This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/euBDK0teiudHQhrJi2_JfLpHbIo.roa
File:                     euBDK0teiudHQhrJi2_JfLpHbIo.roa (raw, json)
Hash identifier:          9Ch3Z5Y1YUurOyFvZ1PubLvXMBKJAt06gWqZgpWHSfM=
Subject key identifier:   7A:E0:43:2B:4B:5E:8A:E7:47:42:1A:C9:8B:6F:C9:7C:BA:47:6C:8A
Certificate issuer:       /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial:       019BD6DF5EC16EB829A8AF3F850E8DA9760D
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/euBDK0teiudHQhrJi2_JfLpHbIo.roa
Signing time:             Mon 19 Jan 2026 15:28:41 +0000
ROA not before:           Mon 19 Jan 2026 15:28:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25198
IP address blocks:        91.200.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:df:5e:c1:6e:b8:29:a8:af:3f:85:0e:8d:a9:76:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
        Validity
            Not Before: Jan 19 15:28:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ae0432b4b5e8ae747421ac98b6fc97cba476c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:cc:ad:1e:2c:7a:ff:0d:f5:6c:b6:69:28:
                    b3:a2:02:5a:5b:46:6c:eb:a9:d4:7b:ec:db:0d:77:
                    ba:ff:96:57:03:6d:2f:8e:b9:32:f4:9b:70:b5:39:
                    be:71:fe:8b:97:56:6f:eb:77:a7:a9:d2:17:38:ee:
                    46:c7:c4:75:68:41:68:c2:d8:c7:84:24:ca:d2:69:
                    06:0b:25:ad:85:f8:2d:93:cd:7c:b7:e8:92:88:c8:
                    f7:bd:26:3d:cb:ee:98:5b:3b:72:08:a2:12:9e:99:
                    61:86:0e:11:48:21:e8:02:da:69:81:b7:8a:3e:f1:
                    93:99:de:9d:fb:21:b8:c1:1e:0a:25:4f:12:cf:d6:
                    b1:39:18:44:b4:14:9c:24:81:cd:e4:31:ac:72:09:
                    0b:88:aa:f6:7f:0f:35:6b:e0:50:1b:00:4c:9e:ee:
                    3d:9f:39:c4:70:6b:a0:81:f9:bc:55:8f:35:b2:63:
                    1f:81:9f:d3:3c:37:ec:68:0f:da:ad:89:33:02:fe:
                    65:66:57:43:ad:3a:b6:ec:da:4d:da:9a:30:81:dd:
                    cd:80:9d:9b:5e:f7:96:8b:72:77:73:8d:8e:10:eb:
                    08:1c:9c:7f:fc:8c:d4:11:26:28:50:46:f1:78:10:
                    e4:de:07:a2:6c:a0:3a:80:a7:5d:8f:fa:6e:a1:27:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:43:2B:4B:5E:8A:E7:47:42:1A:C9:8B:6F:C9:7C:BA:47:6C:8A
            X509v3 Authority Key Identifier:
                keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/euBDK0teiudHQhrJi2_JfLpHbIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.200.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c4:87:5c:48:ad:70:85:31:71:cc:ec:9d:4f:b2:7c:a2:31:
         06:5b:b5:4a:58:8f:51:e9:09:01:4a:fc:2d:e0:db:16:81:2a:
         dc:45:3c:76:b4:bf:5e:24:76:ab:07:04:d6:bf:a7:29:b6:56:
         e4:c4:84:5b:67:d2:f5:3f:ec:52:83:d4:5a:54:55:49:0a:fd:
         01:ab:c2:32:9e:99:50:73:0e:53:8c:a4:54:04:23:e6:db:9a:
         9f:69:55:6e:c9:25:f5:2f:09:e4:50:04:47:f1:9d:b7:d5:e7:
         08:51:3e:a2:71:fc:14:9e:bc:0f:d1:6e:3f:35:1b:aa:ac:5a:
         61:b4:67:ad:9e:8a:68:c1:1a:b2:04:a6:10:4b:5c:c6:91:64:
         2b:0f:5d:20:31:19:04:e9:3c:ef:5d:4c:2d:d8:ae:2f:81:4e:
         fe:ab:40:19:73:64:37:20:26:59:af:ee:d4:dd:ee:c1:7a:16:
         67:93:c0:d8:a8:55:8e:ea:fb:b0:7d:47:f6:7a:23:1e:ce:07:
         ce:33:ce:ee:cc:a4:41:b0:d1:eb:ef:6c:e5:46:7f:6c:fa:97:
         be:3b:84:c3:25:bb:9a:e0:c4:71:6a:82:ac:84:77:f9:53:50:
         dc:94:6f:04:60:46:f8:cc:18:a6:70:f7:06:44:b8:08:09:b6:
         5f:fa:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:00:42 2026 by rpki-client