This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7eayyWBobMBg3bsi34QEWUi-x5c.roa
File:                     7eayyWBobMBg3bsi34QEWUi-x5c.roa (raw, json)
Hash identifier:          tazL+1hrfRj0alWvDnSYhFPZD/lKkCMQxnlJ1esik6c=
Subject key identifier:   ED:E6:B2:C9:60:68:6C:C0:60:DD:BB:22:DF:84:04:59:48:BE:C7:97
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F85039AA0F9AC9AFBA818A8F38ECDBA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7eayyWBobMBg3bsi34QEWUi-x5c.roa
Signing time:             Fri 02 Jan 2026 16:23:02 +0000
ROA not before:           Fri 02 Jan 2026 16:23:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208605
IP address blocks:        93.171.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:03:9a:a0:f9:ac:9a:fb:a8:18:a8:f3:8e:cd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:23:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ede6b2c960686cc060ddbb22df84045948bec797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:d6:dd:70:05:d0:71:9c:70:8f:8e:15:b9:
                    31:21:7c:82:80:6c:cf:5b:57:d7:f2:68:4e:50:47:
                    f8:2a:b4:f6:6b:bf:b1:f8:45:3e:fc:c0:7b:1e:cd:
                    f6:75:35:b9:d2:01:58:4a:a7:1c:11:4d:51:b2:ea:
                    ae:98:fe:f8:b4:d2:d4:23:77:da:4d:16:fb:bf:54:
                    9c:69:70:47:b2:7c:be:c0:de:f5:22:39:85:46:9e:
                    60:f1:90:6c:e0:99:2e:80:6c:1c:3d:8d:8a:40:38:
                    8f:1e:f7:53:84:25:3e:7c:67:9f:02:e9:3b:f5:c9:
                    23:b7:37:04:4d:54:58:53:34:bf:6b:3d:f3:a7:92:
                    e3:1f:2e:8f:62:fa:0c:a3:43:47:b4:f5:ec:de:05:
                    6f:27:b4:16:41:26:1e:1c:6a:24:6a:50:45:10:fd:
                    95:e8:d7:49:e3:6f:10:9f:76:8d:bc:af:21:e6:16:
                    14:a0:c4:99:6d:0f:8f:8f:8e:76:fe:40:45:e8:47:
                    c9:12:fb:05:20:09:95:49:66:81:3b:b3:19:46:1d:
                    ac:fe:e8:6a:32:4d:b4:5d:fa:dc:08:0e:b5:50:2f:
                    5c:1f:66:bb:6f:be:96:18:37:e8:59:c2:aa:2a:09:
                    70:5c:20:d5:ce:f1:f2:f2:61:42:94:b0:40:ef:ef:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E6:B2:C9:60:68:6C:C0:60:DD:BB:22:DF:84:04:59:48:BE:C7:97
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7eayyWBobMBg3bsi34QEWUi-x5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:88:6f:0c:d9:e7:b9:d1:11:f0:db:7c:ef:0d:c8:4d:64:5e:
         c4:ae:51:9a:7e:b4:cb:b1:3d:48:ed:76:8c:80:bd:30:f6:55:
         3d:49:e5:f6:27:bc:6f:3e:77:15:dc:a8:fb:b0:f8:1b:f6:de:
         19:32:15:d9:bb:a3:02:84:cc:aa:46:21:c0:eb:58:11:06:96:
         c7:1a:ae:40:d2:0d:41:54:1b:92:72:16:78:3d:f7:6e:07:e7:
         8e:a4:eb:66:24:d8:50:16:04:31:93:a2:48:55:6c:f6:8c:36:
         e8:80:f9:bc:f5:d2:62:a8:53:f6:f7:18:8b:a1:d0:26:c6:1f:
         bf:b5:c2:6f:75:a7:d6:06:a7:40:64:16:1c:59:ee:5f:c7:6e:
         62:b7:2c:02:d0:15:86:66:87:9b:4f:da:64:c8:47:8f:7d:0e:
         01:ac:ff:03:65:8f:6b:41:b6:32:af:98:ba:d4:7f:39:97:bd:
         42:4d:f1:9c:f3:7d:bd:87:c2:d4:9f:1b:f6:ce:32:e5:62:21:
         66:67:b9:be:d5:ed:f0:fe:6c:63:81:13:f6:03:ff:03:df:eb:
         6e:08:6c:67:13:fb:7a:b9:b5:cb:2e:8a:66:2c:fd:5b:26:10:
         df:50:fb:91:f1:83:68:97:77:c8:a9:88:b2:4c:15:67:15:f0:
         04:ef:cf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:45:52 2026 by rpki-client