This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/epL-6pVwzhIEf7qPG0idZwvRAaU.roa
File:                     epL-6pVwzhIEf7qPG0idZwvRAaU.roa (raw, json)
Hash identifier:          PUOL+WHkVofoMPu8K9ZuIn3mIvtNQi0EbJERGXzRSaU=
Subject key identifier:   7A:92:FE:EA:95:70:CE:12:04:7F:BA:8F:1B:48:9D:67:0B:D1:01:A5
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       019B7EA56653E0D94356CB18E1FBA5BB084F
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/epL-6pVwzhIEf7qPG0idZwvRAaU.roa
Signing time:             Fri 02 Jan 2026 12:18:47 +0000
ROA not before:           Fri 02 Jan 2026 12:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216147
IP address blocks:        2a10:4646:3d0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:66:53:e0:d9:43:56:cb:18:e1:fb:a5:bb:08:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jan  2 12:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a92feea9570ce12047fba8f1b489d670bd101a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:81:d5:aa:b4:29:3d:50:3d:82:cc:d9:af:
                    1a:4d:4e:02:e7:88:da:0f:60:1c:be:df:15:cc:04:
                    cf:48:ee:b2:e3:7c:f4:7a:d2:3a:11:a7:16:7d:e3:
                    e1:33:fe:73:b6:33:4c:49:d2:33:4f:83:bb:84:55:
                    f5:68:35:25:0a:da:ca:09:22:9f:89:72:96:ce:48:
                    b2:53:db:1e:8e:9e:ab:ab:9c:6e:7d:c1:f7:5e:5e:
                    a4:77:75:d9:41:7a:db:a8:0a:7c:c0:42:a1:fb:81:
                    8e:b2:90:f5:3e:45:6c:45:e0:b6:5e:15:2f:a2:3d:
                    80:54:1f:a3:f3:e5:13:db:cf:b6:2f:90:5a:07:81:
                    dd:b3:9f:8d:5b:db:c3:26:8e:77:20:c9:21:c4:c8:
                    34:16:d2:fe:19:03:40:25:83:29:ea:c5:36:f0:96:
                    51:af:35:79:31:bb:73:d0:65:ba:8a:de:54:c5:6b:
                    0d:87:4f:9b:b1:8c:53:f6:3a:32:fe:a3:3d:c5:06:
                    65:87:bc:b4:7a:21:88:53:e2:20:b1:08:51:00:97:
                    4f:be:85:6d:c9:4d:ca:87:9a:19:d1:44:7c:bd:10:
                    39:ec:1e:f4:be:44:39:04:ac:6f:f3:31:aa:ea:2e:
                    33:81:85:44:b8:f4:79:c0:44:89:60:fd:25:87:78:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:92:FE:EA:95:70:CE:12:04:7F:BA:8F:1B:48:9D:67:0B:D1:01:A5
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/epL-6pVwzhIEf7qPG0idZwvRAaU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:3d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:62:74:19:6f:0f:0c:38:d0:d2:17:90:7a:3a:77:b2:0d:94:
         8c:69:59:bf:e1:41:77:19:0b:8a:12:2c:ff:08:e1:57:be:b3:
         e4:e5:b9:9a:77:1a:72:75:8a:52:3f:a1:4e:a8:e2:94:ab:3b:
         94:8e:3a:c9:d2:e7:34:9a:27:51:e4:ba:a5:e0:f0:4a:33:b2:
         29:04:aa:48:5f:38:8c:86:ce:6d:31:0c:d9:43:54:c0:74:0f:
         a5:e0:dc:c7:a5:4e:53:16:d8:d2:1c:1a:c3:f2:02:20:06:07:
         a6:ac:b8:bf:60:c7:67:a4:6a:fe:e9:2e:9b:ff:19:8b:0d:5e:
         cb:1e:75:34:16:7a:90:03:52:8b:99:c5:8f:22:a4:5e:4f:d4:
         b5:02:32:46:63:5b:8a:8d:33:21:1b:f4:21:26:e0:56:9f:43:
         43:57:d2:aa:53:b3:78:a9:55:4c:44:0a:37:f3:2e:aa:ae:a1:
         cd:40:39:74:25:8c:e5:b1:33:6f:c7:05:46:d5:70:a6:44:af:
         68:41:fb:6c:45:36:40:ad:9b:03:c3:9f:e2:5d:ea:cb:c2:e1:
         4b:42:8a:96:3e:b0:4e:24:18:20:14:57:99:1d:a2:b3:a0:64:
         29:5d:fd:13:e8:a2:71:b2:aa:44:cf:00:6a:f6:c5:68:b3:b6:
         a1:99:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:07:43 2026 by rpki-client