This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8ejgqfpUFXrEhOgzEQywISjQsN0.roa
File:                     8ejgqfpUFXrEhOgzEQywISjQsN0.roa (raw, json)
Hash identifier:          KfWcRmIdzfkWAy87+PiyAKCUwuvSsFXfT6elvv6qP0U=
Subject key identifier:   F1:E8:E0:A9:FA:54:15:7A:C4:84:E8:33:11:0C:B0:21:28:D0:B0:DD
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C77835191D8AE83C22BFDE4CC4F263
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8ejgqfpUFXrEhOgzEQywISjQsN0.roa
Signing time:             Thu 01 Jan 2026 04:18:39 +0000
ROA not before:           Thu 01 Jan 2026 04:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50551
IP address blocks:        81.15.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:78:35:19:1d:8a:e8:3c:22:bf:de:4c:c4:f2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f1e8e0a9fa54157ac484e833110cb02128d0b0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:35:73:ac:2f:70:a3:14:b8:45:16:ab:4d:
                    97:a0:9e:b7:ba:ea:3b:84:1b:8e:8d:9c:4c:d7:3c:
                    7b:62:18:73:86:7a:6e:69:20:fd:d8:c0:ad:d6:d4:
                    34:48:b4:cb:53:11:95:e5:76:d4:aa:6c:48:1d:db:
                    e1:c5:5d:59:9c:75:7f:e5:a6:c0:00:34:54:2f:1d:
                    8c:a4:43:c0:45:e5:fe:ee:cc:dd:37:38:7f:58:b7:
                    bb:b1:6d:f9:8c:30:f3:2f:e6:e0:40:92:b4:fc:2a:
                    87:87:21:d9:c1:3a:78:fb:a4:25:4c:5d:f6:07:51:
                    03:a2:ed:cb:56:e1:f4:eb:75:c3:54:07:4c:40:85:
                    7f:ab:62:1a:96:e7:2a:c4:bc:8b:ef:f6:ad:44:f7:
                    e4:f2:5b:36:a7:48:e4:92:02:89:c7:d3:c0:dc:03:
                    a3:9b:0e:45:db:2e:50:2b:a8:8c:63:61:1c:45:68:
                    39:6d:d8:a8:ea:6c:2c:73:b5:4e:fa:05:21:75:ab:
                    56:9c:1b:b9:46:f1:a0:74:98:71:13:c3:51:96:f2:
                    5a:c5:bd:a9:a7:c3:8e:62:e9:b3:71:17:27:23:fc:
                    d0:2c:71:6c:91:8f:c6:cf:b4:c9:0e:1d:7c:7f:80:
                    6c:ce:c3:f0:3f:5d:cf:5d:5b:e0:03:05:67:f1:16:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:E0:A9:FA:54:15:7A:C4:84:E8:33:11:0C:B0:21:28:D0:B0:DD
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8ejgqfpUFXrEhOgzEQywISjQsN0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a1:73:64:4e:ad:25:58:b8:3a:ef:1e:8e:d1:ac:c5:73:69:
         7e:5a:d8:e1:0f:b0:ca:c9:94:c1:20:3b:31:95:d0:39:1a:8e:
         58:5f:7d:ae:50:3a:e6:91:4e:8a:86:9e:22:b6:06:d1:8f:a8:
         02:1b:94:a0:67:da:3b:08:8a:dc:f4:a3:fb:63:7b:cc:10:bc:
         ca:61:69:07:1a:e2:a4:0b:cb:05:83:74:24:74:5e:f1:87:12:
         3c:80:e7:7c:ee:b8:f3:bc:83:f0:00:3f:18:ed:c5:89:ca:5a:
         cf:ce:29:a4:6d:81:22:a1:00:13:d4:b1:58:0f:ee:be:e8:e2:
         20:7a:6b:72:ad:3b:ed:4f:40:13:6d:b3:9e:87:07:ef:54:f4:
         59:ae:61:ef:6a:3e:3b:1d:96:24:7d:02:95:59:78:28:e6:67:
         e6:bc:fd:88:40:07:42:6f:30:4e:0c:81:79:66:bb:55:25:79:
         a3:2e:34:77:fb:4f:0d:97:43:86:b0:3e:5c:5e:48:5c:f5:34:
         21:c3:b0:5f:0f:eb:2c:f0:c0:2c:32:86:b1:fe:58:76:8e:26:
         1b:b6:35:c3:1d:1c:bc:3a:9c:a4:67:bb:89:63:2b:27:54:cb:
         57:ec:92:f2:a0:e7:b9:51:f7:f9:ed:29:0f:64:35:1e:de:92:
         9f:c0:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:15:22 2026 by rpki-client