This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/euMg0PBrEwdg34FUafeH1CwRG_Y.roa
File:                     euMg0PBrEwdg34FUafeH1CwRG_Y.roa (raw, json)
Hash identifier:          hIv94tAmUnb+bfy5u57zu0mwJIG8VdW8glZpcNFnYq0=
Subject key identifier:   7A:E3:20:D0:F0:6B:13:07:60:DF:81:54:69:F7:87:D4:2C:11:1B:F6
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       019B79ECC06310A2F1ADF329E390CA1AE64C
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/euMg0PBrEwdg34FUafeH1CwRG_Y.roa
Signing time:             Thu 01 Jan 2026 14:18:37 +0000
ROA not before:           Thu 01 Jan 2026 14:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31424
IP address blocks:        77.245.16.0/20 maxlen: 20
                          185.22.104.0/22 maxlen: 22
                          185.83.60.0/22 maxlen: 22
                          217.147.208.0/20 maxlen: 20
                          2001:4168::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:c0:63:10:a2:f1:ad:f3:29:e3:90:ca:1a:e6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: Jan  1 14:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ae320d0f06b130760df815469f787d42c111bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5a:df:31:14:1f:43:90:9d:9d:9e:c8:0a:1d:
                    0c:f8:32:ad:11:50:0f:eb:e6:7e:bd:3c:54:be:31:
                    f8:12:3b:52:ef:f6:d1:41:ed:ae:7d:52:df:19:8f:
                    6c:dc:22:ca:30:10:0a:7e:0f:b8:4a:a7:f3:b4:d1:
                    66:91:a1:99:79:a7:ab:2b:97:35:38:db:b5:d0:df:
                    e1:b9:f4:dc:12:3e:cd:d4:d8:69:c2:87:26:27:83:
                    37:cb:09:00:e0:08:80:38:76:1e:99:fa:bb:75:ab:
                    69:4e:15:b8:78:bd:70:63:14:d7:28:8a:c3:e3:26:
                    0f:21:00:57:f0:5e:60:5a:63:2d:b4:90:70:e1:f4:
                    c0:61:ea:c8:7b:ba:ac:00:25:a8:f7:82:0d:9d:68:
                    f2:74:fe:1c:22:26:13:63:5b:db:73:88:cf:fc:dc:
                    a4:3e:29:23:bc:fb:bf:31:cf:33:27:ea:80:71:05:
                    45:af:49:5d:9e:8d:23:2c:4a:f3:dd:bf:8d:20:20:
                    8d:e8:0a:3f:86:36:72:a8:e2:e4:ba:81:a6:b6:e4:
                    cc:62:da:cd:bd:24:da:a6:13:e1:70:75:7c:33:da:
                    f5:24:3f:36:59:fd:95:91:d3:8b:71:73:46:e2:67:
                    f2:3e:9f:46:1e:38:4b:40:67:68:85:1d:8c:c3:ce:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E3:20:D0:F0:6B:13:07:60:DF:81:54:69:F7:87:D4:2C:11:1B:F6
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/euMg0PBrEwdg34FUafeH1CwRG_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.245.16.0/20
                  185.22.104.0/22
                  185.83.60.0/22
                  217.147.208.0/20
                IPv6:
                  2001:4168::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:e4:db:6c:c4:ac:01:71:13:1d:0f:ba:d7:17:50:fc:ac:90:
         05:6f:98:93:a2:c9:3b:4b:3f:45:75:a5:1f:fb:75:e9:28:5e:
         8c:df:72:c2:11:a4:2f:77:3f:e7:70:61:a6:ed:6d:b9:7d:a4:
         34:35:b3:6f:2c:1d:e1:a7:2a:a9:a2:3c:14:43:69:01:52:e1:
         5a:c0:b7:82:c7:a5:4c:ab:c8:18:07:91:43:bf:c8:e6:ad:84:
         53:da:29:2f:78:af:83:49:3b:12:df:30:59:09:1e:1f:90:ff:
         dd:8e:c4:9b:79:8d:16:db:ff:bd:9b:18:78:71:a4:94:5d:b5:
         81:81:5f:34:a3:40:d0:50:51:77:70:26:c7:b7:68:d9:e5:42:
         a8:bb:3c:4d:e5:2f:dd:a8:0d:83:64:c0:38:7a:5b:bf:a1:9e:
         f5:13:08:92:c2:ab:01:61:43:00:f8:5b:4d:2b:bd:1d:a3:5c:
         45:38:be:39:5f:63:2c:a1:19:2b:40:29:d6:9f:6a:30:9f:cc:
         2d:72:fd:87:77:13:1c:c3:55:ca:8f:b0:de:6a:e1:7f:6e:9d:
         28:7a:b7:f1:1e:c2:d9:7f:d1:f5:86:bc:5b:e3:a6:0e:f8:da:
         17:75:12:9d:7e:7a:da:a0:4e:d5:db:88:7f:38:5c:c1:63:94:
         ae:ca:0e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:58:15 2026 by rpki-client