This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/EA-60X-R1DbjXj2jBAu25C_Uwg8.roa
File:                     EA-60X-R1DbjXj2jBAu25C_Uwg8.roa (raw, json)
Hash identifier:          pB7hdFZLUbLSPr/8GBR/S5TxapEQ0VHd/Ue8AnhWCqA=
Subject key identifier:   10:0F:BA:D1:7F:91:D4:36:E3:5E:3D:A3:04:0B:B6:E4:2F:D4:C2:0F
Certificate issuer:       /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
Certificate serial:       019AE4C9E8FABD33E7DFB50014654A2F522C
Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/EA-60X-R1DbjXj2jBAu25C_Uwg8.roa
Signing time:             Wed 03 Dec 2025 15:17:08 +0000
ROA not before:           Wed 03 Dec 2025 15:17:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     43915
IP address blocks:        5.181.104.0/22 maxlen: 22
                          45.66.36.0/22 maxlen: 22
                          45.80.160.0/22 maxlen: 22
                          45.130.56.0/22 maxlen: 22
                          45.143.112.0/22 maxlen: 22
                          45.152.28.0/22 maxlen: 22
                          62.169.148.0/23 maxlen: 23
                          79.135.122.0/23 maxlen: 24
                          87.117.64.0/22 maxlen: 22
                          87.117.68.0/23 maxlen: 23
                          91.239.57.0/24 maxlen: 24
                          94.154.184.0/22 maxlen: 24
                          109.224.216.0/22 maxlen: 22
                          109.224.224.0/22 maxlen: 24
                          109.224.224.0/23 maxlen: 23
                          109.224.226.0/23 maxlen: 24
                          109.224.234.0/23 maxlen: 24
                          109.224.236.0/22 maxlen: 22
                          109.224.240.0/23 maxlen: 24
                          144.178.104.0/23 maxlen: 23
                          144.178.118.0/23 maxlen: 23
                          144.178.252.0/23 maxlen: 23
                          147.189.156.0/22 maxlen: 24
                          147.189.214.0/24 maxlen: 24
                          176.116.116.0/22 maxlen: 22
                          178.248.128.0/21 maxlen: 21
                          185.23.254.0/23 maxlen: 24
                          185.147.184.0/22 maxlen: 22
                          185.161.4.0/22 maxlen: 22
                          185.231.136.0/21 maxlen: 21
                          188.214.236.0/22 maxlen: 22
                          193.35.146.0/23 maxlen: 23
                          194.105.134.0/23 maxlen: 24
                          194.145.242.0/23 maxlen: 24
                          194.146.160.0/22 maxlen: 24
                          194.169.152.0/22 maxlen: 22
                          195.72.56.0/22 maxlen: 22
                          195.184.250.0/23 maxlen: 23
                          195.206.172.0/22 maxlen: 24
                          195.242.148.0/23 maxlen: 23
                          195.244.2.0/23 maxlen: 23
                          212.59.72.0/21 maxlen: 24
                          212.108.90.0/23 maxlen: 23
                          213.225.224.0/22 maxlen: 24
                          217.14.184.0/21 maxlen: 21
                          217.20.244.0/22 maxlen: 24
                          217.171.100.0/22 maxlen: 22
                          217.171.104.0/22 maxlen: 22
                          2a07:5940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:e4:c9:e8:fa:bd:33:e7:df:b5:00:14:65:4a:2f:52:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e
        Validity
            Not Before: Dec  3 15:17:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=100fbad17f91d436e35e3da3040bb6e42fd4c20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:d6:b6:50:ac:6a:a9:9c:5c:01:8f:1a:67:
                    d3:0d:2c:f5:8e:0b:3f:4a:ee:1b:19:67:c8:af:e0:
                    b7:5b:44:33:80:e5:64:28:aa:50:33:8a:22:cf:dd:
