This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5fDAqi2rFEHtInraiSde7GANkUg.roa
File:                     5fDAqi2rFEHtInraiSde7GANkUg.roa (raw, json)
Hash identifier:          b9nf6zb2SaDjg3E1+4anu9eL8907pUGUdUsxBMNrJ6Q=
Subject key identifier:   E5:F0:C0:AA:2D:AB:14:41:ED:22:7A:DA:89:27:5E:EC:60:0D:91:48
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019B7AC866F072C5A5C9EA6E88259F9D0839
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5fDAqi2rFEHtInraiSde7GANkUg.roa
Signing time:             Thu 01 Jan 2026 18:18:32 +0000
ROA not before:           Thu 01 Jan 2026 18:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     393406
IP address blocks:        94.229.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:66:f0:72:c5:a5:c9:ea:6e:88:25:9f:9d:08:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Jan  1 18:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e5f0c0aa2dab1441ed227ada89275eec600d9148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:41:78:f2:bb:bf:5c:02:25:97:70:2c:f8:
                    c3:34:98:48:d6:28:bd:92:d1:21:96:51:90:00:1e:
                    9f:98:3b:2a:54:28:a5:d1:84:ec:eb:b7:cc:ff:c5:
                    a8:b6:17:cd:a2:64:e0:f5:f4:b9:b5:fc:9c:4e:4a:
                    78:13:d4:7a:db:c3:96:85:25:23:e0:cf:d4:38:8b:
                    1c:13:aa:76:a3:bc:37:43:a9:c8:b5:5b:7b:56:d0:
                    0a:f4:46:f2:74:fb:2f:c0:a5:6c:40:50:88:77:c2:
                    a0:a7:a0:7b:2a:fc:4c:7c:15:10:e3:31:de:57:91:
                    b4:d8:1c:fe:7e:49:1d:e3:9e:21:69:10:c7:a3:df:
                    4c:1c:5a:31:f1:5a:e1:6a:cc:6c:e0:78:0e:b8:28:
                    20:47:41:f0:6f:0c:1a:b8:8f:b9:48:d3:64:56:6c:
                    b3:1e:8d:3a:e1:77:3d:9c:1a:7b:2b:e1:9a:65:31:
                    cf:8d:99:c3:7e:fd:a0:de:74:56:dd:cd:67:4f:f4:
                    da:ce:d8:41:f1:a6:2a:3e:06:2d:b9:23:87:ea:83:
                    f8:b2:ea:63:9a:96:54:43:b3:55:96:ca:6f:4a:e3:
                    5b:cb:ae:f2:4a:76:57:7a:10:65:e8:bd:21:37:07:
                    1f:84:fa:98:00:3f:66:e8:56:06:86:d9:38:f2:b5:
                    11:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F0:C0:AA:2D:AB:14:41:ED:22:7A:DA:89:27:5E:EC:60:0D:91:48
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/5fDAqi2rFEHtInraiSde7GANkUg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.229.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:1a:df:f6:83:79:f1:82:05:93:30:cc:99:30:a8:b2:97:
         c6:1e:9d:ee:07:ea:2d:5b:0b:22:e3:86:24:15:83:d9:51:62:
         30:cb:1a:e3:5c:61:05:36:c1:1e:4a:62:b1:a6:66:bd:2a:f1:
         5b:1c:08:a5:5f:19:9c:14:7b:92:a9:2d:9a:35:28:bb:ad:9a:
         91:a2:8b:f0:4c:3c:ca:9e:f6:d9:cc:e9:6e:38:13:eb:be:01:
         a7:87:90:43:f2:46:1a:9a:f6:50:0c:00:37:71:68:e7:e2:d1:
         d0:13:10:9b:b3:c8:f7:18:9d:da:7e:53:80:be:8a:a3:5a:b6:
         52:f4:08:e8:a1:eb:4f:26:33:e5:74:ae:12:4d:12:8b:da:05:
         01:05:b4:d1:c4:23:9c:2f:69:c6:2b:d6:df:35:81:30:2f:16:
         16:45:19:22:cd:70:f9:da:0e:ea:b6:1f:db:28:0d:41:78:b5:
         ee:e5:c5:e3:90:9c:ce:ec:11:11:65:5d:63:db:54:ef:07:59:
         22:64:4b:42:80:44:fc:29:e6:25:cb:32:51:5b:47:ce:ef:32:
         da:d2:ba:5f:f1:74:df:71:28:87:b7:90:86:b3:60:bd:10:0c:
         91:04:1d:69:ba:46:a7:07:bf:46:7e:98:07:9b:ef:b7:d6:6e:
         45:01:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:42 2026 by rpki-client