This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/eVmQ8FSe8lNxuKwOn_nW2JR2yyA.roa
File:                     eVmQ8FSe8lNxuKwOn_nW2JR2yyA.roa (raw, json)
Hash identifier:          FpdqbdBj0pjjZR67UoCvnKhEhOtiPNxEJV1VXUIHPLk=
Subject key identifier:   79:59:90:F0:54:9E:F2:53:71:B8:AC:0E:9F:F9:D6:D8:94:76:CB:20
Certificate issuer:       /CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
Certificate serial:       019B7F8327B2B3823EA6AE1783D3601ABE12
Authority key identifier: D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/eVmQ8FSe8lNxuKwOn_nW2JR2yyA.roa
Signing time:             Fri 02 Jan 2026 16:21:00 +0000
ROA not before:           Fri 02 Jan 2026 16:21:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205471
IP address blocks:        185.69.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:27:b2:b3:82:3e:a6:ae:17:83:d3:60:1a:be:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f9fa7b944f7e7c60d73ef10b776fc27995a4ed
        Validity
            Not Before: Jan  2 16:21:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=795990f0549ef25371b8ac0e9ff9d6d89476cb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:26:ba:54:9c:24:94:cd:72:e3:45:da:37:
                    71:9f:0f:e6:a8:26:0a:a6:4b:a0:96:78:9b:46:b1:
                    fb:15:82:8b:a8:13:12:f9:71:d9:31:c8:20:dd:06:
                    be:be:15:a9:02:10:a8:83:c8:4d:32:fe:6d:e1:7b:
                    e4:0f:64:e2:e7:71:ee:9d:a1:4a:66:b8:93:58:10:
                    11:b0:b8:da:c9:04:02:e5:48:14:58:e4:14:cc:3f:
                    04:85:5e:8c:af:7e:97:5a:19:8c:1b:d6:e0:eb:02:
                    84:15:63:72:c2:52:50:53:88:d3:4e:d0:45:34:2f:
                    90:d4:9f:c8:a9:31:9e:43:89:3e:cd:df:68:5a:f0:
                    78:00:ae:6f:1d:f0:99:8c:92:d0:e2:5c:f3:00:66:
                    28:e8:44:39:1c:38:6d:40:eb:8c:f0:33:e9:c0:08:
                    2c:79:5d:84:08:66:73:9d:da:b0:75:97:43:83:2c:
                    1d:36:23:c5:3d:9d:7a:b8:46:89:34:a5:10:88:b3:
                    53:de:66:f5:cf:37:bf:ae:b5:c3:19:0b:08:95:0a:
                    1f:44:95:f0:5e:43:b0:97:c8:8d:5e:25:59:44:db:
                    c2:6e:6c:7d:85:f3:bf:9c:58:26:46:0b:e4:e6:38:
                    bb:ab:34:75:38:70:8c:83:5d:e1:98:74:e8:46:0c:
                    9c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:90:F0:54:9E:F2:53:71:B8:AC:0E:9F:F9:D6:D8:94:76:CB:20
            X509v3 Authority Key Identifier:
                keyid:D9:F9:FA:7B:94:4F:7E:7C:60:D7:3E:F1:0B:77:6F:C2:79:95:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fn6e5RPfnxg1z7xC3dvwnmVpO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/eVmQ8FSe8lNxuKwOn_nW2JR2yyA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/2fn6e5RPfnxg1z7xC3dvwnmVpO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ab:52:38:c3:c2:be:44:e7:9e:46:b4:3d:4d:b9:e0:72:93:
         31:47:c2:21:97:ae:9d:e2:f1:2d:5c:cd:cf:36:5c:df:61:c0:
         8f:77:72:f3:6f:14:39:db:4a:03:b9:58:c8:92:df:70:f8:71:
         bb:a9:9b:33:d9:e2:b3:4d:43:9a:ad:52:59:fb:94:c1:99:87:
         88:90:21:83:87:0e:31:4c:c2:42:18:ec:b6:a8:15:5b:13:eb:
         be:91:eb:e4:39:0e:76:f2:c1:4d:e4:e1:f6:0c:85:32:d6:8c:
         9c:ae:3a:43:f0:e1:f2:6d:5a:18:ce:0d:2a:f0:ed:3c:e6:24:
         52:76:90:2b:9b:d7:07:6d:9d:e7:04:b5:d8:de:45:6a:c8:6a:
         83:34:b7:a9:26:4e:bc:9e:fa:61:99:4f:ca:81:4b:4c:55:1a:
         97:5d:74:9e:72:c8:e6:37:20:da:dc:3b:c5:c3:ca:61:ee:66:
         36:32:05:17:86:89:8d:02:6d:fe:16:c6:2f:1a:80:66:13:03:
         c0:74:f0:08:f9:53:6f:65:58:15:59:47:31:ea:95:7a:e2:7a:
         c7:3f:74:b7:2e:3b:b8:0b:3c:60:6f:d2:b8:53:05:79:00:98:
         8f:e1:8f:8f:24:fa:67:9a:4d:19:9d:77:7f:27:32:6a:83:89:
         fc:db:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:30 2026 by rpki-client