This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/SEhILHygTvrckViFuTbzVqD8wFo.roa
File:                     SEhILHygTvrckViFuTbzVqD8wFo.roa (raw, json)
Hash identifier:          YokScjyaRbEORXXXuZbWxrI40xCQFe4BiYE811dsghU=
Subject key identifier:   48:48:48:2C:7C:A0:4E:FA:DC:91:58:85:B9:36:F3:56:A0:FC:C0:5A
Certificate issuer:       /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial:       019B77C6A7334C0525B500B644C4BC09BF8D
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/SEhILHygTvrckViFuTbzVqD8wFo.roa
Signing time:             Thu 01 Jan 2026 04:17:46 +0000
ROA not before:           Thu 01 Jan 2026 04:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47292
IP address blocks:        37.157.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:a7:33:4c:05:25:b5:00:b6:44:c4:bc:09:bf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
        Validity
            Not Before: Jan  1 04:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4848482c7ca04efadc915885b936f356a0fcc05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:41:a6:94:f2:63:b2:e5:93:5d:f3:7a:a3:
                    5c:e7:da:21:c6:0e:9c:68:cf:a3:8c:44:60:cf:af:
                    b1:e1:09:27:87:9c:c4:29:e2:20:ef:d6:07:c1:43:
                    28:b7:03:ed:09:67:61:4a:a5:26:c8:ee:c6:d2:1e:
                    62:6a:7e:74:2c:7e:99:69:a7:d8:fd:a1:e2:6d:8e:
                    f4:20:9b:b9:6b:50:75:0a:e9:b8:36:23:2a:72:fb:
                    69:19:69:74:fc:b0:d8:86:15:20:14:60:c4:fa:ad:
                    f8:98:46:c3:1a:0f:06:50:3f:9b:f5:64:39:81:a3:
                    f3:e0:6e:f9:fb:c7:01:c1:f6:33:48:bf:53:96:8c:
                    48:31:6a:33:47:9e:cc:d8:9c:26:e8:33:65:63:97:
                    64:ca:da:49:f3:78:65:61:e2:f0:50:df:ea:61:d6:
                    f7:0b:0c:91:61:a9:41:6c:2a:d5:30:9c:1e:aa:63:
                    32:04:1d:1f:7e:f9:f1:01:43:d3:95:72:c1:82:c1:
                    d8:28:97:4c:d9:57:8d:04:a2:45:4b:57:91:f2:c5:
                    51:47:77:48:48:bc:09:c9:3c:67:13:71:9a:07:b4:
                    a6:f8:7f:15:bd:74:87:ff:65:38:8d:7f:c1:c8:8c:
                    4b:00:9c:c1:4c:39:a1:3a:01:2e:ca:42:fb:8f:b8:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:48:48:2C:7C:A0:4E:FA:DC:91:58:85:B9:36:F3:56:A0:FC:C0:5A
            X509v3 Authority Key Identifier:
                keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/SEhILHygTvrckViFuTbzVqD8wFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.157.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:69:d1:c2:63:9a:27:07:92:31:7e:e9:48:02:38:4b:f9:
         c8:1f:51:3c:fe:d1:ff:ed:fd:3a:bb:56:62:69:80:ff:f1:18:
         fe:72:42:8a:63:34:b4:f8:4e:ad:21:69:93:64:25:ba:1a:1f:
         26:63:d0:7f:3c:db:dc:57:82:79:6f:59:fc:a3:bc:26:65:dd:
         73:f1:7e:dc:8c:04:33:59:b4:70:bf:0b:b6:76:7b:e8:1a:34:
         74:aa:69:6c:3e:82:44:5b:df:e9:b1:58:ff:56:7a:65:96:cf:
         47:c6:c6:5d:58:d7:1b:d7:f3:87:a5:63:93:1d:33:79:fa:96:
         91:54:6b:1c:6e:bd:4e:bf:58:79:04:85:04:da:62:25:b1:e7:
         43:fa:a4:7a:71:11:2c:53:3b:29:24:ca:6d:e7:39:c0:7e:10:
         0e:56:c9:66:90:95:bd:78:d0:d1:f0:fc:be:f2:38:1d:eb:fe:
         b8:8a:7b:4e:da:a2:e0:1a:09:c4:3e:de:0a:21:9f:2a:94:34:
         e3:fd:87:74:a5:9e:94:5b:08:3b:71:43:f1:81:10:a4:2d:16:
         b1:e7:16:b6:78:80:a1:f8:3d:ba:d9:77:4a:4f:f1:83:f6:f2:
         f5:88:f7:1b:ce:12:72:88:22:95:fc:2b:a3:48:0b:92:24:a1:
         21:3f:f2:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xqczTAUltQC2RMS8Cb+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjlhMTU3ZTEyYTJlZjcxN2QxMzIzMWFmMDZmZDg1NDU0
YjMxNTEwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODQ4NDgyYzdjYTA0ZWZhZGM5MTU4ODViOTM2ZjM1NmEwZmNjMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseJBppTyY7Llk13zeqNc59ohxg6c
aM+jjERgz6+x4Qknh5zEKeIg79YHwUMotwPtCWdhSqUmyO7G0h5ian50LH6ZaafY
/aHibY70IJu5a1B1Cum4NiMqcvtpGWl0/LDYhhUgFGDE+q34mEbDGg8GUD+b9WQ5
gaPz4G75+8cBwfYzSL9TloxIMWozR57M2Jwm6DNlY5dkytpJ83hlYeLwUN/qYdb3
CwyRYalBbCrVMJweqmMyBB0ffvnxAUPTlXLBgsHYKJdM2VeNBKJFS1eR8sVRR3dI
SLwJyTxnE3GaB7Sm+H8VvXSH/2U4jX/ByIxLAJzBTDmhOgEuykL7j7gLcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhISCx8oE763JFYhbk281ag/MBaMB8GA1UdIwQY
MBaAFOq5oVfhKi73F9EyMa8G/YVFSzFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQt
ODU3NzEyNzIwYTM1LzEvU0VoSUxIeWdUdnJja1ZpRnVUYnpWcUQ4d0ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQtODU3NzEyNzIwYTM1
LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJZ0AMA0G
CSqGSIb3DQEBCwUAA4IBAQBKnGnRwmOaJweSMX7pSAI4S/nIH1E8/tH/7f06u1Zi
aYD/8Rj+ckKKYzS0+E6tIWmTZCW6Gh8mY9B/PNvcV4J5b1n8o7wmZd1z8X7cjAQz
WbRwvwu2dnvoGjR0qmlsPoJEW9/psVj/Vnplls9HxsZdWNcb1/OHpWOTHTN5+paR
VGscbr1Ov1h5BIUE2mIlsedD+qR6cREsUzspJMpt5znAfhAOVslmkJW9eNDR8Py+
8jgd6/64intO2qLgGgnEPt4KIZ8qlDTj/Yd0pZ6UWwg7cUPxgRCkLRax5xa2eICh
+D262XdKT/GD9vL1iPcbzhJyiCKV/CujSAuSJKEhP/Ln
-----END CERTIFICATE-----
Generated at Thu Jan 1 15:53:52 2026 by rpki-client