This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ejricRUq0IzG80f-2fAVl8clYY4.roa
File:                     ejricRUq0IzG80f-2fAVl8clYY4.roa (raw, json)
Hash identifier:          gEfVQ46c7f/KpOXHXY93etU/fLLZOv08qgidIaj29qk=
Subject key identifier:   7A:3A:E2:71:15:2A:D0:8C:C6:F3:47:FE:D9:F0:15:97:C7:25:61:8E
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       019B78347CF8A970FCD6B299F060C082E20A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ejricRUq0IzG80f-2fAVl8clYY4.roa
Signing time:             Thu 01 Jan 2026 06:17:44 +0000
ROA not before:           Thu 01 Jan 2026 06:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200881
IP address blocks:        193.235.86.0/23 maxlen: 23
                          193.235.88.0/23 maxlen: 23
                          193.235.90.0/24 maxlen: 24
                          193.235.91.0/24 maxlen: 24
                          193.235.92.0/23 maxlen: 23
                          193.235.94.0/23 maxlen: 23
                          194.68.138.0/23 maxlen: 23
                          194.68.140.0/22 maxlen: 22
                          194.68.144.0/22 maxlen: 22
                          194.68.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:7c:f8:a9:70:fc:d6:b2:99:f0:60:c0:82:e2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 06:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a3ae271152ad08cc6f347fed9f01597c725618e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:2c:89:9e:d1:1b:07:a3:33:84:1a:47:de:
                    dc:eb:f3:82:64:62:e3:4b:f7:84:09:6d:85:fc:33:
                    6c:71:c4:40:b9:d2:3f:98:2d:c2:a7:81:62:ef:c3:
                    d1:37:75:01:e0:ba:1b:7d:15:ce:1e:97:4f:98:29:
                    29:ad:01:fb:c7:a4:b0:50:7b:ae:63:2a:89:8a:c1:
                    c2:7f:d4:ad:11:60:5b:49:a4:0f:f9:5f:6b:f5:3f:
                    7a:4e:df:8f:d4:38:15:c7:70:a4:9a:90:19:df:54:
                    6b:c1:c3:83:8d:3a:8c:46:b9:93:76:d3:30:83:6c:
                    55:4e:c1:5e:f1:eb:ec:cf:c7:0d:8b:c6:3a:7e:2a:
                    55:ef:1c:5d:19:e2:dd:1a:48:9b:ef:cd:24:52:c6:
                    74:e7:68:11:98:9d:3d:84:79:09:36:0a:20:38:80:
                    7c:c1:77:66:33:f3:c2:52:60:cb:78:4b:ce:bc:b9:
                    f1:57:bc:39:50:d9:72:ca:74:80:78:bf:28:26:9f:
                    df:ca:5b:32:98:01:5c:25:9d:4c:d3:f5:e8:2d:db:
                    00:0f:5c:63:8d:fe:3a:35:01:72:70:09:ca:f4:ee:
                    3f:f2:97:af:01:2c:bf:09:cf:67:cb:5d:76:6c:70:
                    4b:12:2b:2f:c8:f3:72:cc:fe:42:e5:c3:37:0c:5b:
                    ed:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:E2:71:15:2A:D0:8C:C6:F3:47:FE:D9:F0:15:97:C7:25:61:8E
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ejricRUq0IzG80f-2fAVl8clYY4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.235.86.0-193.235.95.255
                  194.68.138.0-194.68.149.255

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:e4:47:a1:ef:e1:f0:8f:39:c0:85:ea:fd:11:ef:49:62:
         4a:12:aa:27:e0:c0:05:2f:ea:15:f9:7a:fc:e3:d3:0d:f3:e0:
         e0:0f:8b:59:c4:af:43:60:3c:45:8d:3b:d9:7d:bb:6a:3c:d2:
         67:5e:c8:a1:bb:e3:1d:54:79:86:4d:70:83:ea:4d:2f:4a:89:
         b9:d1:0f:d4:22:14:ac:90:90:b0:1f:d7:1b:fb:f4:eb:66:40:
         9c:24:91:01:8f:7f:b1:3d:d2:1e:25:8a:ad:1c:26:f4:0d:b2:
         2a:d1:50:85:ec:0a:08:f5:17:07:5c:97:57:2d:c3:7d:59:d3:
         3f:e5:c8:25:41:a1:ba:b3:81:da:3b:06:70:6b:dc:13:17:2c:
         fd:a1:2a:e4:a5:ef:ea:dc:75:09:2c:f5:da:5d:ec:ba:8e:3a:
         f0:b9:08:72:46:a9:15:a9:e1:2a:21:e7:4f:0f:82:87:da:e4:
         7e:f8:ed:b8:57:5d:0c:06:80:1b:77:1e:67:56:14:3e:41:75:
         5c:9a:74:e6:1b:51:12:ec:17:72:58:bc:e3:55:90:94:4f:25:
         40:69:7b:01:0c:9e:a3:6c:86:12:4f:93:42:7c:cc:5c:30:11:
         d6:db:5a:72:f7:55:ec:88:4e:f3:de:d3:63:2f:bb:81:b0:79:
         f9:59:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:43 2026 by rpki-client