This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa
File:                     eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa (raw, json)
Hash identifier:          Sf1KzRutRQ8Om6lChpX9qp6C7pNo5SKRUwiV8EG2Y1Y=
Subject key identifier:   78:8B:11:3F:DF:91:D0:1E:72:F1:0F:52:30:04:82:D9:FB:88:15:4A
Certificate issuer:       /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial:       019B7EA456B128203A84F06C0D7E8B3D108F
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa
Signing time:             Fri 02 Jan 2026 12:17:37 +0000
ROA not before:           Fri 02 Jan 2026 12:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201877
IP address blocks:        45.13.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:56:b1:28:20:3a:84:f0:6c:0d:7e:8b:3d:10:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
        Validity
            Not Before: Jan  2 12:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=788b113fdf91d01e72f10f52300482d9fb88154a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:0c:ef:08:b0:c5:ce:5f:0e:fc:0c:3f:4d:
                    ec:3d:1a:a5:76:31:b9:3a:a4:da:1d:12:9b:b0:57:
                    0e:a9:50:b7:63:bd:45:bf:eb:6d:0b:9f:46:6e:6d:
                    c7:fe:58:1a:b6:0c:f7:9a:ce:83:d8:6b:9b:7e:f7:
                    49:cb:26:df:89:fb:45:b4:06:f9:28:74:a7:44:eb:
                    eb:cd:8f:fc:ba:3d:8c:11:53:74:b5:e7:81:58:47:
                    6f:02:07:47:ad:a1:fa:65:18:82:f9:54:1e:68:7b:
                    db:5b:c1:49:e7:72:65:0a:20:95:e0:51:8a:48:cd:
                    54:c6:8c:94:41:f1:2d:2b:dc:f2:85:b6:e6:46:2d:
                    06:7b:2b:4f:80:23:14:a9:4c:82:5e:3c:19:c4:72:
                    c9:6f:9b:10:37:17:6c:ca:9f:31:17:8d:bf:4d:63:
                    59:bc:bd:3b:7c:14:64:87:59:f3:96:c2:21:b9:19:
                    3e:50:6f:44:47:3f:45:6d:98:1e:10:16:3f:2f:79:
                    80:05:24:63:e9:be:4e:16:2a:1a:f1:9f:8c:fb:8f:
                    9a:1c:c6:30:e5:24:18:ae:90:97:be:28:98:3d:9e:
                    1f:68:f8:85:a1:bb:bf:a7:48:62:4c:6e:ba:d7:62:
                    6d:9c:c0:bc:96:7c:13:37:c1:a3:2d:49:a3:c5:65:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8B:11:3F:DF:91:D0:1E:72:F1:0F:52:30:04:82:D9:FB:88:15:4A
            X509v3 Authority Key Identifier:
                keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/eIsRP9-R0B5y8Q9SMASC2fuIFUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:5b:4b:60:9e:8e:9b:ce:04:cc:42:37:f1:97:a1:f3:ac:
         d0:9c:c1:7d:3a:40:b3:26:6a:5d:60:0a:37:38:ee:75:bc:4b:
         6c:d2:1e:b0:81:bc:53:61:d0:cd:48:e8:f4:70:84:f2:7f:03:
         0b:f1:da:12:0b:15:4d:67:73:d8:68:19:74:a1:33:62:61:4d:
         c8:17:01:6e:aa:c6:3f:3d:b6:bb:0e:14:65:cf:97:57:81:6c:
         00:c2:40:49:cb:48:91:9f:dc:2a:23:3f:4b:44:39:2e:8e:be:
         03:17:b2:8b:51:e4:28:1a:7c:49:bb:e9:c9:2d:42:9a:1e:95:
         00:42:95:5a:e1:c0:cd:23:26:f6:b3:84:05:b2:2f:8c:c6:c0:
         17:72:87:3f:53:1d:39:6c:a6:47:8d:ec:62:3f:55:bc:b4:69:
         53:a8:01:bb:b5:0d:a5:b0:f2:56:4a:68:df:0e:00:e4:9a:1d:
         97:5e:c6:0d:5f:3e:7d:9f:2b:5a:8a:74:52:bb:8d:98:77:f9:
         47:b2:2d:3b:e7:a2:21:de:b5:8a:c2:97:68:6d:f7:13:0e:14:
         04:99:66:29:d8:90:38:0a:4f:c6:1b:58:da:bf:bb:49:20:15:
         c4:dd:bb:fa:82:00:d9:7c:a7:e1:83:92:cd:7f:55:2b:d4:64:
         69:61:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:48:47 2026 by rpki-client