This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/eaURa3uTlyiZsAXJzkPz_x5Muw0.roa
File:                     eaURa3uTlyiZsAXJzkPz_x5Muw0.roa (raw, json)
Hash identifier:          c+Yhm7pE68b9qJ0hObSRz8BZLxOQWu5iU9oFtQINp5c=
Subject key identifier:   79:A5:11:6B:7B:93:97:28:99:B0:05:C9:CE:43:F3:FF:1E:4C:BB:0D
Certificate issuer:       /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial:       019B78A33633985CB0033E22655609A5559E
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/eaURa3uTlyiZsAXJzkPz_x5Muw0.roa
Signing time:             Thu 01 Jan 2026 08:18:40 +0000
ROA not before:           Thu 01 Jan 2026 08:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     196620
IP address blocks:        45.80.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:36:33:98:5c:b0:03:3e:22:65:56:09:a5:55:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
        Validity
            Not Before: Jan  1 08:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79a5116b7b93972899b005c9ce43f3ff1e4cbb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:09:13:5b:48:9f:46:ea:bc:6e:19:a2:35:
                    54:4b:85:bc:55:7f:47:a8:b4:67:cf:2f:4c:b7:6b:
                    c2:df:8a:65:1a:0c:de:7b:d9:c3:0e:5e:b2:2b:e6:
                    96:2b:de:f1:cf:1e:63:1d:b7:4c:8c:1f:52:75:4f:
                    13:f4:a0:ce:c4:0d:ec:9f:f6:f0:42:9f:0e:62:5c:
                    96:b7:83:1d:d5:77:97:1e:82:86:59:af:55:c4:57:
                    5d:34:04:27:a1:22:3b:1c:6b:18:fa:c0:83:0e:87:
                    9b:9c:de:b6:02:8f:30:9a:ea:d9:ff:fc:28:f4:14:
                    ef:b2:24:5b:b7:57:ee:7e:4b:81:1d:90:16:29:dd:
                    ce:55:df:cc:57:b7:2b:3c:6d:b6:bb:7b:f0:fc:d0:
                    af:0d:fe:9e:a0:29:80:2e:9d:de:84:0f:23:1b:6d:
                    36:69:9c:65:14:a7:f4:12:65:f1:aa:9d:d9:9b:11:
                    83:68:4a:81:58:81:05:03:ad:eb:3f:8c:71:83:21:
                    3b:f8:c7:a6:56:0f:fc:72:8a:c4:2c:92:ba:1a:57:
                    85:31:c1:ae:7c:9a:01:71:ef:e5:37:3d:33:0f:4d:
                    48:e5:46:f2:8b:44:04:db:6a:39:26:56:05:7c:bb:
                    88:ac:3f:28:de:4e:18:0c:19:a4:4b:d5:e0:8d:a5:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A5:11:6B:7B:93:97:28:99:B0:05:C9:CE:43:F3:FF:1E:4C:BB:0D
            X509v3 Authority Key Identifier:
                keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/eaURa3uTlyiZsAXJzkPz_x5Muw0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:98:f5:74:04:4e:60:9c:e2:ee:a8:cc:73:a2:a3:b6:11:
         ab:2e:c5:c3:da:45:bd:e5:a4:b4:6b:d8:37:17:da:12:4a:c2:
         8d:09:c9:a5:c9:9c:68:0a:5f:8c:94:ed:19:89:ea:06:ff:7d:
         60:e6:e4:36:7a:d2:17:99:80:84:00:96:c0:9e:d4:12:13:9d:
         5f:cb:e8:c9:c7:72:d5:70:86:b0:e2:90:48:0b:b3:e5:eb:43:
         00:13:a0:d5:fe:8a:60:0d:04:99:4a:e2:d2:a2:f0:7d:6f:98:
         a0:25:56:22:26:d8:44:dc:5c:88:6d:bf:64:31:2e:80:6c:09:
         71:3f:dc:7c:33:47:c1:b8:2f:9d:1a:a2:ff:ee:87:d7:31:48:
         12:2f:3f:f4:d4:25:ea:4e:6e:8f:6d:8f:03:48:f3:d3:40:07:
         21:aa:fa:3c:a2:93:67:af:b0:8b:99:c5:ae:fe:7b:71:de:6d:
         4d:f4:53:4c:05:d9:09:b5:92:56:a9:51:62:8b:62:4f:04:0a:
         5f:0e:c6:90:7f:29:38:57:c7:2a:7b:d6:4c:1c:3f:de:5f:72:
         ea:f4:cb:99:7b:b8:6e:d8:73:e9:a9:e4:d4:7d:b3:37:08:bc:
         ca:c4:6b:f4:7a:11:aa:4a:06:30:18:8d:a0:7c:01:d5:5c:f4:
         d9:12:19:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:39:11 2026 by rpki-client