This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/EeGzcFK_vgrG-lbak3s8iHIsBMk.roa
File:                     EeGzcFK_vgrG-lbak3s8iHIsBMk.roa (raw, json)
Hash identifier:          naeuyNRX3zr50oConoDBqcwqCtbzobuOXBOxpr57IKQ=
Subject key identifier:   11:E1:B3:70:52:BF:BE:0A:C6:FA:56:DA:93:7B:3C:88:72:2C:04:C9
Certificate issuer:       /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
Certificate serial:       019B2F3AED9CF233C64E322902D4CAAB4656
Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/EeGzcFK_vgrG-lbak3s8iHIsBMk.roa
Signing time:             Thu 18 Dec 2025 02:12:29 +0000
ROA not before:           Thu 18 Dec 2025 02:12:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12849
IP address blocks:        193.110.180.0/23 maxlen: 24
                          2a14:dc00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2f:3a:ed:9c:f2:33:c6:4e:32:29:02:d4:ca:ab:46:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2
        Validity
            Not Before: Dec 18 02:12:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=11e1b37052bfbe0ac6fa56da937b3c88722c04c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:67:b6:7d:2f:24:54:d5:39:72:d4:f1:64:
                    7b:f7:14:98:ec:31:e5:11:52:58:ae:1c:5e:d2:79:
                    fa:32:22:51:55:fa:ac:ec:69:bc:b8:6a:dc:5a:08:
                    db:68:6f:01:1c:c5:ab:27:9e:27:29:b9:e3:e6:53:
                    ae:ab:13:c2:86:2a:fe:7a:93:27:a5:4c:c0:b3:50:
                    4b:81:14:b9:51:b2:bf:0c:a7:48:3e:8d:3c:d6:2b:
                    98:33:27:47:13:4c:7e:15:de:22:80:75:16:e4:6a:
                    c0:44:2e:3a:05:d9:8d:65:45:37:8a:0d:1d:69:40:
                    60:ba:4b:4f:59:07:32:70:09:ca:40:4e:80:1c:34:
                    ba:9a:af:e1:f0:95:84:0d:d6:f4:11:50:05:d1:a7:
                    ae:89:1f:8e:53:e2:15:09:d4:0b:06:de:f6:60:23:
                    6c:1f:a4:3e:4d:f4:e1:9f:75:44:4f:ae:df:7a:eb:
                    d7:7a:59:c2:ff:8d:b1:9b:ff:a7:5d:29:f8:77:ad:
                    6d:cc:12:17:28:1f:06:37:af:0d:e2:d4:a9:ec:e1:
                    7f:6a:77:6a:9f:7b:e8:6d:15:82:c1:d1:e0:46:59:
                    9d:56:2c:a7:e5:84:26:90:23:5b:eb:23:12:c5:7c:
                    ea:e3:ca:3d:18:ce:4c:dd:92:df:9a:5e:4f:d1:0b:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E1:B3:70:52:BF:BE:0A:C6:FA:56:DA:93:7B:3C:88:72:2C:04:C9
            X509v3 Authority Key Identifier:
                keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/EeGzcFK_vgrG-lbak3s8iHIsBMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.180.0/23
                IPv6:
                  2a14:dc00::/29

    Signature Algorithm: sha256WithRSAEncryption
         6c:35:ad:d6:7b:26:4e:23:e8:5f:c2:de:d0:43:2d:de:1c:e7:
         26:2c:cc:46:ac:7f:1e:66:79:ca:e7:a4:c4:a7:68:89:52:8c:
         4d:5f:fb:81:ea:47:a0:3c:5a:40:f2:fb:17:f8:3e:48:9e:bb:
         57:32:19:e7:bd:69:dc:0a:c9:be:0b:87:d1:6b:f9:b5:26:a6:
         74:7a:84:0b:0d:05:c7:46:76:37:21:83:9d:4e:60:ff:a8:d7:
         f8:93:66:7c:9b:11:97:60:37:05:2f:7e:8e:d0:16:c4:d6:9a:
         cf:a6:ba:a0:b9:f3:31:ed:6d:b6:72:87:08:49:35:c5:7c:66:
         e4:1f:33:60:ac:b7:94:ce:0f:c3:e7:1b:20:07:9b:84:98:1d:
         6c:e7:f3:10:f8:cd:4d:df:02:24:6e:b6:d3:e3:f9:8b:cf:d8:
         00:f8:1f:f0:27:0a:42:be:53:75:2c:9a:27:5e:c7:90:6c:54:
         74:18:22:d9:95:5a:a9:d1:bb:e0:86:96:fb:2e:d9:d5:5e:04:
         2e:42:84:3b:f8:d7:0d:8a:c5:b7:21:7c:9a:61:5d:f8:d8:66:
         4b:34:7b:68:35:db:d8:03:d6:ad:c1:40:fc:71:9d:54:68:ff:
         d7:9f:82:e8:94:bf:b1:0b:a5:0e:70:31:a7:ea:2d:54:d4:d8:
         dd:30:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:34:21 2025 by rpki-client