This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/0eN4pH_on569vbDLjuSVE9zmHHw.roa
File:                     0eN4pH_on569vbDLjuSVE9zmHHw.roa (raw, json)
Hash identifier:          dHpk6je1m5+26RS3yPbZDOTqYyKENNbH5mJtTi57qyU=
Subject key identifier:   D1:E3:78:A4:7F:E8:9F:9E:BD:BD:B0:CB:8E:E4:95:13:DC:E6:1C:7C
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       019AEF2B16F1D7D811DA885D4845E27223F9
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/0eN4pH_on569vbDLjuSVE9zmHHw.roa
Signing time:             Fri 05 Dec 2025 15:39:29 +0000
ROA not before:           Fri 05 Dec 2025 15:39:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198883
IP address blocks:        80.71.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:ef:2b:16:f1:d7:d8:11:da:88:5d:48:45:e2:72:23:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Dec  5 15:39:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d1e378a47fe89f9ebdbdb0cb8ee49513dce61c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:fa:15:a3:9e:09:90:72:d1:db:55:77:80:
                    34:7a:1a:13:0c:12:5c:9c:04:d8:46:1f:d2:c5:e1:
                    8f:ee:7a:f2:c4:8a:2e:9d:f2:f1:11:6f:3d:01:3e:
                    94:fe:39:42:be:51:b2:71:31:dc:32:33:9f:26:15:
                    ea:6a:2e:54:3d:fa:9a:5d:5f:db:31:52:bf:67:c2:
                    3e:cb:ae:99:dd:d1:c8:e3:8c:0b:2b:40:83:66:be:
                    82:f9:bc:44:c7:19:7e:95:6c:81:8a:18:54:4f:d0:
                    23:13:ea:7a:f3:79:27:0c:62:ca:6f:79:b9:09:e1:
                    74:b2:76:dd:6d:9d:25:1f:d7:b5:ab:4f:d8:f0:16:
                    a2:dd:52:52:97:8d:0c:78:f5:e7:aa:0d:a9:18:46:
                    42:01:e0:39:8f:e6:8e:76:4a:02:8b:ca:11:19:89:
                    d9:c7:1e:8f:ba:09:62:a5:4f:c4:ae:8a:f1:ea:b1:
                    b7:ae:1f:a0:29:c7:99:13:e5:d1:c3:8a:bc:37:44:
                    07:e9:78:e9:da:33:b3:31:c7:3a:09:28:b7:cb:d5:
                    a6:80:fe:a5:50:9e:15:33:1c:ff:c1:35:60:09:74:
                    e5:25:d3:79:c7:3c:d9:dc:b7:e4:a2:e4:0a:f8:66:
                    ea:ed:8f:38:02:51:fa:ce:87:69:71:a5:36:24:a6:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E3:78:A4:7F:E8:9F:9E:BD:BD:B0:CB:8E:E4:95:13:DC:E6:1C:7C
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/0eN4pH_on569vbDLjuSVE9zmHHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.71.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:28:b0:87:7a:08:1e:17:48:b6:e8:81:45:89:1f:0a:70:b2:
         11:98:89:31:be:4e:56:22:15:ca:fe:2c:95:70:38:4f:25:aa:
         ef:be:69:d5:e8:8e:c9:0b:79:69:e0:03:47:70:03:c6:bc:a2:
         f9:29:be:72:03:49:3b:ec:ab:1d:88:a6:6c:97:c2:fb:5f:27:
         0c:14:74:45:98:00:ab:57:ff:e4:a4:63:40:c9:ae:29:d6:ac:
         77:4d:c6:a0:e6:4c:83:8e:68:01:f3:b8:fc:7f:dc:20:58:70:
         c6:1b:d1:14:de:b2:0b:f5:62:40:82:98:39:22:62:ee:8f:53:
         89:72:cb:2c:45:e7:1c:4b:ea:2e:79:f7:9b:b1:fb:6c:31:46:
         c8:a5:9d:f5:53:d6:74:f5:ba:98:1c:c9:66:4d:3c:f8:88:ca:
         bb:ae:4b:bc:62:17:6b:66:55:e1:9b:68:99:61:5b:a0:2f:ff:
         fc:f8:cb:78:e5:b3:d9:65:59:44:3c:d3:7e:8a:92:e5:2e:0f:
         b1:4d:79:1e:d4:e4:23:73:cc:e2:de:e5:90:f7:85:2a:81:bc:
         20:37:2c:e2:7a:aa:94:66:6c:35:88:c8:81:f1:c1:f3:b8:39:
         69:0b:0d:02:3f:3e:19:89:44:ac:f5:62:14:bc:fc:72:51:72:
         a6:35:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:30:08 2025 by rpki-client