This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/eTMwYXEU18649L8hIZfY5-esqZ4.roa
File:                     eTMwYXEU18649L8hIZfY5-esqZ4.roa (raw, json)
Hash identifier:          k/4i/a9Iw12pbxtRFEJ28+gA1SHnDyMvm6bPTt/tfsk=
Subject key identifier:   79:33:30:61:71:14:D7:CE:B8:F4:BF:21:21:97:D8:E7:E7:AC:A9:9E
Certificate issuer:       /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial:       019B7B3582F1CF55FA9D4725666A7453E656
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/eTMwYXEU18649L8hIZfY5-esqZ4.roa
Signing time:             Thu 01 Jan 2026 20:17:43 +0000
ROA not before:           Thu 01 Jan 2026 20:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30848
IP address blocks:        94.185.124.0/23 maxlen: 23
                          94.185.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:82:f1:cf:55:fa:9d:47:25:66:6a:74:53:e6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
        Validity
            Not Before: Jan  1 20:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=793330617114d7ceb8f4bf212197d8e7e7aca99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:d2:ae:54:e8:57:a1:c5:dd:b2:26:48:1e:
                    f9:5d:58:0b:9e:fa:7c:e3:5e:ec:1f:95:bc:fb:82:
                    39:62:5d:77:a4:e3:fe:06:35:53:91:45:79:94:9f:
                    7b:72:5d:5e:b0:0a:e7:6f:ea:ff:f2:3b:94:9b:e8:
                    eb:73:bc:ce:fc:e0:41:55:67:b8:72:c3:22:fc:27:
                    25:e7:cd:23:04:51:6b:86:05:15:7a:82:58:39:68:
                    bc:df:ff:2c:25:98:13:50:30:2a:d9:fc:83:a5:60:
                    ad:52:5a:6e:2e:cc:0f:41:43:0d:ac:ee:c1:a6:c3:
                    a6:9c:9c:48:93:57:69:45:72:85:08:df:33:30:77:
                    1c:ca:40:35:a0:ea:bc:18:3e:b1:c3:43:39:bc:94:
                    b4:19:db:74:21:53:09:6b:6b:4c:5a:57:d1:fb:4d:
                    71:f8:cf:4b:01:e1:fa:05:b6:ca:a3:60:0c:fc:6b:
                    2b:9c:00:2f:38:47:fc:f0:1c:16:68:6a:ba:20:e7:
                    6c:ae:f7:b2:3f:f6:a3:02:c1:6e:22:ec:ad:9d:6b:
                    9a:97:a8:ae:2a:92:5b:cf:b9:87:0a:2d:96:55:26:
                    26:00:58:d7:56:36:32:37:78:35:16:c0:61:da:32:
                    b4:68:18:97:9d:62:5b:42:e0:24:d6:48:fa:47:95:
                    9e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:33:30:61:71:14:D7:CE:B8:F4:BF:21:21:97:D8:E7:E7:AC:A9:9E
            X509v3 Authority Key Identifier:
                keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/eTMwYXEU18649L8hIZfY5-esqZ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.185.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:20:7c:60:ea:e6:74:10:99:71:4d:29:e6:8c:ac:e7:18:d1:
         02:32:df:8a:b0:23:28:da:9b:6f:39:d1:9c:d6:7e:2c:18:da:
         b0:e2:bc:b7:47:48:4e:1b:c8:08:51:9b:18:bf:52:39:33:a9:
         fd:94:0f:be:b6:63:32:b1:11:cc:cd:96:83:c6:fb:d1:b8:eb:
         9e:49:ba:89:30:0b:7c:80:52:c8:37:b8:5a:b1:bf:53:bb:f6:
         7c:70:7c:61:13:cc:dc:06:3a:15:1b:6f:4a:54:69:2e:ed:03:
         28:c1:63:7b:00:1b:c7:ed:8d:45:81:21:0a:4e:fe:a9:94:6e:
         2d:f5:13:fb:e0:4c:97:da:d9:3d:29:09:80:e6:d7:a6:5e:3e:
         36:79:e9:12:35:62:73:f2:9f:74:a7:a9:df:74:40:0d:c8:80:
         a4:32:7c:39:10:2c:86:f2:88:1e:b4:9c:f4:4d:7b:94:9d:0d:
         3a:18:92:19:c1:48:aa:c7:bd:09:52:cf:b8:5e:e9:12:3d:45:
         49:b8:ee:eb:79:4b:72:49:45:2b:6c:9e:fb:91:8d:a0:95:99:
         35:f5:12:3d:db:c0:59:ec:4d:d4:58:d2:ad:b0:22:0a:25:ea:
         09:c3:fe:be:23:42:70:3b:cb:6a:81:61:cf:c9:0b:1f:50:a8:
         e9:25:91:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:04 2026 by rpki-client