This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/euBXC6rwjNF3N0PD1PpJMyMwSCI.roa
File:                     euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (raw, json)
Hash identifier:          0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=
Subject key identifier:   7A:E0:57:0B:AA:F0:8C:D1:77:37:43:C3:D4:FA:49:33:23:30:48:22
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       019B76EAE9CCB3D1AC13884084EF3DA5E8C3
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/euBXC6rwjNF3N0PD1PpJMyMwSCI.roa
Signing time:             Thu 01 Jan 2026 00:17:45 +0000
ROA not before:           Thu 01 Jan 2026 00:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51115
IP address blocks:        78.155.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:e9:cc:b3:d1:ac:13:88:40:84:ef:3d:a5:e8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Jan  1 00:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ae0570baaf08cd1773743c3d4fa493323304822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:71:b7:90:dc:24:23:82:af:fa:fd:08:92:
                    ec:3c:7e:ed:17:13:40:fe:27:15:e7:04:26:76:e3:
                    8e:88:f7:6f:4f:09:72:97:c2:7f:0a:88:56:85:53:
                    40:4d:95:94:f2:a1:56:dc:7c:b0:a0:4a:fc:f4:b8:
                    60:e7:e7:f8:ad:8f:75:93:59:83:55:f2:e7:cc:8c:
                    9e:89:48:fa:05:93:da:2b:11:60:5d:a5:4f:70:68:
                    7c:e6:32:ce:41:bf:6f:61:6f:19:1e:f1:5e:a0:52:
                    d0:6f:f8:9a:8f:55:45:0c:60:6e:e1:2d:13:c7:3f:
                    c2:aa:93:c1:cc:ea:1f:c8:cf:eb:9d:c7:4b:44:36:
                    bb:3f:ed:1a:36:00:05:69:10:c9:ac:ac:16:ce:32:
                    64:3b:2e:74:1d:82:3a:3b:3b:2a:3e:07:32:9a:b2:
                    3d:5f:fa:cb:5d:f2:54:4f:b8:76:e5:1e:bc:9c:04:
                    8b:d3:54:33:49:b0:c0:5f:5a:b9:15:55:28:fb:37:
                    44:38:82:60:90:1a:57:e6:24:46:1c:c1:2c:f5:7a:
                    7c:e9:7c:dc:96:81:5b:ce:cb:29:27:7e:10:8c:6c:
                    58:fb:0a:6f:1a:e7:67:62:e3:10:4b:d3:d4:67:6c:
                    ab:99:8d:c1:55:d3:8c:17:9f:4a:52:07:a4:43:18:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:57:0B:AA:F0:8C:D1:77:37:43:C3:D4:FA:49:33:23:30:48:22
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/euBXC6rwjNF3N0PD1PpJMyMwSCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.155.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:64:7e:f1:b2:07:db:13:a5:1b:0e:e9:e6:1d:c8:5a:76:
         5b:0b:45:e0:16:a6:47:4f:e1:53:df:13:9b:a8:e7:d7:58:5f:
         8d:0a:af:64:f1:9d:33:be:43:e5:c0:a9:54:46:a1:b5:08:d5:
         04:12:25:6c:55:4a:20:7e:7f:28:a5:6a:fb:c5:eb:e9:4c:57:
         53:c8:e9:84:04:ea:58:40:4e:28:5d:f4:4b:4a:6b:e9:bb:d6:
         9f:38:c0:9b:7d:46:ef:67:e0:cc:96:e5:e5:d4:35:8d:c7:72:
         d2:6a:d4:6d:1b:46:7f:b8:da:21:5b:0c:6e:78:af:51:65:7b:
         64:a9:98:27:2b:a6:55:82:94:86:4c:51:26:6a:7e:6a:ff:c4:
         9c:9b:6e:99:8f:d5:0c:d9:55:6d:77:1b:d6:78:e4:53:62:99:
         0d:24:d8:1e:b3:f0:6a:49:e4:d4:aa:e8:5a:99:eb:fb:e0:ab:
         af:04:28:69:14:99:b7:48:43:a9:d8:6b:47:30:8f:56:f5:f6:
         29:3b:d1:aa:64:b8:43:bc:27:cb:86:31:d5:7e:d1:ef:a6:7b:
         c0:60:0e:32:1a:50:53:5b:8f:1b:4a:80:6e:8b:e5:b0:38:de:
         6c:fd:81:8a:f0:29:fc:75:ce:8c:ed:6d:33:50:c0:58:85:63:
         82:d6:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:38 2026 by rpki-client