This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/eUPnPvwar4_2gLEYF_ga_j6DIek.roa
File:                     eUPnPvwar4_2gLEYF_ga_j6DIek.roa (raw, json)
Hash identifier:          TzB31FMEQ/zJky5LRnXt2oWpvNtztWK+uPGxX5SdP2A=
Subject key identifier:   79:43:E7:3E:FC:1A:AF:8F:F6:80:B1:18:17:F8:1A:FE:3E:83:21:E9
Certificate issuer:       /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial:       019B7DCA63BF6FB42829FD752F984BD0F203
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/eUPnPvwar4_2gLEYF_ga_j6DIek.roa
Signing time:             Fri 02 Jan 2026 08:19:34 +0000
ROA not before:           Fri 02 Jan 2026 08:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42742
IP address blocks:        78.157.224.0/19 maxlen: 19
                          78.157.253.0/24 maxlen: 24
                          78.157.254.0/23 maxlen: 23
                          185.211.164.0/22 maxlen: 22
                          188.191.0.0/20 maxlen: 20
                          188.191.2.0/24 maxlen: 24
                          188.191.3.0/24 maxlen: 24
                          188.191.4.0/24 maxlen: 24
                          188.191.5.0/24 maxlen: 24
                          188.191.6.0/24 maxlen: 24
                          188.191.7.0/24 maxlen: 24
                          188.191.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:63:bf:6f:b4:28:29:fd:75:2f:98:4b:d0:f2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
        Validity
            Not Before: Jan  2 08:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7943e73efc1aaf8ff680b11817f81afe3e8321e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:e3:c6:08:49:62:fd:44:28:f3:bc:f5:d6:
                    e0:df:d9:95:4e:3f:8e:fc:0d:e9:e2:8b:01:d1:7d:
                    40:f0:20:a6:ad:82:c5:21:7b:65:f9:fe:1f:c9:ed:
                    42:9c:96:fd:ce:4a:b9:b9:1c:de:53:90:4b:7b:d3:
                    01:4c:e0:8b:99:e6:04:93:42:8f:c9:4e:ca:f8:ae:
                    e6:e0:db:bb:0b:3b:8b:bb:ea:9a:f5:95:99:96:cd:
                    22:cb:89:d8:76:18:25:6b:19:21:af:e2:60:da:2a:
                    66:13:c3:ec:b0:c5:78:7d:6b:9c:a7:50:b1:72:f9:
                    75:0e:85:bd:83:e7:8f:42:d3:be:6c:23:fd:8c:c4:
                    55:56:e9:08:08:ff:f7:36:4c:07:c1:c8:50:2e:b5:
                    76:fb:2a:04:57:b4:c0:ef:ca:8f:fb:7e:b5:96:8c:
                    32:f7:55:49:f8:d8:13:c5:2a:56:57:56:e7:42:e2:
                    47:81:55:75:65:04:b6:ce:45:b9:42:b8:29:bf:27:
                    c0:0e:23:de:8a:af:ae:4f:46:82:a4:c0:93:85:af:
                    87:13:12:5a:fc:40:6f:bb:fe:07:45:82:e1:cd:24:
                    cd:e5:fa:49:19:65:03:43:ba:f4:b5:b5:54:11:76:
                    cc:b4:ee:2b:f0:23:a7:e5:a1:e9:8f:f9:b2:75:4c:
                    b7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:43:E7:3E:FC:1A:AF:8F:F6:80:B1:18:17:F8:1A:FE:3E:83:21:E9
            X509v3 Authority Key Identifier:
                keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/eUPnPvwar4_2gLEYF_ga_j6DIek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.157.224.0/19
                  185.211.164.0/22
                  188.191.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:cd:3f:7b:c1:4e:3c:55:7b:b4:27:e2:e5:9f:9a:ad:64:
         24:5e:18:0a:54:ff:d7:52:21:b6:06:dd:07:08:f3:e9:49:14:
         5d:5a:39:c3:d3:b4:bb:7a:91:31:0c:e3:7e:25:99:ad:04:02:
         69:7d:42:51:7e:13:df:32:4f:06:d0:a9:5b:2c:ad:d2:76:73:
         57:0c:31:af:f7:99:e8:ac:6d:e0:7d:e6:fe:59:e4:c0:d0:9d:
         fa:80:96:e9:78:3f:89:09:c8:02:57:a6:0b:f7:0a:ba:64:44:
         9b:8e:2d:85:c7:30:90:89:4a:4e:34:02:12:96:26:d6:63:33:
         d1:ba:73:7f:e6:ff:bf:38:c9:cd:b5:df:9e:4f:8a:43:da:e0:
         99:94:f5:ee:8f:99:70:44:42:b0:d6:0c:00:d5:6b:c3:94:a2:
         cc:23:ac:5c:1f:69:40:27:74:d3:9a:bc:46:d1:74:c7:a2:ee:
         62:c6:76:56:84:d6:9e:9d:18:8a:b9:cc:f0:6d:e1:ce:6f:33:
         f5:37:d1:ce:83:d9:cf:bb:53:d4:80:b9:bc:8f:5e:21:11:04:
         5e:14:7f:38:9b:cb:76:ce:9a:67:bf:73:18:41:b0:5a:85:19:
         d6:a7:d3:e9:dd:46:eb:90:6e:d9:96:4d:ff:ed:af:6d:4d:d8:
         46:95:74:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:40:00 2026 by rpki-client