This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eMt1mBbCBpEYfArfDKvIv_0e4-4.roa
File:                     eMt1mBbCBpEYfArfDKvIv_0e4-4.roa (raw, json)
Hash identifier:          E9ksEkQ3tCtkQ+9G2w+AH8Powfs4A/n7FnQqTwpRFx8=
Subject key identifier:   78:CB:75:98:16:C2:06:91:18:7C:0A:DF:0C:AB:C8:BF:FD:1E:E3:EE
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B0D6F34DD02D00870B24C92DF59D7E35E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eMt1mBbCBpEYfArfDKvIv_0e4-4.roa
Signing time:             Thu 11 Dec 2025 12:42:30 +0000
ROA not before:           Thu 11 Dec 2025 12:42:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     48753
IP address blocks:        80.97.160.0/24 maxlen: 24
                          80.97.161.0/24 maxlen: 24
                          85.121.148.0/24 maxlen: 24
                          85.122.129.0/24 maxlen: 24
                          194.102.104.0/24 maxlen: 24
                          217.156.62.0/24 maxlen: 24
                          217.156.66.0/24 maxlen: 24
                          217.156.67.0/24 maxlen: 24
                          217.156.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:6f:34:dd:02:d0:08:70:b2:4c:92:df:59:d7:e3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Dec 11 12:42:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=78cb759816c20691187c0adf0cabc8bffd1ee3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:3d:ad:3f:7a:5e:6f:1e:01:78:16:f4:4c:
                    77:64:73:33:fd:ae:cf:1b:1e:a9:9d:3f:4b:26:45:
                    98:5b:b3:f7:9c:d6:9b:99:83:9e:1c:c8:7b:ef:f8:
                    90:f9:30:10:ca:53:9e:11:ee:ac:8d:6d:91:c0:07:
                    7c:f7:84:ed:63:e1:de:02:13:d4:75:72:c2:a7:3c:
                    ee:d4:d8:cd:c4:21:a3:13:ef:81:48:42:5c:8c:93:
                    31:27:9b:8d:6e:2a:76:f9:6d:28:a5:af:42:42:fe:
                    b6:4d:5c:e8:ee:8e:8e:15:02:40:ba:2b:e9:4b:34:
                    88:e6:e6:a6:89:7e:2b:37:68:2f:2e:7e:af:0d:ba:
                    6c:c2:d5:2e:9e:6b:1c:67:ae:4b:9b:20:f9:e0:f5:
                    24:74:0c:67:18:40:b7:1c:b3:6d:df:6f:fe:91:85:
                    50:77:3e:cc:ef:ce:7d:bb:04:c6:97:7a:12:43:1d:
                    53:f6:ae:fd:0d:9c:9a:3d:1d:37:98:45:f6:82:ed:
                    33:93:7a:45:b2:2f:c1:81:40:b4:5b:19:5f:42:fa:
                    e4:11:6b:32:75:5e:9f:be:1b:de:b5:b5:8c:40:68:
                    6a:a7:c3:ba:37:c3:81:f2:18:83:87:de:2b:d9:56:
                    0e:26:d8:98:64:4f:60:02:d3:04:32:7a:0e:b8:89:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CB:75:98:16:C2:06:91:18:7C:0A:DF:0C:AB:C8:BF:FD:1E:E3:EE
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eMt1mBbCBpEYfArfDKvIv_0e4-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.97.160.0/23
                  85.121.148.0/24
                  85.122.129.0/24
                  194.102.104.0/24
                  217.156.62.0/24
                  217.156.66.0/23
                  217.156.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:c4:7b:2b:18:79:f9:c5:f9:fc:c6:f0:67:34:c0:87:ba:
         9c:21:a1:9d:4e:b6:04:13:af:3a:fe:d7:f4:0f:fc:bd:59:b6:
         27:5b:d0:e3:50:0f:50:c9:c0:5f:0b:23:47:8c:50:b6:12:72:
         3b:80:95:aa:99:fb:8a:ca:79:6e:ce:67:9d:1e:10:32:32:38:
         d7:f0:0a:b0:5d:c8:8e:5c:11:a6:30:8d:46:ce:2f:78:67:51:
         89:74:08:1b:e4:45:d0:fb:26:42:75:b5:da:12:eb:d5:a0:48:
         4d:e3:3c:b6:41:8d:be:6d:4f:31:4a:ec:8d:07:0a:f5:80:58:
         db:7d:74:37:cd:16:e0:8a:b7:23:af:a9:63:00:ad:1f:63:17:
         ad:9c:61:eb:e3:f4:da:60:a1:a3:db:db:34:ad:43:c7:9b:d4:
         c3:17:66:8b:5f:4b:ec:a7:b8:82:8c:07:9a:a1:b7:2c:75:7a:
         4b:c8:29:b2:05:c8:a9:1a:4e:16:3e:02:5c:37:97:83:20:6d:
         7d:25:6f:f4:3f:00:a6:e8:0b:40:13:4c:3c:5f:32:16:ca:40:
         cb:99:f7:49:8f:e9:6d:97:eb:28:03:68:0f:ca:1f:d0:21:d8:
         7c:f2:37:9a:03:12:79:2e:c7:b0:29:4f:6d:3a:43:54:8b:55:
         02:fe:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:14:01 2025 by rpki-client