This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/eidiHBPgQKzRSZT9OwGu9tKmDIg.roa
File:                     eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (raw, json)
Hash identifier:          wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=
Subject key identifier:   7A:27:62:1C:13:E0:40:AC:D1:49:94:FD:3B:01:AE:F6:D2:A6:0C:88
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       019B78A2615F643A1DEFF681EDF4F48E8785
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/eidiHBPgQKzRSZT9OwGu9tKmDIg.roa
Signing time:             Thu 01 Jan 2026 08:17:46 +0000
ROA not before:           Thu 01 Jan 2026 08:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205909
IP address blocks:        45.92.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:61:5f:64:3a:1d:ef:f6:81:ed:f4:f4:8e:87:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jan  1 08:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a27621c13e040acd14994fd3b01aef6d2a60c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:4b:ef:02:de:95:6e:86:7f:c3:bc:9f:19:
                    2f:d5:66:25:e5:96:e5:bc:64:4b:fe:3e:5a:3d:9a:
                    98:13:e5:79:45:70:38:f0:ea:bf:e0:bb:5d:2a:bf:
                    1d:7b:a6:3c:b7:9f:f9:3f:97:a7:70:97:6e:4d:e3:
                    18:a3:5a:a4:ee:69:b6:2b:0d:e8:31:88:9f:d7:41:
                    16:50:da:6d:ee:31:e3:4c:03:8f:f7:ae:8a:f3:61:
                    86:91:3a:ab:67:b0:4e:45:a6:29:8c:91:08:66:ef:
                    84:96:c1:3b:de:ed:99:c4:56:c8:58:d8:d6:70:1e:
                    09:dc:4e:a8:59:9a:15:02:17:53:4d:25:01:d5:49:
                    62:05:eb:1d:d7:4a:ce:b8:96:32:73:57:7e:16:37:
                    79:2f:b1:5d:04:90:96:98:30:86:26:9b:43:ee:3d:
                    a5:ba:28:87:72:1c:3f:6f:72:55:0c:6e:5d:c7:ee:
                    25:be:10:c6:b7:9b:4f:ea:09:36:5e:54:e9:8c:af:
                    88:02:e1:1a:15:73:13:d9:84:a2:d4:18:2e:10:14:
                    90:40:a6:95:51:82:f0:a1:53:98:82:74:37:5d:cb:
                    15:79:7c:38:67:46:f5:fa:e3:b6:c7:69:90:f0:92:
                    cc:54:3a:93:17:04:a8:e5:bd:2b:6f:6f:c6:a9:a7:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:27:62:1C:13:E0:40:AC:D1:49:94:FD:3B:01:AE:F6:D2:A6:0C:88
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/eidiHBPgQKzRSZT9OwGu9tKmDIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:1a:fd:0a:be:a4:84:80:2c:88:b7:c2:2a:71:73:2a:22:97:
         9c:c3:b1:55:cf:c5:55:6a:65:2a:92:1f:70:67:3b:f2:20:7a:
         68:4b:ac:c8:07:a3:c5:57:14:be:e2:23:bc:82:f1:98:3c:f3:
         e6:34:c1:d6:a1:a7:52:6c:c4:25:fa:bd:17:20:7d:9e:91:0f:
         de:0d:97:57:11:96:e7:49:2c:eb:5e:b1:7f:c0:73:f0:b9:f9:
         a9:f7:be:4c:5f:30:44:02:66:20:48:50:b7:7c:d2:0f:66:9a:
         33:45:1d:c4:cf:30:28:1a:7a:f0:26:8b:12:3e:36:8c:dc:e5:
         0f:15:59:74:9c:6e:38:04:57:26:a9:b4:3a:2b:d0:5e:24:52:
         a1:3d:72:1d:36:94:d6:42:24:23:09:4b:f3:42:73:b3:91:1f:
         50:b5:49:d2:34:95:e2:2e:56:93:22:cc:9d:70:a5:90:bd:90:
         93:f2:25:01:ae:b3:9e:6c:c4:91:0e:91:e4:12:88:95:f4:fd:
         12:25:16:4b:27:63:e2:d7:29:26:f5:8f:96:1d:81:70:ee:f0:
         4c:00:08:0d:57:3e:a8:e7:7a:f6:6b:33:90:a8:17:34:b5:0c:
         ef:09:74:c8:97:16:2b:d4:c8:6a:98:b7:2c:2a:55:b3:4b:cf:
         82:e0:b3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:37:36 2026 by rpki-client