This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa
File:                     EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (raw, json)
Hash identifier:          BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=
Subject key identifier:   10:40:6E:E6:B4:3C:84:EE:71:37:F4:47:27:1F:E1:16:83:B7:A9:2D
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       019B7835009658E0FE9ECE1B30878A4815B6
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa
Signing time:             Thu 01 Jan 2026 06:18:17 +0000
ROA not before:           Thu 01 Jan 2026 06:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3276
IP address blocks:        80.79.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Jan 2026 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:00:96:58:e0:fe:9e:ce:1b:30:87:8a:48:15:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Jan  1 06:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=10406ee6b43c84ee7137f447271fe11683b7a92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f0:d2:ab:eb:3b:29:2c:7c:06:18:94:36:9f:
                    c4:7c:7b:4f:57:bc:20:e2:9e:20:25:0a:68:49:0d:
                    ec:b7:cf:c2:92:dc:19:ff:93:ad:6c:e9:70:bc:b4:
                    d1:a9:25:b4:82:5b:36:f6:34:ed:e4:02:c2:5a:aa:
                    70:d0:a1:3a:43:c4:b1:13:f0:f7:f0:2c:e7:66:61:
                    a9:b3:b8:18:06:73:a8:4b:d5:6c:a6:cc:da:d5:7a:
                    11:03:1f:cf:20:47:29:3d:4e:bc:7f:b3:28:54:69:
                    5b:c2:16:c0:07:c6:ec:72:38:32:7b:c1:a2:58:28:
                    2f:aa:a3:92:8b:35:7f:7c:83:ed:d2:3e:cf:b5:f9:
                    88:e8:d4:76:65:0f:b1:70:3b:6f:5f:26:b2:9e:31:
                    a5:33:db:7b:35:3b:72:0f:71:4b:e5:29:08:fa:f7:
                    7d:83:d6:46:6d:a5:dc:2e:2a:4e:ed:be:c3:06:06:
                    2d:6e:e6:63:e0:e0:41:5e:06:fe:5b:b8:bf:aa:19:
                    f2:92:19:4e:56:14:31:8d:65:17:25:90:7a:de:d6:
                    56:6b:77:15:e5:c8:df:fd:38:e0:b2:77:5c:fc:1b:
                    a3:3c:ac:e4:e0:7e:51:b6:b4:d4:4d:7a:38:03:11:
                    be:4d:70:6a:e8:15:8a:5f:61:94:01:ba:04:ef:96:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:40:6E:E6:B4:3C:84:EE:71:37:F4:47:27:1F:E1:16:83:B7:A9:2D
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.79.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:8a:9d:9d:80:f8:73:64:26:2c:9d:24:64:fe:3d:e0:5f:
         5b:3c:5c:fa:39:4c:64:16:28:d9:29:f7:21:9a:fe:2f:72:69:
         62:57:a9:6e:df:70:41:4d:48:91:88:58:52:fe:43:fd:84:ae:
         69:53:3f:00:1d:5a:58:d9:2c:7e:32:26:82:b0:8b:be:f9:28:
         87:44:fd:d9:4c:85:a1:22:4d:40:13:27:89:04:68:ba:28:9d:
         3f:c9:e9:b9:95:09:9f:4e:fa:59:50:71:1b:7a:6a:4e:fe:72:
         21:9b:90:aa:e6:98:8b:45:80:e7:f1:3f:80:1f:0c:5d:86:c2:
         af:07:a8:1c:ea:94:34:49:70:13:66:f4:2b:b2:4d:72:30:66:
         05:fd:a6:9a:1b:6f:41:ef:e2:6a:64:aa:ec:c5:a9:6b:69:e4:
         72:71:9f:b2:94:85:f0:fd:89:0c:e6:1e:c7:7b:15:30:c9:f4:
         64:03:81:de:be:28:fa:1e:cf:5f:aa:be:99:e0:3c:8b:ca:a9:
         c5:c5:03:e1:df:03:3e:58:83:16:f5:e7:f7:38:3f:98:f4:99:
         39:b5:e1:b8:d7:27:4b:e6:2c:13:66:e7:11:ad:a8:e2:58:a7:
         94:16:f3:52:f6:fb:25:0c:da:3a:e7:6a:6a:f7:21:aa:42:81:
         8a:0c:76:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 07:15:35 2026 by rpki-client