This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/E9APco7X5s-y_ndtROFoXtIewVo.roa
File:                     E9APco7X5s-y_ndtROFoXtIewVo.roa (raw, json)
Hash identifier:          ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=
Subject key identifier:   13:D0:0F:72:8E:D7:E6:CF:B2:FE:77:6D:44:E1:68:5E:D2:1E:C1:5A
Certificate issuer:       /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial:       019B78344620D911490DA2A2B0F9650FCC97
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/E9APco7X5s-y_ndtROFoXtIewVo.roa
Signing time:             Thu 01 Jan 2026 06:17:30 +0000
ROA not before:           Thu 01 Jan 2026 06:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215590
IP address blocks:        93.185.157.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:46:20:d9:11:49:0d:a2:a2:b0:f9:65:0f:cc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
        Validity
            Not Before: Jan  1 06:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13d00f728ed7e6cfb2fe776d44e1685ed21ec15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:45:d1:7d:be:d8:19:ba:ae:77:f5:b0:43:
                    7f:7b:55:36:4e:b9:54:1a:ed:64:e2:c3:8d:15:4c:
                    f3:57:13:41:a5:54:f2:5a:2b:53:f9:4d:20:1e:34:
                    fb:03:5c:cc:cd:fa:82:a2:ef:ba:81:da:0b:51:f7:
                    f5:65:91:84:e7:76:16:ac:d7:76:8d:cd:f3:71:25:
                    ce:51:1c:4a:a1:0e:f8:0d:aa:5f:63:37:1c:48:e8:
                    46:7e:c0:99:35:00:d7:df:c4:95:28:58:6e:1d:7d:
                    ff:c0:ee:44:f6:35:09:ff:39:b7:b6:95:25:0f:02:
                    3a:bd:53:14:cb:63:ee:86:0f:4c:9f:42:43:b0:39:
                    05:3b:d8:b0:1d:a4:79:7a:f2:7e:0f:ed:9a:d8:8c:
                    85:4c:93:7f:27:01:e9:79:0e:5a:5c:1c:30:55:6d:
                    36:e1:f3:9e:71:c3:2c:4c:33:ee:5b:bc:56:83:94:
                    2d:b1:68:47:db:5f:a5:a4:1c:b8:a8:3f:0f:9a:31:
                    8a:83:a6:ce:5a:58:29:1f:36:a2:4f:1f:fe:43:67:
                    6b:ee:05:6e:1c:1d:2f:47:d2:2a:c9:47:3e:89:22:
                    b2:05:6f:c6:d0:76:b7:21:6b:02:b9:42:80:ee:15:
                    f3:07:18:56:bc:94:0e:94:d8:52:86:72:b4:67:17:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D0:0F:72:8E:D7:E6:CF:B2:FE:77:6D:44:E1:68:5E:D2:1E:C1:5A
            X509v3 Authority Key Identifier:
                keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/E9APco7X5s-y_ndtROFoXtIewVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.185.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c7:f1:86:cd:89:df:b3:58:85:a3:c9:f1:3e:75:11:2d:b6:
         82:f9:88:d5:29:b4:ad:98:73:85:df:82:37:51:de:39:b8:1f:
         46:d9:f3:b5:9f:0a:f4:c0:89:69:7d:59:2b:38:0f:6b:55:95:
         3b:2b:69:cd:dc:9c:0d:b7:91:80:a7:55:33:f0:e6:96:97:67:
         dd:e8:a5:c4:14:95:05:27:b8:dc:6c:be:0f:ed:6d:cb:4e:7f:
         78:18:8f:0f:ff:0c:7a:15:5a:89:ed:e4:cd:3a:81:05:6d:6e:
         02:c4:26:b2:df:ac:2f:fa:97:5f:d6:3c:5d:bf:01:41:30:97:
         80:bc:96:f8:b0:90:b7:1c:c0:ed:49:75:98:fe:3c:3e:c7:10:
         2d:7e:28:9b:34:2c:c2:35:f6:a9:87:0d:29:15:90:f6:7b:76:
         a4:ee:d8:1d:2c:25:fe:cd:9c:67:37:d3:35:45:be:96:f3:8e:
         99:3c:84:15:4f:fe:75:f8:8b:84:18:7b:80:ca:35:b0:19:3f:
         4a:03:2a:73:fe:fe:14:e6:8a:a0:75:00:11:0d:b0:34:a1:fb:
         73:f0:9b:aa:26:85:7a:ab:ab:ab:df:88:e6:71:3b:54:fc:06:
         33:3c:f8:c0:32:b1:06:ec:d4:6b:7e:fd:b4:33:f0:98:3e:42:
         2a:d8:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:08 2026 by rpki-client