This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/ea-vywNHOW21DX1J0UWlRSQDW38.roa
File:                     ea-vywNHOW21DX1J0UWlRSQDW38.roa (raw, json)
Hash identifier:          OJoJt8JCpBrtsjmCA+UGULfvX9hBfPj+o3dHNR77dnI=
Subject key identifier:   79:AF:AF:CB:03:47:39:6D:B5:0D:7D:49:D1:45:A5:45:24:03:5B:7F
Certificate issuer:       /CN=93ecccde85c40b154f919baf64ef032ec70d751e
Certificate serial:       019B7CEE233E9E39F0E142371C4F8038924C
Authority key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/ea-vywNHOW21DX1J0UWlRSQDW38.roa
Signing time:             Fri 02 Jan 2026 04:18:59 +0000
ROA not before:           Fri 02 Jan 2026 04:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50324
IP address blocks:        2001:67c:138::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:23:3e:9e:39:f0:e1:42:37:1c:4f:80:38:92:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ecccde85c40b154f919baf64ef032ec70d751e
        Validity
            Not Before: Jan  2 04:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79afafcb0347396db50d7d49d145a54524035b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:e9:6b:d0:6e:e9:aa:9e:91:46:e3:51:d5:
                    61:25:29:41:de:29:6b:8f:eb:fb:96:51:4c:11:5d:
                    ec:99:1a:ec:d8:79:2b:da:d3:e7:46:34:4a:08:8c:
                    58:6f:51:6a:ad:16:29:de:e6:1f:d7:a3:81:e2:b2:
                    b6:b8:ed:6f:4f:29:c7:c5:ab:c1:66:ac:7c:71:32:
                    0d:20:b8:41:25:8e:81:db:95:0d:14:36:f9:47:9f:
                    cd:c4:42:b5:f9:9d:4e:3a:98:b6:63:cb:38:5f:91:
                    3e:25:db:76:49:80:9a:d8:88:36:81:09:f4:89:8a:
                    98:46:d2:e1:38:7c:60:46:05:49:36:fb:93:5d:fb:
                    fb:73:2c:53:75:22:2b:52:a1:2b:44:88:da:cc:73:
                    5e:e9:6c:b0:57:a2:9c:88:ba:a6:37:15:5d:53:05:
                    6e:bd:74:5d:34:f0:45:ae:d3:98:ed:94:e6:cc:08:
                    25:6f:a2:a9:56:37:fc:3f:02:90:8d:6c:26:f7:e3:
                    a9:76:50:eb:08:46:77:f3:57:d2:d6:c1:d3:31:ca:
                    0e:db:53:ce:53:f0:34:40:32:ba:5c:f7:6b:d5:13:
                    19:06:b9:86:67:c2:9d:a9:83:c9:11:77:e4:8a:90:
                    c4:f4:61:fe:45:05:d0:e8:a4:56:0f:84:34:4f:ab:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:AF:CB:03:47:39:6D:B5:0D:7D:49:D1:45:A5:45:24:03:5B:7F
            X509v3 Authority Key Identifier:
                keyid:93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/ea-vywNHOW21DX1J0UWlRSQDW38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:138::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:13:8d:23:97:f1:2a:21:17:36:e2:d0:84:21:ca:96:f5:c5:
         6a:ed:79:ca:b3:96:ef:54:51:38:7c:6f:f4:3f:55:ca:16:bf:
         72:05:0c:b1:1a:0e:e5:a6:33:7e:e7:be:5f:0a:2d:99:ae:5e:
         0b:9c:28:9e:31:e9:8c:81:ef:9f:80:91:b8:c7:38:6d:90:c0:
         f2:ea:ee:da:de:e2:fe:98:07:56:29:bd:68:4f:d9:15:af:ce:
         08:40:9b:4f:c3:36:a6:33:5b:c5:ad:e8:9d:55:2a:7f:c5:08:
         8e:62:7d:d3:f8:3b:a3:69:e9:01:b4:11:2c:3f:b1:5c:b5:52:
         10:1e:86:b5:93:ee:db:96:c7:54:93:a6:17:21:8b:db:51:1f:
         e6:62:03:e8:6b:39:52:6a:f6:bc:5a:53:28:3c:ba:96:e4:2f:
         17:70:ff:38:0f:a4:82:28:6c:0f:a3:33:3d:56:d2:5d:4e:bc:
         ac:11:5e:e1:f3:23:37:5a:21:03:b8:3b:04:bf:74:4c:a0:40:
         a7:ce:35:9b:5a:60:fc:36:f0:51:fa:14:7b:14:75:9b:ff:fd:
         4b:a8:2d:f6:aa:12:a0:f4:04:db:f4:bf:d4:64:a4:9d:50:de:
         be:fd:84:b4:08:52:a6:7f:75:05:ea:71:77:77:7d:14:3d:20:
         e1:5f:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:55:07 2026 by rpki-client