This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/eY8EusladH4IXC1CHpY8aRyUD8U.roa
File:                     eY8EusladH4IXC1CHpY8aRyUD8U.roa (raw, json)
Hash identifier:          8OQXGxBuu4pTDdv8FmznuoTImi4gnvUuKmWDiou3mfQ=
Subject key identifier:   79:8F:04:BA:C9:5A:74:7E:08:5C:2D:42:1E:96:3C:69:1C:94:0F:C5
Certificate issuer:       /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial:       019B7EA6608989C95B1F6053A67F0D93B708
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/eY8EusladH4IXC1CHpY8aRyUD8U.roa
Signing time:             Fri 02 Jan 2026 12:19:51 +0000
ROA not before:           Fri 02 Jan 2026 12:19:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16142
IP address blocks:        213.215.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:60:89:89:c9:5b:1f:60:53:a6:7f:0d:93:b7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
        Validity
            Not Before: Jan  2 12:19:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=798f04bac95a747e085c2d421e963c691c940fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e6:d4:5a:c4:20:b2:f7:1e:fe:f9:b4:e4:ce:
                    41:58:8b:3b:bb:81:43:90:2d:69:de:40:50:90:f0:
                    f7:4d:b7:3e:f0:21:b8:a7:40:2a:46:fe:3f:32:32:
                    2b:c1:67:fa:c7:79:39:ab:e8:6f:d0:84:69:3e:63:
                    71:42:99:5c:ce:ec:e2:63:38:9d:b4:e5:45:84:bd:
                    17:26:7e:11:d7:3c:de:ce:bc:f8:37:26:73:d4:35:
                    dc:10:6e:99:c0:5b:47:62:c2:67:1d:0c:41:23:fa:
                    58:51:4b:8d:bd:09:b8:c1:00:ff:32:e3:66:a7:b1:
                    e2:a8:2a:96:ae:56:b3:00:23:8e:c6:77:3d:8a:81:
                    74:65:21:dc:90:f6:13:ac:1d:62:2f:f7:0d:be:d6:
                    b3:09:ea:c6:64:0e:6d:2a:8c:c8:15:54:c6:56:f8:
                    fa:09:ba:a8:34:9a:8e:0b:26:49:f2:63:b6:7f:63:
                    28:bf:ed:ef:8d:e7:f9:13:83:2a:b6:be:a8:55:22:
                    96:23:0d:20:9c:ca:e9:9b:77:db:e0:65:0a:6e:68:
                    5e:79:54:ae:61:29:a6:3a:e6:5f:20:00:98:7a:c2:
                    51:25:31:63:4a:f4:5f:9b:3b:03:03:2d:aa:ac:e5:
                    bf:cd:35:0f:41:99:5c:dc:b1:1c:0f:a1:8e:c9:38:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8F:04:BA:C9:5A:74:7E:08:5C:2D:42:1E:96:3C:69:1C:94:0F:C5
            X509v3 Authority Key Identifier:
                keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/eY8EusladH4IXC1CHpY8aRyUD8U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.215.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:b0:d4:dd:3d:2b:9f:64:96:89:1f:1f:01:d3:f9:9a:0e:
         95:81:bf:d0:e3:c4:1f:72:67:c9:34:9e:c2:6e:df:64:7c:f5:
         49:c1:05:63:75:1a:02:8d:7a:89:12:a3:9a:ab:30:87:d4:ea:
         a7:7b:42:61:39:81:1c:96:b0:fe:44:bb:90:d7:11:2c:c1:c0:
         e7:dc:f4:28:26:74:b2:61:8d:f1:97:b5:22:65:b5:f4:37:57:
         be:dc:83:7f:da:4f:ad:d4:7c:21:f1:1a:67:28:16:bf:56:71:
         49:98:9b:54:7e:b3:4a:6d:33:80:0b:7b:48:88:b8:fa:ab:9e:
         04:c0:8b:f3:51:06:c4:54:a2:66:d3:a3:54:d0:06:cd:34:e4:
         3d:0c:6a:07:d8:e2:65:05:3f:ad:fb:27:b2:15:4e:51:16:e7:
         ee:ea:fe:54:39:37:74:21:92:f4:d3:33:c8:56:4b:3c:f5:0f:
         af:57:84:86:24:9c:48:e8:0e:51:72:65:ee:da:b1:4a:11:c5:
         04:1b:31:c1:90:62:1c:27:9c:22:a0:af:7d:fc:32:82:33:88:
         95:b8:14:e0:ce:b3:47:50:eb:36:ae:e2:f9:35:68:dd:ca:39:
         24:9a:4a:5e:71:d4:b3:40:fd:ae:52:24:5f:74:f1:48:91:af:
         ce:f6:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:15:42 2026 by rpki-client