This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/euKoI7vmey1fTPE04HoSqLuDz4Q.roa
File:                     euKoI7vmey1fTPE04HoSqLuDz4Q.roa (raw, json)
Hash identifier:          32wDb/N882DtoqSetNBAzx24jUXx/OWTovG5eWeLxNM=
Subject key identifier:   7A:E2:A8:23:BB:E6:7B:2D:5F:4C:F1:34:E0:7A:12:A8:BB:83:CF:84
Certificate issuer:       /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial:       019B7C7F60CFC41B0AD21B3B64D6C62A715F
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/euKoI7vmey1fTPE04HoSqLuDz4Q.roa
Signing time:             Fri 02 Jan 2026 02:18:01 +0000
ROA not before:           Fri 02 Jan 2026 02:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204533
IP address blocks:        78.109.203.0/24 maxlen: 24
                          78.109.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:60:cf:c4:1b:0a:d2:1b:3b:64:d6:c6:2a:71:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
        Validity
            Not Before: Jan  2 02:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ae2a823bbe67b2d5f4cf134e07a12a8bb83cf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:39:6c:0b:1d:5b:49:b8:1b:bf:62:5c:40:
                    72:2c:ce:52:06:e2:da:bd:f3:cd:16:d9:d3:31:3b:
                    11:83:84:a4:b3:ec:82:6b:bf:02:6e:85:cf:99:6f:
                    65:06:61:dd:6c:32:8a:4f:79:56:18:55:f4:c2:19:
                    9f:71:e5:16:58:e3:ae:fd:02:c8:0b:cd:57:78:33:
                    3a:93:53:6f:1b:0b:3a:a8:04:90:c9:4a:a2:a5:5a:
                    0b:0d:4a:b8:c0:1e:db:ee:bc:fb:89:b0:48:9f:7b:
                    e8:ae:3c:47:3b:1d:8d:12:2b:27:7e:f1:11:ee:82:
                    49:29:f1:fa:a1:91:64:f0:54:a5:9c:a8:96:db:3c:
                    13:e8:68:29:50:c5:73:b3:99:66:5b:07:72:64:af:
                    c5:13:96:a1:1e:3d:f6:48:56:b3:2b:18:63:9d:6c:
                    9b:b0:d3:43:db:7f:a8:df:1c:cd:94:74:c0:13:e7:
                    c2:b0:e1:4f:98:5d:38:c0:13:7e:9c:94:0a:15:ff:
                    3e:15:8d:92:86:d1:af:9a:54:87:58:c4:aa:73:bd:
                    10:f7:96:fd:69:4f:de:34:a4:15:bc:6a:37:ed:22:
                    48:dc:58:63:ca:03:ab:56:63:1d:4d:5d:82:1c:0e:
                    b3:bd:12:b0:de:bd:d8:bc:72:bf:14:da:6e:c9:63:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:A8:23:BB:E6:7B:2D:5F:4C:F1:34:E0:7A:12:A8:BB:83:CF:84
            X509v3 Authority Key Identifier:
                keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/euKoI7vmey1fTPE04HoSqLuDz4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.109.203.0/24
                  78.109.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:86:6f:b2:33:96:4f:a3:42:bc:29:54:46:12:ee:73:72:bd:
         08:9d:d4:4e:4a:ff:20:63:45:5c:7d:b0:5c:20:bf:e0:7a:72:
         03:7a:81:f3:41:24:ba:e1:bc:fb:62:a1:7f:3a:bd:07:85:b5:
         40:1f:31:d5:f3:59:f0:52:35:39:02:2a:b9:79:03:d9:30:45:
         56:1c:6a:36:26:75:6d:12:29:d3:f2:32:fc:c4:9b:e1:06:eb:
         6e:06:b7:c3:d9:c9:cd:aa:af:97:1a:a9:17:65:21:15:b0:a9:
         1d:ad:3e:31:13:4f:22:9c:b2:3d:fa:56:3a:fe:5b:69:6a:ad:
         db:47:de:40:87:14:c4:3e:31:a1:cc:4b:a7:ab:de:01:70:bb:
         67:0d:5a:0a:66:01:f4:67:18:45:18:8c:54:0f:ac:e0:c4:41:
         f3:ae:71:0d:a1:9f:ed:32:45:28:59:70:fc:46:52:2d:ae:b9:
         41:7b:79:54:78:fc:38:a8:d5:0f:c9:b6:d0:74:ce:c4:ba:22:
         3d:01:3d:f0:44:a0:78:07:09:ee:3e:a9:55:bc:60:2a:9b:4c:
         5c:bd:bc:89:85:16:78:36:25:58:46:04:9e:21:88:e6:50:b8:
         35:ac:69:cb:f6:07:7b:12:c7:cc:07:af:dc:57:1e:2f:57:1c:
         63:97:cd:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt8f2DPxBsK0hs7ZNbGKnFfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NWM1ZjNiYjgxMTkxNzIwYzBkZGY4YjNjZjM0ZDkxZGFi
NGUxZDMwHhcNMjYwMTAyMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWUyYTgyM2JiZTY3YjJkNWY0Y2YxMzRlMDdhMTJhOGJiODNjZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUU5bAsdW0m4G79iXEByLM5SBuLa
vfPNFtnTMTsRg4Sks+yCa78CboXPmW9lBmHdbDKKT3lWGFX0whmfceUWWOOu/QLI
C81XeDM6k1NvGws6qASQyUqipVoLDUq4wB7b7rz7ibBIn3vorjxHOx2NEisnfvER
7oJJKfH6oZFk8FSlnKiW2zwT6GgpUMVzs5lmWwdyZK/FE5ahHj32SFazKxhjnWyb
sNND23+o3xzNlHTAE+fCsOFPmF04wBN+nJQKFf8+FY2ShtGvmlSHWMSqc70Q95b9
aU/eNKQVvGo37SJI3FhjygOrVmMdTV2CHA6zvRKw3r3YvHK/FNpuyWON8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHriqCO75nstX0zxNOB6Eqi7g8+EMB8GA1UdIwQY
MBaAFARcXzu4EZFyDA3fizzzTZHatOHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2Mt
ZmJiODA4NTNjMWJlLzEvZXVLb0k3dm1leTFmVFBFMDRIb1NxTHVEejRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2MtZmJiODA4NTNjMWJl
LzEvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATm3LAwQA
Tm3PMA0GCSqGSIb3DQEBCwUAA4IBAQAPhm+yM5ZPo0K8KVRGEu5zcr0IndROSv8g
Y0VcfbBcIL/genIDeoHzQSS64bz7YqF/Or0HhbVAHzHV81nwUjU5Aiq5eQPZMEVW
HGo2JnVtEinT8jL8xJvhButuBrfD2cnNqq+XGqkXZSEVsKkdrT4xE08inLI9+lY6
/ltpaq3bR95AhxTEPjGhzEunq94BcLtnDVoKZgH0ZxhFGIxUD6zgxEHzrnENoZ/t
MkUoWXD8RlItrrlBe3lUePw4qNUPybbQdM7EuiI9AT3wRKB4BwnuPqlVvGAqm0xc
vbyJhRZ4NiVYRgSeIYjmULg1rGnL9gd7EsfMB6/cVx4vVxxjl83Q
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:20:18 2026 by rpki-client