This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa
File:                     eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (raw, json)
Hash identifier:          kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=
Subject key identifier:   79:0B:DB:B8:1F:96:21:F3:DA:53:E2:F3:73:6D:00:54:41:52:EA:6F
Certificate issuer:       /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial:       019B7BA413F1C85841ABB2942D17E99D536F
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa
Signing time:             Thu 01 Jan 2026 22:18:29 +0000
ROA not before:           Thu 01 Jan 2026 22:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34476
IP address blocks:        31.169.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:13:f1:c8:58:41:ab:b2:94:2d:17:e9:9d:53:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
        Validity
            Not Before: Jan  1 22:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=790bdbb81f9621f3da53e2f3736d00544152ea6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:0e:db:86:0a:ac:3a:20:93:94:99:14:de:
                    bf:64:30:a7:42:57:e1:30:db:48:35:89:56:b4:b9:
                    42:28:22:84:31:e1:bb:0b:9c:3c:8d:19:45:d9:f1:
                    b6:74:e5:95:a5:d2:4b:a8:d9:de:d2:f0:f0:2b:c7:
                    02:46:e2:f4:0e:65:fd:9a:c8:63:e1:6a:fb:2e:8e:
                    fe:7f:cd:b5:2c:78:08:97:b8:ec:14:4d:ed:97:e3:
                    81:4f:02:8b:6f:75:72:a6:68:3e:30:84:52:1f:1f:
                    93:87:69:1c:c9:63:90:4f:26:ec:42:2e:cf:40:7a:
                    15:bc:58:a4:73:6a:eb:76:aa:db:5d:22:d4:bf:21:
                    d7:ed:19:b2:a0:e4:3c:ca:83:5b:9f:43:6a:3e:bd:
                    64:1c:4c:ee:8d:15:82:57:21:0f:48:48:50:35:a4:
                    26:88:57:60:a7:f0:74:80:2c:56:3c:87:f3:41:50:
                    91:04:8f:9e:66:6a:55:c5:44:c1:14:62:b7:00:6d:
                    99:6c:51:96:44:8e:98:df:ca:4c:52:f3:2f:1b:ca:
                    63:11:8b:00:27:8a:b4:29:7e:86:b4:1d:14:87:4c:
                    2c:5b:03:47:81:1e:9d:9f:99:0c:7a:52:ca:0b:d9:
                    cd:89:4f:7f:08:1e:9f:f1:b7:03:eb:61:39:4c:dd:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0B:DB:B8:1F:96:21:F3:DA:53:E2:F3:73:6D:00:54:41:52:EA:6F
            X509v3 Authority Key Identifier:
                keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.169.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:23:71:3c:64:d1:e2:19:53:59:80:12:56:31:ca:0b:2f:
         dc:5c:56:10:f6:82:20:15:00:a5:f2:24:fc:83:b8:6b:f3:45:
         82:36:66:ca:27:90:81:72:e5:7a:22:d0:cf:1e:58:0a:f9:2f:
         55:73:a5:e7:0d:a5:d6:ea:3c:3f:88:c4:28:45:79:6a:bf:a9:
         e7:bf:60:91:5a:0e:d1:60:72:00:8a:8b:56:2c:3c:d6:c3:72:
         a4:84:d5:9b:6c:b0:2c:f7:80:94:52:82:15:74:ef:71:07:0a:
         7e:c8:8e:53:41:47:50:68:62:7b:9e:c1:e6:93:b2:17:7e:e6:
         7c:cd:ca:58:2b:7a:45:a1:a6:88:f2:71:ce:9c:b8:66:71:a1:
         e0:da:9a:41:96:dd:cd:02:d5:bf:00:32:3f:de:77:9a:0d:10:
         2a:48:a1:76:22:da:1d:6c:2b:b9:3c:ba:17:a4:d7:b3:af:50:
         40:03:c0:77:cd:7e:f3:0b:68:4f:c9:2b:88:eb:d5:ac:d2:c2:
         2e:48:f3:b9:05:3e:6f:8b:6d:21:25:35:3b:2b:0a:4a:0d:ee:
         01:16:28:0d:80:78:3c:c8:3f:42:1f:dc:b5:22:07:fc:12:0d:
         a4:69:ff:f5:cf:ea:bb:c6:46:d9:fb:c1:8c:0d:ff:8a:c2:14:
         90:47:e9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:46:13 2026 by rpki-client