This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/EBeni4pRP0nfIWaoObl7rqIDxP0.roa
File:                     EBeni4pRP0nfIWaoObl7rqIDxP0.roa (raw, json)
Hash identifier:          RB+tAlC3yRIVwKOlg0JxFse1lwSpxsHF8d7G3GqHQUs=
Subject key identifier:   10:17:A7:8B:8A:51:3F:49:DF:21:66:A8:39:B9:7B:AE:A2:03:C4:FD
Certificate issuer:       /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial:       019B77C6ACA51643BDEA64547FDA674B26A2
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/EBeni4pRP0nfIWaoObl7rqIDxP0.roa
Signing time:             Thu 01 Jan 2026 04:17:47 +0000
ROA not before:           Thu 01 Jan 2026 04:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209342
IP address blocks:        185.54.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:ac:a5:16:43:bd:ea:64:54:7f:da:67:4b:26:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
        Validity
            Not Before: Jan  1 04:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1017a78b8a513f49df2166a839b97baea203c4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:3d:47:d2:d9:8e:94:9d:ae:26:1e:e5:48:
                    9c:75:59:af:13:87:ca:0c:76:3b:ce:4e:26:d1:3a:
                    81:18:e4:b3:23:1a:de:93:ad:66:c4:f0:fd:7c:b4:
                    2b:d5:22:64:fa:71:8b:81:1b:a2:fd:76:6e:d4:a0:
                    b1:25:6a:97:e0:4b:a5:10:6b:0e:c6:bb:78:fd:8b:
                    79:ce:d3:f0:5f:a6:07:0a:d1:1e:f8:50:48:f6:a0:
                    12:b8:18:c4:b8:5e:db:a6:67:d3:69:ea:51:77:20:
                    ad:f6:b0:d3:ba:64:76:db:cd:b9:f0:31:01:33:30:
                    ca:02:7f:36:c4:51:7b:a3:9c:00:97:14:10:e2:97:
                    9b:48:5e:88:1b:ae:52:0c:bc:f9:a7:76:b3:88:91:
                    8b:4f:86:bc:e9:26:7c:a4:58:a1:80:b6:60:fa:79:
                    f4:fd:87:13:ed:de:91:4e:fc:cc:52:14:0d:6a:c0:
                    b3:c0:ac:6a:70:2c:f4:b7:70:fb:b5:70:5a:f4:01:
                    7f:59:e2:8d:fb:75:5e:c8:58:99:0d:be:43:e1:05:
                    4a:a7:dd:78:cd:94:c2:b0:95:9d:e7:6e:4a:f4:d1:
                    74:4a:aa:8c:ad:df:57:e6:0b:6d:0a:55:f5:a2:60:
                    b7:8e:c7:16:7a:24:1b:5b:67:5b:d8:86:17:72:9e:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:17:A7:8B:8A:51:3F:49:DF:21:66:A8:39:B9:7B:AE:A2:03:C4:FD
            X509v3 Authority Key Identifier:
                keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/EBeni4pRP0nfIWaoObl7rqIDxP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ff:ad:e2:a7:52:5f:3e:19:2a:93:d3:25:3c:4d:6c:00:86:
         8c:e6:ba:a9:1f:ec:7f:77:a2:67:c9:7f:25:d6:0c:22:72:8b:
         22:88:46:bd:1c:94:17:8b:86:68:d2:bf:5c:fd:ff:81:b2:46:
         fb:cd:26:b5:70:01:71:d9:91:d1:76:3e:b6:3a:e9:fd:f9:b0:
         b4:5b:91:3f:5c:fe:2a:17:8d:a8:5b:6c:28:c0:29:78:cc:36:
         cd:a1:c1:29:6d:21:b1:1d:19:3b:a2:6b:5d:47:d3:3b:4a:0d:
         ea:88:e2:75:74:0d:0a:d0:5e:2b:28:dd:e0:0a:94:64:75:a4:
         a5:21:b7:a7:50:a1:ab:c3:cd:66:b1:6f:4a:c9:4c:06:56:68:
         e3:29:2a:ad:f1:1b:e4:a0:0d:50:c5:21:e7:0f:d5:37:ef:30:
         e3:52:7f:f7:1e:4a:3f:15:d3:34:f3:de:b4:8f:ea:25:44:a0:
         74:05:6a:7f:72:9a:ef:c6:c9:74:35:26:93:8f:79:74:46:19:
         77:58:8d:10:5d:1b:8b:e5:66:b3:c8:ef:0e:6e:eb:f2:a6:40:
         73:ca:da:fa:60:56:6f:4d:35:5a:1c:29:ae:ba:13:66:fd:6d:
         7c:4b:08:77:ca:53:2b:83:67:73:bf:c3:45:2d:9d:86:4c:3f:
         ed:8b:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:22:04 2026 by rpki-client