This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/eS58SIhIWJ4XFjzjTywByaS6ziM.roa
File:                     eS58SIhIWJ4XFjzjTywByaS6ziM.roa (raw, json)
Hash identifier:          cCeJUNW3K0+YbEiTC0ChM/SJpHm9zAVxO/o92JKxF5E=
Subject key identifier:   79:2E:7C:48:88:48:58:9E:17:16:3C:E3:4F:2C:01:C9:A4:BA:CE:23
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7759066652D2A4A96CDC1568B04D8A6D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/eS58SIhIWJ4XFjzjTywByaS6ziM.roa
Signing time:             Thu 01 Jan 2026 02:18:01 +0000
ROA not before:           Thu 01 Jan 2026 02:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202399
IP address blocks:        85.31.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:06:66:52:d2:a4:a9:6c:dc:15:68:b0:4d:8a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=792e7c488848589e17163ce34f2c01c9a4bace23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1b:07:07:c5:af:dc:b1:c6:56:e7:a5:ba:13:
                    6f:ee:28:1e:8a:cc:a7:34:05:28:86:af:7e:28:7d:
                    81:d2:b7:63:45:f1:8f:9f:6e:fb:1b:d2:bb:46:85:
                    ac:80:28:06:92:4d:89:bd:83:d0:e2:9c:40:e1:dd:
                    40:a6:a8:56:59:72:20:44:b1:4b:1e:9a:44:b0:7f:
                    0a:09:db:a3:f9:98:c6:3d:e1:ca:ef:e5:47:51:c4:
                    25:b4:81:d3:a7:fb:e5:41:e4:11:d2:7c:2a:97:89:
                    5a:ca:6d:56:19:b0:a6:ed:96:73:7d:4e:b8:d2:a2:
                    8b:a7:b1:c8:a4:d2:05:47:9d:2d:b3:e5:fc:a9:72:
                    a6:53:7b:5c:79:66:0a:ac:cf:31:f3:02:df:a2:59:
                    1d:51:e3:4a:94:e8:f7:2e:a9:d2:3d:55:85:8c:9d:
                    70:57:48:f1:95:c1:b6:d5:05:47:f5:76:9e:99:95:
                    cf:e0:6d:46:22:55:97:94:97:09:d0:5a:b6:e4:be:
                    16:4c:3d:af:2b:77:10:b2:29:27:3e:b5:6b:c2:e0:
                    8a:a1:4e:44:e1:c3:82:94:94:35:c7:fd:64:e0:99:
                    d8:d8:cb:f0:9f:50:04:e6:df:2f:69:90:95:c9:da:
                    9b:83:69:1e:23:83:cf:77:c7:3d:18:02:7d:8a:b4:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:7C:48:88:48:58:9E:17:16:3C:E3:4F:2C:01:C9:A4:BA:CE:23
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/eS58SIhIWJ4XFjzjTywByaS6ziM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.31.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:4e:f1:b2:8e:d6:21:92:1c:68:ec:50:c7:7e:1e:02:31:87:
         7b:59:d6:37:0f:3e:a4:af:a1:77:79:3b:2a:4c:18:1c:e3:a0:
         9f:0e:3b:2a:2b:25:3e:ea:3c:3c:1a:fe:12:a7:45:7f:3b:90:
         cc:c6:3d:36:b3:60:ca:70:0f:70:e4:0d:45:5d:2a:58:cc:b4:
         e3:e8:d5:42:75:ed:92:eb:da:ef:3a:07:79:19:e1:b4:36:2b:
         55:a3:10:1c:ca:0e:4a:1f:70:1c:e7:b0:b7:f5:63:d7:5f:3b:
         d3:60:ae:79:22:da:ea:9d:71:e5:0f:0c:b9:23:ae:63:39:2f:
         d3:eb:c2:bc:83:5e:66:c7:bd:56:b2:8f:60:5b:6d:38:5e:1f:
         30:01:ce:63:a3:3c:90:c1:90:b8:95:75:d0:7c:0f:24:f8:73:
         dc:e2:c4:6c:f0:90:f1:c3:ed:9f:27:78:b4:6f:21:eb:2f:67:
         dd:83:57:d6:f8:0a:0a:cb:a5:13:3e:bf:c8:2c:ce:93:9d:9f:
         49:02:3f:88:77:44:a5:28:02:70:9f:11:23:56:ea:e9:fd:0f:
         cf:0c:21:90:ae:96:fb:f4:6c:5b:c2:71:c0:2b:80:04:ea:4a:
         29:a4:44:69:cf:03:55:12:7f:cd:4d:4c:3a:b1:09:f7:67:79:
         b4:dc:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:36 2026 by rpki-client