This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa
File:                     e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (raw, json)
Hash identifier:          izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=
Subject key identifier:   7B:5B:E4:50:1E:21:5B:76:81:FD:E7:70:85:84:C8:E8:D9:5C:CB:40
Certificate issuer:       /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial:       019B7834CAF0A891EB317A80428D434BDA12
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa
Signing time:             Thu 01 Jan 2026 06:18:04 +0000
ROA not before:           Thu 01 Jan 2026 06:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210020
IP address blocks:        185.225.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:ca:f0:a8:91:eb:31:7a:80:42:8d:43:4b:da:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
        Validity
            Not Before: Jan  1 06:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b5be4501e215b7681fde7708584c8e8d95ccb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:49:37:8d:d1:64:11:c8:09:ce:95:98:7c:cb:
                    e9:ad:69:50:35:a6:e9:e7:10:07:9a:82:82:80:dd:
                    31:04:95:0c:e6:bf:4a:43:9f:5c:52:3a:e8:16:48:
                    ec:8d:e1:b9:71:bb:46:f0:cf:68:ff:d4:c5:f6:c8:
                    69:7c:3c:75:4d:20:2c:37:7f:84:a4:26:84:33:a5:
                    08:8a:7c:57:e3:08:e0:9e:ae:55:60:a8:26:b1:6b:
                    4f:34:1f:e8:ac:85:57:a0:2c:34:f7:8c:97:43:e0:
                    cf:ee:d1:85:d9:5c:c9:0b:61:ec:43:09:b0:43:4e:
                    92:b6:7f:c5:49:8f:0c:38:f0:d0:ed:23:3e:31:52:
                    8a:f8:ae:c1:3d:92:15:03:5c:7e:d9:b4:33:df:31:
                    c2:69:e1:a1:21:63:0e:94:6f:66:bb:55:41:d5:86:
                    05:56:18:9e:cc:fd:07:d1:dc:ed:5f:2f:5a:e7:92:
                    eb:63:1c:af:ab:90:72:9f:ee:63:a3:51:84:2b:ec:
                    48:6a:97:b4:ff:b3:7f:ec:26:1c:7b:c3:1f:0d:09:
                    dc:49:d4:6b:57:bf:a2:67:87:35:cd:0c:b6:74:a9:
                    6b:ad:d0:d3:0f:3a:b6:8b:bc:66:86:6a:28:39:c1:
                    d4:e9:0d:69:ea:78:c0:d2:78:4e:95:f3:b5:32:fa:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5B:E4:50:1E:21:5B:76:81:FD:E7:70:85:84:C8:E8:D9:5C:CB:40
            X509v3 Authority Key Identifier:
                keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:99:3b:a8:e1:49:ca:ae:5e:73:73:a9:ab:39:9b:ed:3a:33:
         e1:0e:c3:8f:af:09:c8:a8:90:f8:09:00:d4:9f:75:99:d7:18:
         b9:0a:15:2e:83:ca:25:90:a1:d1:c7:14:81:15:76:69:b4:2e:
         ae:8d:5f:64:36:1b:7d:5f:9c:bc:63:f6:a1:c2:3d:7b:34:72:
         3f:fd:fd:2c:72:11:03:65:d3:a6:4e:91:96:dd:21:3c:58:98:
         b5:68:d1:03:3a:15:9f:8e:76:17:57:fb:29:02:19:91:2a:11:
         1b:56:26:56:08:35:21:83:5e:63:e2:e2:78:1c:15:5c:3b:c9:
         17:41:25:81:47:de:9f:48:d2:07:56:5e:50:00:e7:13:5a:1a:
         3e:52:9f:34:c9:1b:d0:e4:96:d3:d8:f8:c4:f1:09:77:f1:ce:
         8a:e9:95:3e:55:9a:38:f5:38:58:c1:9d:da:3e:8a:90:0d:0f:
         7e:50:8a:03:17:2b:cf:04:86:24:89:82:8d:f1:89:9e:e4:46:
         6f:94:ea:23:76:31:2d:86:40:2b:b6:0c:fb:d4:ad:e7:21:fb:
         c7:d1:27:47:ad:7b:df:cd:fb:52:cf:8c:7b:de:e2:82:62:c4:
         7d:e0:93:eb:e8:a7:ed:73:19:d2:20:f9:9f:d9:16:97:a3:36:
         3a:c9:f7:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NMrwqJHrMXqAQo1DS9oSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm
M2VmNjgwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjViZTQ1MDFlMjE1Yjc2ODFmZGU3NzA4NTg0YzhlOGQ5NWNjYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kk3jdFkEcgJzpWYfMvprWlQNabp
5xAHmoKCgN0xBJUM5r9KQ59cUjroFkjsjeG5cbtG8M9o/9TF9shpfDx1TSAsN3+E
pCaEM6UIinxX4wjgnq5VYKgmsWtPNB/orIVXoCw094yXQ+DP7tGF2VzJC2HsQwmw
Q06Stn/FSY8MOPDQ7SM+MVKK+K7BPZIVA1x+2bQz3zHCaeGhIWMOlG9mu1VB1YYF
VhiezP0H0dztXy9a55LrYxyvq5Byn+5jo1GEK+xIape0/7N/7CYce8MfDQncSdRr
V7+iZ4c1zQy2dKlrrdDTDzq2i7xmhmooOcHU6Q1p6njA0nhOlfO1MvqWSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtb5FAeIVt2gf3ncIWEyOjZXMtAMB8GA1UdIwQY
MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt
ZGI1YWE1NzdjM2FmLzEvZTF2a1VCNGhXM2FCX2Vkd2hZVEk2TmxjeTBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm
LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueHHMA0G
CSqGSIb3DQEBCwUAA4IBAQAymTuo4UnKrl5zc6mrOZvtOjPhDsOPrwnIqJD4CQDU
n3WZ1xi5ChUug8olkKHRxxSBFXZptC6ujV9kNht9X5y8Y/ahwj17NHI//f0schED
ZdOmTpGW3SE8WJi1aNEDOhWfjnYXV/spAhmRKhEbViZWCDUhg15j4uJ4HBVcO8kX
QSWBR96fSNIHVl5QAOcTWho+Up80yRvQ5JbT2PjE8Ql38c6K6ZU+VZo49ThYwZ3a
PoqQDQ9+UIoDFyvPBIYkiYKN8Yme5EZvlOojdjEthkArtgz71K3nIfvH0SdHrXvf
zftSz4x73uKCYsR94JPr6KftcxnSIPmf2RaXozY6yfek
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:39:15 2026 by rpki-client