This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa
File:                     E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (raw, json)
Hash identifier:          A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=
Subject key identifier:   13:CD:81:FB:0E:23:24:A8:72:1A:06:31:DC:48:FD:B0:20:47:BD:BE
Certificate issuer:       /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial:       019B7C12C195C3378B47525002EAE54C03A4
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa
Signing time:             Fri 02 Jan 2026 00:19:22 +0000
ROA not before:           Fri 02 Jan 2026 00:19:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47708
IP address blocks:        134.25.0.0/16 maxlen: 16
                          2001:678:330::/48 maxlen: 48
                          2001:67c:d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:c1:95:c3:37:8b:47:52:50:02:ea:e5:4c:03:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
        Validity
            Not Before: Jan  2 00:19:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13cd81fb0e2324a8721a0631dc48fdb02047bdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:03:41:2c:f7:bb:99:1f:55:99:85:98:b9:92:
                    6f:48:85:df:45:2e:82:17:24:e0:fb:7d:8e:89:07:
                    f6:2b:f4:1f:4c:c6:f1:48:32:95:b3:84:ae:63:45:
                    45:d8:86:15:9f:a0:77:a0:7a:9c:48:5b:a8:70:68:
                    43:cb:8e:cc:39:2f:d7:4a:04:6f:bc:0e:20:2e:a6:
                    46:09:fa:c8:09:f9:c6:f1:44:ec:cb:44:b5:16:0e:
                    c3:f9:e5:20:d7:c6:24:9c:74:4d:6c:3e:37:80:75:
                    69:c9:68:c9:cc:0e:6a:f1:9d:fb:57:2d:fc:7a:00:
                    3b:c9:68:8d:95:29:39:b1:a6:82:23:d1:70:08:d3:
                    54:f6:57:1c:c2:c2:bd:aa:83:6a:01:6b:bf:bb:b2:
                    77:a3:30:43:ad:2b:5e:5a:65:31:6e:bf:78:3c:31:
                    a0:12:7b:78:31:ac:93:14:99:43:ef:21:cf:46:d3:
                    b0:6c:2f:08:1d:4c:3e:56:d2:d0:8d:0b:f3:89:86:
                    6c:0a:8e:98:c6:32:8d:a1:bb:83:47:d6:b6:fd:c2:
                    2e:d9:12:ad:92:64:e0:48:dc:c8:9c:05:d2:a8:fd:
                    b9:32:37:2b:e6:9e:24:40:96:8c:8b:f2:bc:58:01:
                    2e:ec:69:c3:3f:02:af:4c:7a:d9:cc:5f:35:23:5a:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CD:81:FB:0E:23:24:A8:72:1A:06:31:DC:48:FD:B0:20:47:BD:BE
            X509v3 Authority Key Identifier:
                keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.25.0.0/16
                IPv6:
                  2001:678:330::/48
                  2001:67c:d8::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:69:4c:d3:dc:c0:95:19:1d:88:2d:66:36:bd:06:c8:39:56:
         c7:b3:e9:de:49:73:29:c4:7e:51:db:83:a3:ef:0b:45:43:db:
         ba:99:47:6c:05:ce:32:1c:e7:97:93:db:29:2a:49:54:a0:80:
         8c:c0:76:5b:62:45:d3:0e:fd:79:cd:66:01:bf:e4:aa:77:58:
         fa:e0:78:ca:b5:b1:c2:b4:d0:3f:9c:4d:5e:31:bd:fc:02:5c:
         2c:6f:28:3e:56:4e:cd:80:1f:07:a2:28:6d:ec:3c:7a:30:b3:
         a1:6f:2b:a8:28:ca:fa:73:b9:d0:72:58:54:3a:ed:b7:6e:f5:
         91:e9:2c:df:7d:e3:7e:e9:ba:e0:7b:53:09:5a:e2:a5:2e:f8:
         8d:62:d2:90:c5:f6:86:5d:a2:73:ff:53:46:88:c0:9f:c8:71:
         09:a5:87:e4:8c:c3:e1:8c:fe:1f:de:94:5d:42:ce:71:f6:ba:
         5c:22:b7:fd:60:13:92:9b:ca:35:48:93:68:97:3b:7b:48:19:
         67:b1:21:04:b8:37:51:b1:6a:ee:03:81:64:96:57:d0:a6:ff:
         57:a8:43:dc:00:30:03:b3:62:89:0d:af:8f:87:1e:83:ee:bf:
         89:f3:b4:09:19:1e:32:41:55:08:38:ea:d6:17:e6:de:10:1a:
         f5:75:36:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt8EsGVwzeLR1JQAurlTAOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkN2QxY2IxMTQ5NGViMzg5OGYxMGQzZDYzNWJlNzVmMTZi
MmRjNTEwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2NkODFmYjBlMjMyNGE4NzIxYTA2MzFkYzQ4ZmRiMDIwNDdiZGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQNBLPe7mR9VmYWYuZJvSIXfRS6C
FyTg+32OiQf2K/QfTMbxSDKVs4SuY0VF2IYVn6B3oHqcSFuocGhDy47MOS/XSgRv
vA4gLqZGCfrICfnG8UTsy0S1Fg7D+eUg18YknHRNbD43gHVpyWjJzA5q8Z37Vy38
egA7yWiNlSk5saaCI9FwCNNU9lccwsK9qoNqAWu/u7J3ozBDrSteWmUxbr94PDGg
Ent4MayTFJlD7yHPRtOwbC8IHUw+VtLQjQvziYZsCo6YxjKNobuDR9a2/cIu2RKt
kmTgSNzInAXSqP25Mjcr5p4kQJaMi/K8WAEu7GnDPwKvTHrZzF81I1ozmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPNgfsOIySochoGMdxI/bAgR72+MB8GA1UdIwQY
MBaAFP19HLEUlOs4mPENPWNb518WstxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUt
NzY1OWJmODZhYzRjLzEvRTgyQi13NGpKS2h5R2dZeDNFajlzQ0JIdmI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUtNzY1OWJmODZhYzRj
LzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzALBAIAATAFAwMAhhkwGAQC
AAIwEgMHACABBngDMAMHACABBnwA2DANBgkqhkiG9w0BAQsFAAOCAQEAPWlM09zA
lRkdiC1mNr0GyDlWx7Pp3klzKcR+UduDo+8LRUPbuplHbAXOMhznl5PbKSpJVKCA
jMB2W2JF0w79ec1mAb/kqndY+uB4yrWxwrTQP5xNXjG9/AJcLG8oPlZOzYAfB6Io
bew8ejCzoW8rqCjK+nO50HJYVDrtt271keks333jfum64HtTCVripS74jWLSkMX2
hl2ic/9TRojAn8hxCaWH5IzD4Yz+H96UXULOcfa6XCK3/WATkpvKNUiTaJc7e0gZ
Z7EhBLg3UbFq7gOBZJZX0Kb/V6hD3AAwA7NiiQ2vj4ceg+6/ifO0CRkeMkFVCDjq
1hfm3hAa9XU25Q==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:42:46 2026 by rpki-client