This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/eUCYKUszQzKLl5y0TD_e2TpUs_M.roa
File:                     eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (raw, json)
Hash identifier:          sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=
Subject key identifier:   79:40:98:29:4B:33:43:32:8B:97:9C:B4:4C:3F:DE:D9:3A:54:B3:F3
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019B7DC9E257F53CA58EB6FE7A2CBD80CEB4
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/eUCYKUszQzKLl5y0TD_e2TpUs_M.roa
Signing time:             Fri 02 Jan 2026 08:19:01 +0000
ROA not before:           Fri 02 Jan 2026 08:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34444
IP address blocks:        84.22.64.0/19 maxlen: 19
                          84.22.64.0/24 maxlen: 24
                          84.22.65.0/24 maxlen: 24
                          84.22.66.0/24 maxlen: 24
                          84.22.67.0/24 maxlen: 24
                          84.22.68.0/24 maxlen: 24
                          84.22.69.0/24 maxlen: 24
                          84.22.70.0/24 maxlen: 24
                          84.22.71.0/24 maxlen: 24
                          84.22.72.0/24 maxlen: 24
                          84.22.73.0/24 maxlen: 24
                          84.22.74.0/24 maxlen: 24
                          84.22.75.0/24 maxlen: 24
                          84.22.76.0/24 maxlen: 24
                          84.22.77.0/24 maxlen: 24
                          84.22.78.0/24 maxlen: 24
                          84.22.79.0/24 maxlen: 24
                          84.22.80.0/24 maxlen: 24
                          84.22.81.0/24 maxlen: 24
                          84.22.84.0/24 maxlen: 24
                          84.22.85.0/24 maxlen: 24
                          84.22.86.0/24 maxlen: 24
                          195.234.248.0/22 maxlen: 22
                          213.180.225.0/24 maxlen: 24
                          213.180.226.0/24 maxlen: 24
                          213.180.228.0/24 maxlen: 24
                          213.180.229.0/24 maxlen: 24
                          213.180.230.0/24 maxlen: 24
                          213.180.240.0/21 maxlen: 21
                          213.180.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:e2:57:f5:3c:a5:8e:b6:fe:7a:2c:bd:80:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Jan  2 08:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=794098294b3343328b979cb44c3fded93a54b3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:95:db:1a:29:83:1b:aa:aa:ab:0f:82:31:
                    0b:6d:a3:18:66:32:9e:8d:34:68:bd:cb:df:46:f7:
                    74:e7:c2:d8:96:a6:97:c5:0a:e6:8c:79:35:4d:9d:
                    09:1d:9e:42:7d:d2:e2:c7:a3:87:04:03:93:79:bf:
                    61:37:8f:a1:86:3b:23:2a:21:9a:b1:01:ef:97:5f:
                    22:99:44:88:1d:4f:e7:18:01:e0:83:4b:36:db:34:
                    ff:ca:72:2c:92:9d:5a:a3:4e:8a:50:ca:80:b8:a6:
                    4b:66:91:0e:c9:09:4e:4e:57:f0:c8:5a:ed:42:4d:
                    dc:73:b0:dc:af:ab:dc:45:5f:f2:dc:6f:ea:f9:c8:
                    55:36:0a:62:bc:a1:c1:c4:f3:97:03:bb:bb:4d:3b:
                    2d:1b:3a:3a:33:4c:ae:ae:db:54:2a:be:c2:4d:b4:
                    e3:8b:ea:f5:53:ab:1d:f1:f1:bd:bf:df:3c:bf:97:
                    fd:ba:f5:25:cc:b7:33:0d:8f:06:2d:cc:68:aa:09:
                    a5:d4:e0:46:4d:0c:f5:bc:2d:e1:a5:1a:cd:47:4b:
                    71:25:c8:96:b3:c5:52:6b:3d:e4:c7:2d:0c:3b:9c:
                    64:0f:a9:d6:30:3f:f9:7e:ac:74:3e:4b:8a:00:29:
                    b2:dd:4c:c0:44:90:8b:c0:14:e7:d9:b2:b3:29:d0:
                    ed:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:40:98:29:4B:33:43:32:8B:97:9C:B4:4C:3F:DE:D9:3A:54:B3:F3
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/eUCYKUszQzKLl5y0TD_e2TpUs_M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.22.64.0/19
                  195.234.248.0/22
                  213.180.225.0-213.180.226.255
                  213.180.228.0-213.180.230.255
                  213.180.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:1b:2e:5d:aa:e9:47:05:64:0f:7e:5b:7b:f9:1c:43:0e:ed:
         fe:74:88:d5:8e:11:5e:a6:04:d0:36:a2:73:7d:37:67:ad:34:
         be:04:e6:3e:3e:91:c3:a1:bb:23:75:8c:7c:ac:e4:fc:90:d8:
         7b:a4:a0:63:77:45:06:84:8f:d3:bc:9b:d9:41:67:a5:1c:96:
         12:db:ed:ed:dc:3f:4e:88:f7:43:41:7d:8f:93:dc:80:00:cb:
         ec:21:13:06:fb:9a:f3:74:e4:db:95:59:31:9f:ee:a8:02:22:
         9c:5d:e5:79:93:44:04:f8:60:bc:4c:65:3f:90:d2:f6:5b:f8:
         d6:4e:c3:2f:23:4d:ee:e1:dc:a3:3b:a6:26:9d:14:a7:c7:e4:
         2c:f2:eb:62:e8:c3:7a:a8:c0:be:a9:e3:15:16:cd:e8:cc:61:
         52:a4:8e:34:bf:45:cf:77:6b:47:6a:af:ea:7b:54:40:b5:85:
         cb:b3:fa:24:de:8f:f5:be:68:e8:64:6b:a4:02:22:01:8c:7d:
         d7:52:c7:bd:60:b3:51:63:30:3d:ca:91:6f:05:50:ab:16:18:
         10:91:c8:62:27:98:92:29:8d:4f:3b:ff:d6:76:00:12:ed:f0:
         87:77:1f:43:41:af:f6:6e:ab:d5:7e:f3:77:14:51:c6:7c:1f:
         77:5c:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:40 2026 by rpki-client