This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/EadvWoNQk_Njor8ut2EuvMgsWZA.roa
File:                     EadvWoNQk_Njor8ut2EuvMgsWZA.roa (raw, json)
Hash identifier:          272yhcfjimUpUR4S1j65HTj4uGPgPbEgmFPebrPW9QY=
Subject key identifier:   11:A7:6F:5A:83:50:93:F3:63:A2:BF:2E:B7:61:2E:BC:C8:2C:59:90
Certificate issuer:       /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial:       019B7B365493948082CB3E1FA80EF4158ABF
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/EadvWoNQk_Njor8ut2EuvMgsWZA.roa
Signing time:             Thu 01 Jan 2026 20:18:36 +0000
ROA not before:           Thu 01 Jan 2026 20:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     559
IP address blocks:        193.5.22.0/24 maxlen: 24
                          193.36.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:54:93:94:80:82:cb:3e:1f:a8:0e:f4:15:8a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
        Validity
            Not Before: Jan  1 20:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=11a76f5a835093f363a2bf2eb7612ebcc82c5990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:d3:f0:09:c5:3f:64:f0:2e:99:6c:35:c4:
                    3d:1c:a2:9d:28:a6:c1:57:c3:10:35:8d:b2:45:b7:
                    8a:51:51:5e:55:d9:fc:c8:87:86:80:d1:f6:52:03:
                    9b:b7:ad:1c:c3:33:b1:b4:13:32:30:0e:31:0e:05:
                    4c:f1:8c:6a:3e:76:3c:af:e3:7f:5d:48:a0:e3:fe:
                    53:99:9e:2d:a4:d2:38:86:84:d1:4c:e7:b7:ac:ea:
                    ba:00:93:e3:73:01:d8:fd:bd:43:62:19:de:e9:8c:
                    08:ac:1d:b6:0b:e7:15:2d:e5:9e:ec:d1:da:89:7d:
                    37:2f:56:85:e4:3c:0f:e3:4e:5f:cc:61:cf:48:f4:
                    17:67:ec:0b:c3:9d:9a:2c:7c:00:b1:1b:d6:c0:43:
                    80:13:b9:7f:d2:19:50:f2:d5:62:aa:2e:4a:e8:d7:
                    b3:d6:1f:27:ea:a4:ec:d2:52:b0:2f:3c:04:b3:03:
                    81:4d:40:a3:80:17:f6:31:95:36:83:81:6c:13:56:
                    42:d1:05:95:f6:7b:10:8c:ed:4b:e1:23:db:59:b8:
                    a3:62:93:12:03:e0:78:65:74:90:bd:f2:c3:20:17:
                    59:99:bf:06:ec:88:a6:fb:dc:dd:70:1e:1d:87:9e:
                    f2:89:f8:1b:0a:37:08:28:3f:47:58:52:c9:74:49:
                    2e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A7:6F:5A:83:50:93:F3:63:A2:BF:2E:B7:61:2E:BC:C8:2C:59:90
            X509v3 Authority Key Identifier:
                keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/EadvWoNQk_Njor8ut2EuvMgsWZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.5.22.0/24
                  193.36.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f3:68:ba:77:29:bc:17:53:d1:b2:ea:f0:0c:f5:a3:a6:2a:
         be:bf:e4:c3:ae:e7:74:cb:82:5a:cc:26:99:e1:4d:24:b1:20:
         7c:d0:e5:d0:49:13:db:bf:f7:25:5b:93:3e:de:1f:ce:97:15:
         b2:d5:44:a7:9c:0e:ac:e0:fe:c6:0e:55:b0:55:69:2e:b6:e5:
         a6:73:ec:c1:a2:85:fa:67:d6:46:7f:f6:26:ef:a6:e3:42:fa:
         cb:1a:62:d3:51:85:10:35:d8:6a:e1:7a:da:e5:f4:0b:1e:50:
         fb:24:6b:75:95:39:44:1f:34:d6:e0:4d:bc:ee:39:b4:cf:77:
         f4:b8:fc:14:a6:cf:f0:f1:8f:e8:1a:ff:cd:a9:24:b1:2e:1f:
         60:c8:4f:77:c5:f0:2f:b7:da:78:d9:4d:79:95:d7:ac:c6:92:
         ed:d8:b6:bb:3f:cc:d0:30:2b:66:48:45:0f:87:d1:8b:c0:b1:
         8f:86:13:1c:51:bb:db:12:58:f9:d8:dc:bd:ad:da:66:d0:6d:
         0e:82:4a:8d:db:95:01:8d:93:9d:3b:88:3d:e5:ea:c3:e3:f9:
         f6:5b:94:6a:70:6b:f5:7f:f5:77:be:ee:49:fb:55:7a:78:66:
         f7:50:f6:4e:a6:45:ac:4a:92:c3:5b:38:6f:d6:f3:ee:87:b0:
         d0:ff:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:04 2026 by rpki-client