                    1d:40:51:df:d7:e0:9b:5d:ee:dd:79:ae:3a:22:aa:
                    cd:74:01:cc:16:e1:2d:e9:c7:19:e9:51:50:6d:e8:
                    93:3a:40:82:9f:9b:c2:76:4c:49:17:9c:ce:8a:ff:
                    f5:09:35:da:22:b2:fb:b0:5a:8b:38:e8:f0:1d:9d:
                    d3:82:9b:80:e0:67:cf:ca:e0:b6:97:57:1d:16:87:
                    3b:43:59:8d:27:ed:ce:97:97:16:fa:d1:bb:69:61:
                    3d:af:dc:64:ab:a3:85:35:2c:d7:f4:9f:0e:e6:b6:
                    37:15:57:a5:5d:7a:45:71:e8:80:f1:0e:3e:e5:27:
                    93:b1:d6:63:d7:2e:c7:d0:71:21:bf:6b:87:ac:f8:
                    23:bd:1f:b5:31:a5:be:fa:99:d2:9e:16:7e:f7:f2:
                    6c:b2:30:ee:a9:56:05:95:e5:a5:67:32:2f:4e:87:
                    d7:22:23:c4:fe:ed:a5:ff:ce:8d:c0:b3:90:a0:7f:
                    2b:5f:23:54:f1:1f:76:83:4f:5a:fa:44:1b:db:66:
                    66:c7:5c:fb:ba:82:cd:c8:2b:b1:90:69:06:a9:d3:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0F:BA:D1:7F:91:D4:36:E3:5E:3D:A3:04:0B:B6:E4:2F:D4:C2:0F
            X509v3 Authority Key Identifier:
                keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/EA-60X-R1DbjXj2jBAu25C_Uwg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.104.0/22
                  45.66.36.0/22
                  45.80.160.0/22
                  45.130.56.0/22
                  45.143.112.0/22
                  45.152.28.0/22
                  62.169.148.0/23
                  79.135.122.0/23
                  87.117.64.0-87.117.69.255
                  91.239.57.0/24
                  94.154.184.0/22
                  109.224.216.0/22
                  109.224.224.0/22
                  109.224.234.0-109.224.241.255
                  144.178.104.0/23
                  144.178.118.0/23
                  144.178.252.0/23
                  147.189.156.0/22
                  147.189.214.0/24
                  176.116.116.0/22
                  178.248.128.0/21
                  185.23.254.0/23
                  185.147.184.0/22
                  185.161.4.0/22
                  185.231.136.0/21
                  188.214.236.0/22
                  193.35.146.0/23
                  194.105.134.0/23
                  194.145.242.0/23
                  194.146.160.0/22
                  194.169.152.0/22
                  195.72.56.0/22
                  195.184.250.0/23
                  195.206.172.0/22
                  195.242.148.0/23
                  195.244.2.0/23
                  212.59.72.0/21
                  212.108.90.0/23
                  213.225.224.0/22
                  217.14.184.0/21
                  217.20.244.0/22
                  217.171.100.0-217.171.107.255
                IPv6:
                  2a07:5940::/32

    Signature Algorithm: sha256WithRSAEncryption
         d7:8c:a3:e3:0f:8c:fb:2c:b7:aa:f5:8b:c7:69:6e:e3:d0:f4:
         3e:64:f5:3b:d5:9e:29:9c:28:e7:06:5e:6a:e9:6f:cf:a7:2a:
         19:6d:cc:e8:0d:3a:d1:58:cc:79:b2:75:aa:b5:67:57:3e:1b:
         e0:df:c2:d8:4d:d7:b5:f4:9c:49:2b:31:96:72:62:58:bb:32:
         e2:e5:d6:0a:60:e8:e4:27:51:c0:7a:62:cd:aa:04:23:02:85:
         16:45:d0:8b:e3:74:6a:f5:15:ba:78:e8:f4:7e:b5:ae:79:74:
         e7:6e:df:67:fa:f3:72:25:fa:69:70:89:d4:e1:84:46:8d:5f:
         2d:b2:6f:6d:02:5b:9e:0e:8e:f3:cd:81:a0:fd:70:31:81:5d:
         ec:f7:0e:1f:81:d5:b2:97:1b:ef:bb:1f:e2:54:6f:8b:29:67:
         03:b0:89:6b:0c:b7:12:be:5f:57:7d:ce:09:46:3c:7e:f4:78:
         07:c2:48:83:de:18:a8:fc:bd:7e:14:6e:d2:b6:1c:66:b3:1c:
         c4:f7:08:c3:0b:99:d6:41:f7:4a:52:c2:03:1b:d4:4b:3e:b0:
         93:57:4c:9f:1f:8c:3f:0f:97:11:64:f9:7d:6f:79:36:de:3f:
         15:06:29:fa:cb:06:6d:b2:d7:08:af:ca:89:12:b9:0f:7d:49:
         a0:2e:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:30:13 2025 by rpki-client