This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/E_XmM5IBFyFELEnknKVAb_189qw.roa
File:                     E_XmM5IBFyFELEnknKVAb_189qw.roa (raw, json)
Hash identifier:          Mlub1KTpnHaSVLTaB/n4LoTON1L2ATvKiA1EUAmQpUg=
Subject key identifier:   13:F5:E6:33:92:01:17:21:44:2C:49:E4:9C:A5:40:6F:FD:7C:F6:AC
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       019B76EB3AB82D3ECE5076EC1E76E0EDE250
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/E_XmM5IBFyFELEnknKVAb_189qw.roa
Signing time:             Thu 01 Jan 2026 00:18:05 +0000
ROA not before:           Thu 01 Jan 2026 00:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49825
IP address blocks:        84.23.50.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:3a:b8:2d:3e:ce:50:76:ec:1e:76:e0:ed:e2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Jan  1 00:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13f5e63392011721442c49e49ca5406ffd7cf6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:54:54:04:9a:b9:01:c7:0a:8d:0d:18:19:
                    9c:9e:56:35:98:32:40:99:a8:e5:00:ee:5a:3a:dd:
                    42:94:84:ee:b1:6f:fa:d5:8c:10:e2:4e:41:a6:46:
                    6c:05:33:b5:04:47:eb:ae:60:e5:d2:b5:27:05:da:
                    eb:b9:22:66:ae:11:fa:74:d1:44:97:f6:ae:74:ec:
                    f6:8e:14:37:9c:5c:f1:de:ea:4b:b5:36:a5:32:d4:
                    e0:23:34:48:f8:cf:61:c9:7b:24:db:b8:bd:8a:a5:
                    d4:6b:fe:1e:37:6b:e7:a1:6d:6f:d6:a2:74:9d:59:
                    71:aa:8c:53:61:72:c2:25:65:25:67:bf:ed:d7:e8:
                    79:20:36:29:4b:ec:e6:32:55:63:cb:be:fd:53:9e:
                    66:c0:ef:bd:8d:30:98:5f:ab:5f:df:e9:ae:2b:de:
                    ad:64:25:07:9b:a5:f5:73:a6:1f:b0:70:2c:f0:0f:
                    50:34:d3:6c:ed:d7:d0:5e:43:74:04:6f:ba:71:0d:
                    dd:c9:de:de:6a:ea:b4:95:b6:08:96:d6:ad:d9:b2:
                    63:4f:23:06:9a:cb:4a:ec:9f:2a:ec:bb:56:29:e8:
                    04:e8:7e:67:3b:2b:68:95:84:98:75:c8:14:65:22:
                    97:6a:b7:37:99:a4:39:cf:8a:a9:df:9d:af:1d:8b:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F5:E6:33:92:01:17:21:44:2C:49:E4:9C:A5:40:6F:FD:7C:F6:AC
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/E_XmM5IBFyFELEnknKVAb_189qw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.23.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:fc:1c:9a:7b:17:73:57:ee:e4:2c:58:18:2a:59:19:ee:04:
         fb:bc:5d:7a:4e:86:16:66:27:c6:00:71:0e:a9:05:33:03:92:
         17:1c:39:47:15:14:1c:38:d2:79:62:d3:bd:20:4b:f3:7c:d0:
         64:fb:d1:58:ed:aa:d4:44:81:83:d9:83:c9:9a:04:c7:5d:bf:
         39:99:7a:18:7c:84:a2:33:27:e8:fd:96:b1:c2:cd:3d:ab:e5:
         b2:df:d6:f0:dc:97:cc:fa:1e:15:33:41:cd:5e:c2:57:63:f3:
         97:62:14:a0:17:be:8b:58:27:b5:4d:54:f5:3d:ab:98:dd:2e:
         68:76:0a:51:05:af:bd:f8:c7:f9:f2:4e:d6:32:7c:0f:a2:3f:
         ad:9b:e1:4d:fd:52:1e:54:c9:fb:7c:71:de:f5:32:47:bd:38:
         2d:8a:24:a3:74:6e:08:e6:7a:29:d0:af:c2:3f:ee:64:4c:85:
         1a:83:7e:65:6b:3a:40:b5:02:68:7f:68:22:9c:93:48:96:13:
         03:0f:23:c0:a3:de:af:b3:50:e0:6e:58:83:07:52:c5:aa:f5:
         f3:f1:97:d6:2f:bc:81:ef:ec:3a:57:f7:9f:a3:d1:f5:c0:db:
         3e:59:50:1d:00:c7:e4:75:c7:47:0c:64:45:4c:1c:19:66:d8:
         19:7b:75:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26zq4LT7OUHbsHnbg7eJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMGJjZGVlOGNlODM5YzRkMjA0MTNjODYyNDIzY2NhMDRm
ZGM2MGEwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2Y1ZTYzMzkyMDExNzIxNDQyYzQ5ZTQ5Y2E1NDA2ZmZkN2NmNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOZUVASauQHHCo0NGBmcnlY1mDJA
majlAO5aOt1ClITusW/61YwQ4k5BpkZsBTO1BEfrrmDl0rUnBdrruSJmrhH6dNFE
l/audOz2jhQ3nFzx3upLtTalMtTgIzRI+M9hyXsk27i9iqXUa/4eN2vnoW1v1qJ0
nVlxqoxTYXLCJWUlZ7/t1+h5IDYpS+zmMlVjy779U55mwO+9jTCYX6tf3+muK96t
ZCUHm6X1c6YfsHAs8A9QNNNs7dfQXkN0BG+6cQ3dyd7eauq0lbYIltat2bJjTyMG
mstK7J8q7LtWKegE6H5nOytolYSYdcgUZSKXarc3maQ5z4qp352vHYtcyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBP15jOSARchRCxJ5JylQG/9fPasMB8GA1UdIwQY
MBaAFHoLze6M6DnE0gQTyGJCPMoE/cYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMt
NGRlZjU3MzY1MTY5LzEvRV9YbU01SUJGeUZFTEVua25LVkFiXzE4OXF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMtNGRlZjU3MzY1MTY5
LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVBcyMA0G
CSqGSIb3DQEBCwUAA4IBAQA7/ByaexdzV+7kLFgYKlkZ7gT7vF16ToYWZifGAHEO
qQUzA5IXHDlHFRQcONJ5YtO9IEvzfNBk+9FY7arURIGD2YPJmgTHXb85mXoYfISi
Myfo/Zaxws09q+Wy39bw3JfM+h4VM0HNXsJXY/OXYhSgF76LWCe1TVT1PauY3S5o
dgpRBa+9+Mf58k7WMnwPoj+tm+FN/VIeVMn7fHHe9TJHvTgtiiSjdG4I5nop0K/C
P+5kTIUag35lazpAtQJof2ginJNIlhMDDyPAo96vs1DgbliDB1LFqvXz8ZfWL7yB
7+w6V/efo9H1wNs+WVAdAMfkdcdHDGRFTBwZZtgZe3XU
-----END CERTIFICATE-----
Generated at Thu Jan 1 12:46:57 2026 by rpki-client