b:62:9e:8a:92:f2:a3:06:4d:21:1a:fb:83:70:8c:
                    52:16:6c:b9:d6:48:fd:05:0b:ef:1b:c5:37:0f:a9:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:43:41:D5:2A:71:F5:5F:C9:78:79:18:F9:46:E9:B6:07:A3:66:21
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/iENB1Spx9V_JeHkY-UbptgejZiE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.161.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:cf:32:82:0a:38:be:a1:8c:dd:6a:6d:63:c5:e0:e2:29:8f:
         59:59:7d:c8:bf:fb:ed:2f:b6:b8:34:69:a9:52:ce:73:5e:21:
         fc:e5:65:a2:49:93:6e:22:70:bf:af:83:67:6c:b1:1d:d0:0b:
         0b:e4:c6:12:7b:9e:14:25:31:15:a5:55:db:86:44:5d:0d:db:
         2a:bf:bc:48:c6:ec:f6:06:00:fb:f2:c7:dd:ba:95:ea:86:74:
         ce:5f:21:2b:da:1c:1b:fa:f2:cd:dd:08:5f:f8:ee:db:69:6e:
         d3:cb:c1:c7:91:f3:2d:1d:e5:d2:dd:e8:73:98:f3:86:37:f7:
         30:ce:4b:f4:8d:03:a6:6a:28:fc:55:3e:2e:91:ea:6a:92:a9:
         c2:df:80:33:90:0b:f3:06:2d:25:24:a2:d7:70:03:25:12:3a:
         65:00:81:ce:6a:95:6b:b9:80:5b:1a:b3:e6:68:7f:3f:e7:70:
         9c:fc:4e:40:9e:b9:85:38:5d:67:6a:ad:df:69:f9:34:09:47:
         ec:ca:2d:be:1d:87:3f:25:1b:c4:c3:5a:1e:98:52:11:16:51:
         73:e2:e8:8c:8e:cb:fe:f3:3c:98:32:a3:0c:80:98:c3:2f:29:
         55:83:49:4f:fe:f3:13:92:1b:d6:18:0a:8b:bb:62:27:a3:19:
         fd:d6:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:34:24 2026 by rpki-client