This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa
File:                     eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa (raw, json)
Hash identifier:          Ym0Iu/9+fRHj5itQ0uhzHv3jsEKnG3SriEsKFuazFW4=
Subject key identifier:   79:EA:05:5A:CD:04:78:CC:C3:35:7C:C1:80:C1:37:F9:0E:D9:8B:8D
Certificate issuer:       /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial:       019B7EA670FD97ED5D4B330447901B0A6448
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa
Signing time:             Fri 02 Jan 2026 12:19:55 +0000
ROA not before:           Fri 02 Jan 2026 12:19:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48529
IP address blocks:        46.16.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:70:fd:97:ed:5d:4b:33:04:47:90:1b:0a:64:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
        Validity
            Not Before: Jan  2 12:19:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79ea055acd0478ccc3357cc180c137f90ed98b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:28:33:99:77:4e:52:d3:65:ab:43:fd:0e:
                    1b:c3:a9:c6:e1:a5:ac:f9:9a:f6:80:42:c8:8b:07:
                    a4:f5:f2:17:39:29:a8:b4:7a:de:86:59:81:4e:c4:
                    1e:2f:cb:53:a7:41:26:b5:e2:13:c4:f1:0a:eb:70:
                    fc:bf:ca:bf:53:c2:f9:2d:25:69:e1:05:38:da:d7:
                    cc:72:19:e3:94:e0:2c:0a:fb:74:9b:c6:9b:d1:dc:
                    da:90:32:97:53:0d:83:85:a8:0c:3c:eb:4d:54:a5:
                    bc:67:18:7e:80:b4:92:7d:0e:b1:08:22:ed:72:0f:
                    c3:88:b2:7b:1f:f5:77:b7:fd:3e:cf:ba:4d:43:1e:
                    d7:c0:ea:f9:10:d3:07:7e:e0:5c:0c:b5:2a:8f:40:
                    78:fa:02:03:bd:a6:38:55:03:ce:0f:e5:aa:4b:52:
                    d2:1a:e4:06:37:c4:2d:dc:43:29:18:d3:59:b7:14:
                    66:2b:d5:4b:76:50:01:3a:5f:6c:d5:ef:f7:dc:79:
                    1f:c2:ee:13:32:fd:43:74:ea:4c:60:1d:75:ac:77:
                    bc:de:61:cf:83:b6:68:df:db:55:23:54:4f:e7:54:
                    a8:a6:26:06:02:99:89:ee:a7:47:80:21:53:40:c2:
                    80:41:98:f4:8b:3b:21:ce:f6:00:dc:ef:8d:e0:62:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EA:05:5A:CD:04:78:CC:C3:35:7C:C1:80:C1:37:F9:0E:D9:8B:8D
            X509v3 Authority Key Identifier:
                keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/eeoFWs0EeMzDNXzBgME3-Q7Zi40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:44:55:b4:20:5c:9a:d4:70:a9:d0:e9:9c:ed:06:9d:f5:
         3c:ce:47:a7:65:a8:d4:3c:cc:55:46:7b:c8:98:77:b1:75:3d:
         12:cb:4d:d1:25:5c:81:0f:85:74:8c:ca:5f:03:2b:63:19:90:
         63:db:69:c7:e7:e7:1b:c1:f5:1a:10:ec:d9:7b:f9:6b:50:40:
         f7:a1:73:8e:86:4a:81:df:8e:10:20:98:d4:46:95:e6:b2:55:
         55:31:69:09:30:e9:c2:b2:db:38:0b:28:ba:07:38:b9:b3:df:
         b9:ac:3a:f1:29:5a:75:fc:d6:cb:52:c0:a9:10:8a:4e:a7:2f:
         af:6a:fd:ef:e6:f1:7e:9a:1b:de:3b:41:76:28:81:74:35:0a:
         2a:24:a5:87:d6:60:1c:06:8c:71:a9:eb:f6:17:33:85:13:3d:
         2f:d6:0b:98:40:b9:d7:4e:4f:7e:e9:3b:93:7b:a6:e6:c3:f5:
         5a:af:c6:8a:fa:19:44:fe:38:56:37:cc:fe:c8:8f:0d:6d:8a:
         1d:55:c6:9f:af:e2:61:f9:a4:a4:6e:e8:a8:ec:89:1d:9f:bc:
         b0:9d:a3:68:80:79:28:f3:a7:39:7c:c1:a8:f3:5d:36:02:6d:
         76:76:9f:a0:4a:a9:c8:35:e5:c8:c9:a4:88:77:b9:50:9e:b9:
         fd:c0:90:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:37:37 2026 by rpki-client