This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/TEEO5INFoFOS-MGXLrvKsA4z6og.roa
File:                     TEEO5INFoFOS-MGXLrvKsA4z6og.roa (raw, json)
Hash identifier:          T0NYFqzX6is45agO0ikp5meW9VU+vzUTgYc02wqqV0s=
Subject key identifier:   4C:41:0E:E4:83:45:A0:53:92:F8:C1:97:2E:BB:CA:B0:0E:33:EA:88
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       019B7DCB180E313F4F85F73042F05D180C82
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/TEEO5INFoFOS-MGXLrvKsA4z6og.roa
Signing time:             Fri 02 Jan 2026 08:20:20 +0000
ROA not before:           Fri 02 Jan 2026 08:20:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12684
IP address blocks:        95.170.40.0/21 maxlen: 21
                          95.170.48.0/21 maxlen: 21
                          95.170.56.0/21 maxlen: 21
                          109.106.64.0/21 maxlen: 21
                          109.106.72.0/21 maxlen: 21
                          109.106.80.0/21 maxlen: 21
                          109.106.88.0/21 maxlen: 21
                          178.73.128.0/21 maxlen: 21
                          178.73.136.0/21 maxlen: 21
                          178.73.144.0/21 maxlen: 21
                          178.73.152.0/21 maxlen: 21
                          178.73.160.0/21 maxlen: 21
                          213.138.0.0/20 maxlen: 20
                          213.138.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:18:0e:31:3f:4f:85:f7:30:42:f0:5d:18:0c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Jan  2 08:20:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c410ee48345a05392f8c1972ebbcab00e33ea88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:68:66:3f:8c:a4:8c:5a:b1:97:e9:04:ff:
                    ea:1b:ec:e8:71:81:b6:8a:37:f9:90:86:53:43:4b:
                    0c:8f:2f:c0:9c:53:1c:d7:8d:d9:c4:b6:cb:3e:81:
                    37:c8:b1:cc:f4:8e:4e:5e:d4:95:ec:42:24:f5:d2:
                    d7:57:cd:aa:c0:99:62:ef:92:90:61:df:38:2e:dd:
                    b8:3a:f2:99:6a:6c:04:61:74:de:90:be:44:c9:41:
                    f1:2e:5a:fc:84:ac:75:c3:d0:f1:fe:03:1e:89:ee:
                    c1:fc:09:82:17:23:b5:1d:6a:5e:a8:89:5d:ea:bc:
                    24:10:aa:ec:9b:10:55:ec:af:54:95:a2:73:9a:49:
                    cb:a9:30:be:d1:6b:47:69:4a:72:f4:8e:c5:5f:6a:
                    00:3b:20:9a:d9:46:f9:cb:24:24:e6:f2:42:4e:da:
                    c0:18:7c:08:ab:50:ca:3d:0a:2c:c2:78:8b:f7:65:
                    01:e5:b9:78:b0:5b:61:a2:3a:cd:b3:d2:20:dc:2d:
                    fc:c1:e5:b0:ed:06:0b:15:2e:a7:5d:7d:5a:61:d4:
                    94:66:e7:48:f4:c1:71:85:b2:e3:49:f7:a1:88:ca:
                    68:e1:8c:64:bb:88:7d:21:8b:4a:76:e5:e7:12:8a:
                    9e:9a:58:f0:05:26:64:06:9b:e0:13:6e:fe:71:a7:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:41:0E:E4:83:45:A0:53:92:F8:C1:97:2E:BB:CA:B0:0E:33:EA:88
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/TEEO5INFoFOS-MGXLrvKsA4z6og.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.170.40.0-95.170.63.255
                  109.106.64.0/19
                  178.73.128.0-178.73.167.255
                  213.138.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:b3:2e:7e:6e:64:75:56:6b:30:40:85:25:d7:16:f5:14:93:
         67:b4:64:37:d5:c7:4c:9a:0c:07:43:14:e0:19:83:74:d4:6b:
         5c:8f:af:92:69:28:4f:68:4d:3d:57:e9:6d:7f:1e:44:cc:09:
         75:d5:d5:f3:16:5c:61:ed:50:06:0e:2d:af:b9:2a:a9:b1:29:
         0e:a8:1a:b9:01:5a:39:9c:8b:29:ab:49:3c:50:0f:8f:1d:19:
         4b:fa:24:23:1d:9c:2c:26:86:54:0a:7d:b7:64:c6:21:8d:02:
         3c:a6:c4:bf:77:ac:e8:af:b6:21:c8:a7:6e:63:93:a8:99:90:
         2e:37:e3:5d:f2:34:d2:1f:31:a9:94:88:90:fe:f7:f4:98:21:
         2d:f1:05:ac:40:1b:6e:a5:a0:97:f6:57:8a:b2:48:dc:43:70:
         7b:0e:c5:cc:49:29:cf:43:6b:4e:10:52:4c:c7:5c:67:ab:89:
         e2:d0:79:bb:49:c0:05:78:55:d0:06:e6:cc:40:44:42:a4:a2:
         69:9e:9a:f0:ed:c4:e8:4e:8b:8c:6c:8a:14:59:4e:f6:71:11:
         a1:14:2c:99:05:05:83:e1:e6:e6:dc:a3:0e:8b:10:64:36:ca:
         3b:9a:2f:eb:d4:f0:03:fc:c3:fe:d7:8f:1b:61:6c:83:0e:3f:
         01:c4:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:42 2026 by rpki-client