This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa
File:                     EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (raw, json)
Hash identifier:          2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=
Subject key identifier:   12:F7:B3:25:5E:95:B3:D8:EA:29:E5:1B:25:5C:E9:AB:52:A2:54:35
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       019B76EAE51D129E5F019E75C2F563009C89
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa
Signing time:             Thu 01 Jan 2026 00:17:44 +0000
ROA not before:           Thu 01 Jan 2026 00:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213895
IP address blocks:        103.130.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:e5:1d:12:9e:5f:01:9e:75:c2:f5:63:00:9c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Jan  1 00:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12f7b3255e95b3d8ea29e51b255ce9ab52a25435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:40:91:e6:c9:65:91:52:2c:9d:70:1c:c4:
                    e7:56:e3:fe:c0:34:b1:b8:85:32:51:e8:cf:db:ff:
                    80:f1:3d:29:07:2e:b7:b8:dc:60:2b:ea:3e:c2:d4:
                    67:a4:4c:c4:fa:0d:2b:17:52:05:48:d9:ed:52:e1:
                    6a:c7:78:bd:16:af:09:71:86:85:bf:ec:da:8f:0f:
                    48:ad:3f:b9:ee:2f:4c:02:35:cd:f7:6e:70:61:92:
                    63:83:73:fa:06:f4:60:ae:3d:bf:c2:5f:52:b5:6a:
                    d7:ab:bb:bc:10:e5:80:d4:07:35:63:90:54:9e:f5:
                    86:f0:a4:03:bb:6d:c4:65:b2:d6:12:6f:4b:7e:f6:
                    0a:fe:9b:36:f2:dd:7b:80:aa:1b:37:3e:7d:eb:56:
                    35:e9:4d:e4:4f:90:76:2b:09:54:f0:88:39:43:a6:
                    77:71:c3:68:c1:2b:5c:2a:45:5f:85:5f:03:61:b3:
                    9b:20:87:44:49:5b:fc:8f:32:ac:db:91:a0:ca:dc:
                    31:ef:58:05:27:8a:78:5f:8a:ce:36:d3:59:cc:e5:
                    84:84:ce:8e:e1:92:84:75:42:93:9f:f9:fe:6f:6a:
                    d3:0b:3c:cd:c0:a9:a1:40:5d:b2:77:8e:c1:03:2f:
                    9f:1a:a7:e1:b2:0a:d9:87:de:32:a4:62:f9:0b:c5:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F7:B3:25:5E:95:B3:D8:EA:29:E5:1B:25:5C:E9:AB:52:A2:54:35
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:83:50:a1:5e:21:10:4b:72:99:ae:8a:75:79:90:b8:03:de:
         a8:6c:b6:5c:cb:81:d1:22:3a:d4:80:9b:c0:71:9b:2b:7b:fc:
         d6:ce:24:bb:54:76:f4:ad:86:08:c8:94:c8:03:2d:52:a3:e1:
         2f:07:c7:35:56:ac:3e:8d:61:3f:50:80:a1:32:3c:b0:41:6a:
         66:a7:d7:b4:93:00:01:e9:ec:af:68:04:00:a4:0e:20:cc:22:
         de:e9:47:7f:cc:9c:f8:9b:b6:1d:2b:cd:97:9f:0f:88:6e:28:
         92:bd:84:f0:84:d4:a7:b7:49:54:6f:5f:43:0f:d5:98:83:6f:
         db:b3:60:fb:53:dd:b7:de:3d:dd:41:5f:d6:5b:14:e8:cf:d7:
         a4:7a:27:34:08:a4:2e:3a:d0:93:f4:8b:67:16:dc:99:50:e5:
         43:df:f4:67:d6:31:0b:5e:8e:84:f7:1d:62:8e:df:82:61:c8:
         d7:ca:e5:9a:77:6c:a9:dd:71:f4:8c:d4:dd:5e:99:79:85:15:
         a4:88:a1:92:db:4a:af:bb:e9:f2:94:ee:77:ec:08:f1:11:b9:
         d3:13:5f:cd:1b:90:2c:62:09:ee:07:9f:a3:40:0e:8a:d0:7f:
         b6:1a:73:69:68:9b:13:54:f1:5d:c3:fb:7b:e3:ba:c0:e9:50:
         43:f2:0e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:51:52 2026 by rpki-client