This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/EgV1knG2q0851YdjwI9ZnxFusW8.roa
File:                     EgV1knG2q0851YdjwI9ZnxFusW8.roa (raw, json)
Hash identifier:          TpL3ZZSNUe8HCulV7DZciQFP376Z50w7pD7Ztv0vOQ0=
Subject key identifier:   12:05:75:92:71:B6:AB:4F:39:D5:87:63:C0:8F:59:9F:11:6E:B1:6F
Certificate issuer:       /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial:       019B797E05B09696DDC80800C1E4A427BE78
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/EgV1knG2q0851YdjwI9ZnxFusW8.roa
Signing time:             Thu 01 Jan 2026 12:17:40 +0000
ROA not before:           Thu 01 Jan 2026 12:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31276
IP address blocks:        45.91.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 00:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:05:b0:96:96:dd:c8:08:00:c1:e4:a4:27:be:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
        Validity
            Not Before: Jan  1 12:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1205759271b6ab4f39d58763c08f599f116eb16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:bd:fa:68:50:79:a9:40:60:ee:68:1a:75:
                    ba:8f:38:26:3b:97:ae:d1:4f:6e:0f:9b:a4:5a:1f:
                    ab:6d:60:17:d2:e6:1f:64:cb:e3:65:8b:24:14:80:
                    bb:29:fc:d6:7a:51:18:3b:37:68:8b:7b:82:c8:32:
                    86:9c:50:5a:fb:0f:73:d3:b5:03:db:a7:39:17:bf:
                    3a:88:51:9d:de:6e:d9:fb:c8:7f:21:cb:f7:f6:90:
                    db:72:38:1d:fe:06:4f:42:c8:32:c9:99:86:3d:ab:
                    2f:7b:e7:51:40:cd:6c:f4:94:73:bc:dc:60:f3:e5:
                    cf:9e:83:e3:eb:67:70:89:27:e1:66:4e:5f:c9:b5:
                    4d:dc:bb:80:12:a5:a9:d5:1d:14:e9:6d:38:2e:f4:
                    75:14:b2:de:4c:87:bd:48:22:e6:e8:72:4b:5a:17:
                    06:bd:ba:ac:53:c6:3f:3d:f3:e1:64:4a:1d:dd:16:
                    c6:3f:6d:f1:79:62:ce:08:c4:d4:0e:89:30:44:12:
                    08:3a:fb:1e:80:55:49:5f:ef:f8:48:3c:8e:2d:61:
                    ee:c8:5f:3c:fa:4c:fb:14:c2:d0:8d:db:11:6b:26:
                    8d:19:a3:15:d7:2c:2f:df:cc:3d:9f:be:ee:51:bd:
                    61:ac:fd:74:b6:34:1e:da:03:80:44:bb:e8:9f:31:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:05:75:92:71:B6:AB:4F:39:D5:87:63:C0:8F:59:9F:11:6E:B1:6F
            X509v3 Authority Key Identifier:
                keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/EgV1knG2q0851YdjwI9ZnxFusW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:fa:5b:84:3e:2f:d7:7e:c0:da:da:f7:c6:bf:80:d2:79:
         37:05:a7:43:67:8f:be:95:77:8f:46:1b:3c:27:44:7d:bc:69:
         e5:90:71:fa:9b:fc:99:74:df:de:3d:6d:b9:93:91:07:82:c5:
         66:60:3e:cc:7e:c7:48:df:29:8d:53:a8:39:06:cc:da:fa:81:
         68:27:fe:fc:e8:c4:b7:9f:6f:7d:ce:85:67:e8:b4:6e:f4:be:
         d8:07:1a:a2:39:bd:bc:5a:63:dd:fb:76:f2:d9:55:35:44:bd:
         b7:8d:57:00:bf:1e:7e:69:72:7d:ed:73:cf:51:4c:93:e7:84:
         30:46:82:ee:ef:14:eb:9d:88:68:bf:4a:fb:b2:37:48:1e:db:
         11:a6:63:0d:f8:6a:9a:69:9f:00:83:e9:76:62:a6:5b:93:e5:
         36:82:2f:5e:a5:18:9f:44:ee:33:e9:59:f6:2c:f4:2f:5c:d8:
         26:99:3f:7b:1d:92:7a:2e:8c:e0:93:db:bc:65:14:91:8b:a1:
         7a:9b:e2:e8:37:89:f6:9b:0c:cc:12:40:89:3f:ef:a8:7d:10:
         a9:39:67:39:30:43:89:17:c9:66:65:b4:13:e3:ef:77:1d:f7:
         f0:8c:a7:f6:2f:a8:c0:4b:42:dd:98:74:4f:77:5f:de:c9:53:
         a3:7e:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 08:47:03 2026 by rpki-client