This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eh0QrJ29iZ_UYisUQLj1CoImTFI.roa
File:                     eh0QrJ29iZ_UYisUQLj1CoImTFI.roa (raw, json)
Hash identifier:          sN/2WaAQdyrts9lZ4B9/NVfE6VOdrheNRrjSPGE8Dq4=
Subject key identifier:   7A:1D:10:AC:9D:BD:89:9F:D4:62:2B:14:40:B8:F5:0A:82:26:4C:52
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B1658B210D4DD45E3EA8DFEC9436E6E3D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eh0QrJ29iZ_UYisUQLj1CoImTFI.roa
Signing time:             Sat 13 Dec 2025 06:14:30 +0000
ROA not before:           Sat 13 Dec 2025 06:14:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     2914
IP address blocks:        80.97.54.0/24 maxlen: 24
                          81.180.173.0/24 maxlen: 24
                          81.181.175.0/24 maxlen: 24
                          81.181.236.0/22 maxlen: 22
                          194.102.122.0/23 maxlen: 23
                          194.102.217.0/24 maxlen: 24
                          217.156.29.0/24 maxlen: 24
                          217.156.57.0/24 maxlen: 24
                          217.156.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:16:58:b2:10:d4:dd:45:e3:ea:8d:fe:c9:43:6e:6e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Dec 13 06:14:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7a1d10ac9dbd899fd4622b1440b8f50a82264c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:a1:79:97:4c:07:07:1e:ec:aa:a1:47:de:
                    50:66:10:e1:8f:c0:63:55:55:d9:54:f0:96:35:33:
                    51:4b:cd:b2:ce:48:90:c9:2d:7c:6d:13:7d:73:99:
                    12:69:fe:5a:b9:07:df:6e:bd:fa:e7:2f:22:9e:47:
                    ea:2d:03:35:f7:d0:24:5a:73:ca:a8:ab:ba:16:15:
                    d3:58:71:68:e7:70:01:dd:96:73:6d:24:f3:a2:b7:
                    b5:76:a5:b1:6b:7a:de:07:c1:a2:33:84:1f:c0:66:
                    a1:9a:4c:a6:fd:9e:e5:61:37:81:a9:66:75:54:0c:
                    00:23:26:c8:b1:2c:b9:8c:9b:e9:fc:a8:2e:58:1e:
                    cd:45:81:04:d1:c9:33:fd:cc:27:c5:32:57:df:d2:
                    73:7d:a0:23:6e:54:43:1e:b1:f7:a1:93:b9:b6:02:
                    82:13:5a:36:24:1b:4c:e8:61:72:21:97:4e:32:4d:
                    f4:0e:dc:a5:a8:33:86:c0:d8:68:dc:43:b5:33:fc:
                    7e:7a:d2:db:b2:8a:a9:c4:f8:73:34:58:2b:94:02:
                    35:ff:52:06:74:fc:31:fb:b4:66:b8:e8:34:12:9b:
                    4c:b2:e2:99:72:7c:13:57:94:8a:5b:dd:40:23:93:
                    8e:60:cb:b0:3a:62:08:0d:73:32:cd:b2:d9:80:63:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1D:10:AC:9D:BD:89:9F:D4:62:2B:14:40:B8:F5:0A:82:26:4C:52
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eh0QrJ29iZ_UYisUQLj1CoImTFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.97.54.0/24
                  81.180.173.0/24
                  81.181.175.0/24
                  81.181.236.0/22
                  194.102.122.0/23
                  194.102.217.0/24
                  217.156.29.0/24
                  217.156.57.0/24
                  217.156.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:c3:62:08:1d:a6:27:77:23:09:9d:15:fe:9d:02:3d:e0:1a:
         4d:4d:ab:eb:26:f4:8d:4e:c1:27:15:5b:95:b3:b0:93:1f:d3:
         9b:04:86:79:51:74:bd:71:56:44:a8:25:36:98:03:e8:3e:8c:
         1f:1f:d3:a7:8d:b8:71:03:72:de:bb:51:7b:26:a9:f6:0b:cc:
         18:11:86:1d:67:7a:09:a9:ef:d5:f1:e6:03:24:ef:1a:9b:34:
         65:33:a0:e8:45:5d:70:da:28:2c:f1:59:9e:ed:b0:f5:f1:01:
         68:16:00:21:ad:9a:9a:59:93:2c:a3:15:b5:ca:41:81:99:82:
         38:fe:20:e9:22:b2:d1:42:91:38:c2:8c:48:91:f3:0d:a8:5e:
         78:18:dd:63:a9:10:85:85:ef:d9:e0:32:71:26:7d:c2:a6:ed:
         3b:a3:a5:1a:ce:b8:17:22:94:e6:2a:fe:b7:bc:ab:0b:bb:86:
         12:5c:09:8e:c0:c4:0f:d3:91:93:a7:e2:0c:32:95:68:1e:57:
         b5:65:ae:a1:d9:71:f1:84:ec:3f:cf:f5:ae:03:6c:48:34:d1:
         cb:76:aa:8e:83:33:e1:d0:1b:90:f2:43:2d:93:c9:6c:af:d8:
         53:28:73:f2:81:fb:7e:26:7e:9c:16:de:10:e2:5f:94:00:04:
         e5:f3:68:e5
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZsWWLIQ1N1F4+qN/slDbm49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjUxMjEzMDYxNDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTFkMTBhYzlkYmQ4OTlmZDQ2MjJiMTQ0MGI4ZjUwYTgyMjY0YzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlmheZdMBwce7KqhR95QZhDhj8Bj
VVXZVPCWNTNRS82yzkiQyS18bRN9c5kSaf5auQffbr365y8inkfqLQM199AkWnPK
qKu6FhXTWHFo53AB3ZZzbSTzore1dqWxa3reB8GiM4QfwGahmkym/Z7lYTeBqWZ1
VAwAIybIsSy5jJvp/KguWB7NRYEE0ckz/cwnxTJX39JzfaAjblRDHrH3oZO5tgKC
E1o2JBtM6GFyIZdOMk30DtylqDOGwNho3EO1M/x+etLbsoqpxPhzNFgrlAI1/1IG
dPwx+7RmuOg0EptMsuKZcnwTV5SKW91AI5OOYMuwOmIIDXMyzbLZgGOnfQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHodEKydvYmf1GIrFEC49QqCJkxSMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZWgwUXJKMjlpWl9VWWlzVVFMajFDb0ltVEZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAUGE2AwQA
UbStAwQAUbWvAwQCUbXsAwQBwmZ6AwQAwmbZAwQA2ZwdAwQA2Zw5AwQC2ZxwMA0G
CSqGSIb3DQEBCwUAA4IBAQAqw2IIHaYndyMJnRX+nQI94BpNTavrJvSNTsEnFVuV
s7CTH9ObBIZ5UXS9cVZEqCU2mAPoPowfH9OnjbhxA3Leu1F7Jqn2C8wYEYYdZ3oJ
qe/V8eYDJO8amzRlM6DoRV1w2igs8Vme7bD18QFoFgAhrZqaWZMsoxW1ykGBmYI4
/iDpIrLRQpE4woxIkfMNqF54GN1jqRCFhe/Z4DJxJn3Cpu07o6UazrgXIpTmKv63
vKsLu4YSXAmOwMQP05GTp+IMMpVoHle1Za6h2XHxhOw/z/WuA2xINNHLdqqOgzPh
0BuQ8kMtk8lsr9hTKHPygft+Jn6cFt4Q4l+UAATl82jl
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:11:26 2025 by rpki-client