This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa
File:                     enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa (raw, json)
Hash identifier:          xl5DM0dAYTSjokbLerljf4uHTj1MwUbj8WLFHYv9TA4=
Subject key identifier:   7A:74:3F:32:1D:82:BE:7C:F3:6B:E1:C2:27:EE:FD:C0:03:B5:2D:B7
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019B7E37230154A6EFDAB4FD21DA71A49334
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa
Signing time:             Fri 02 Jan 2026 10:18:21 +0000
ROA not before:           Fri 02 Jan 2026 10:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208942
IP address blocks:        93.179.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:23:01:54:a6:ef:da:b4:fd:21:da:71:a4:93:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  2 10:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a743f321d82be7cf36be1c227eefdc003b52db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:a2:aa:e8:43:6f:6d:eb:e6:74:81:44:11:
                    5e:96:74:5d:a7:c5:e4:89:c1:22:ff:99:2d:69:c8:
                    66:d1:f5:e1:c9:ee:7d:31:9d:0c:dd:d9:18:c4:51:
                    02:ef:8b:86:36:16:00:55:be:32:8e:93:be:f5:28:
                    03:9e:ca:ad:47:ee:c6:07:bd:e4:a6:0a:48:b9:38:
                    87:2b:29:68:f3:06:5b:ac:d7:9a:bd:d6:28:35:ce:
                    e5:11:d0:06:13:12:14:99:79:05:a3:84:36:10:20:
                    23:ed:94:a7:2b:75:76:c9:18:35:cc:84:d3:20:70:
                    dd:6b:8c:e6:bb:e7:db:47:c6:93:e4:02:07:28:d3:
                    3c:1c:2e:18:02:a1:46:e8:c4:0c:91:3a:fe:cc:9b:
                    4c:b8:bc:07:cb:7c:e8:24:e2:62:47:bd:9b:08:50:
                    99:a9:30:aa:86:06:47:ad:50:ed:c3:12:4c:17:19:
                    84:d8:ef:f7:eb:61:51:e6:c3:84:79:39:aa:b3:fe:
                    36:a2:31:20:0f:46:51:02:08:56:ab:e6:f1:b4:4d:
                    61:d9:10:39:e3:e5:6c:10:c9:0c:0a:af:df:fe:71:
                    6a:0e:0b:83:c1:03:64:52:6e:cc:9a:01:95:23:08:
                    c8:e7:3c:df:7c:53:40:31:1b:cc:02:e4:55:c7:c4:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:3F:32:1D:82:BE:7C:F3:6B:E1:C2:27:EE:FD:C0:03:B5:2D:B7
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/enQ_Mh2Cvnzza-HCJ-79wAO1Lbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:bc:77:63:7f:06:de:04:97:97:3c:a5:73:fc:b9:64:6e:fd:
         27:63:11:5a:81:55:6a:b7:76:69:fc:b5:f6:26:cc:9c:e9:f4:
         82:ae:46:06:c2:c6:48:9f:ad:bb:30:cb:61:e8:b0:e5:76:fc:
         8b:21:e4:6e:9a:a7:74:d0:b5:86:c9:aa:b3:ba:36:69:74:96:
         e3:e3:9a:9c:3d:d5:3e:b3:80:38:1e:9f:0f:2b:0a:83:97:32:
         e0:95:17:35:2f:7c:e5:8d:56:9a:1d:9a:a0:44:4e:5d:32:a1:
         4a:f8:7f:b8:a0:2b:8b:76:90:42:e9:76:03:c5:cc:83:0e:35:
         07:7e:c0:1d:ab:4b:82:04:7b:f3:63:45:33:35:07:8d:f0:6f:
         1e:36:79:47:81:c9:b6:a6:0f:01:bb:55:eb:ee:da:d9:87:64:
         b4:8a:3d:32:55:13:43:39:11:66:66:df:e5:30:9c:23:7f:f2:
         6f:d9:d4:b1:bb:fd:6e:10:1f:18:6d:6f:00:54:b7:52:41:14:
         28:b5:2f:54:e6:ad:d2:49:86:3f:d1:eb:f6:41:dd:8a:88:6b:
         5c:14:0a:2e:c8:2f:29:7d:09:84:01:3e:1d:55:a1:79:b1:a8:
         c4:25:dc:02:a4:f3:d6:24:7a:0e:fa:e7:f2:cd:8f:e4:3e:bb:
         8b:2c:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:37 2026 by rpki-client