This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/2idL5V6crsG-My5eHFYCoqPZBJc.roa
File:                     2idL5V6crsG-My5eHFYCoqPZBJc.roa (raw, json)
Hash identifier:          vaSZEhw4St7LiPuZBY3Vs8p+WLXNvJluMQ/DQ6b31Cg=
Subject key identifier:   DA:27:4B:E5:5E:9C:AE:C1:BE:33:2E:5E:1C:56:02:A2:A3:D9:04:97
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       019B7EA6F316208512A49E3421392597269F
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/2idL5V6crsG-My5eHFYCoqPZBJc.roa
Signing time:             Fri 02 Jan 2026 12:20:29 +0000
ROA not before:           Fri 02 Jan 2026 12:20:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208041
IP address blocks:        93.159.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:f3:16:20:85:12:a4:9e:34:21:39:25:97:26:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  2 12:20:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=da274be55e9caec1be332e5e1c5602a2a3d90497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:57:a9:bb:d4:02:b1:58:8d:5f:fa:99:2c:
                    63:10:c2:34:01:bf:36:1b:de:10:96:86:cf:ef:5d:
                    d3:dd:3f:f0:b4:13:d1:f2:1d:5d:1d:f6:db:fc:23:
                    c0:87:fc:73:f5:ed:7f:ee:13:6f:c1:ee:2d:95:a8:
                    7e:a6:8c:6e:b0:c1:17:28:9b:81:9e:04:5b:0b:65:
                    90:9e:c5:5f:07:80:bd:49:7b:ff:bf:97:65:97:4d:
                    7d:b5:90:08:d2:94:e7:d0:ae:80:ef:d7:ec:5c:79:
                    c5:03:04:93:07:fb:b7:7b:2c:ac:e3:db:74:75:1f:
                    f4:96:62:1b:0c:cd:d1:e8:ce:7b:3e:0b:f9:7a:04:
                    3f:36:0c:39:2f:bd:74:8a:57:bb:66:9f:02:28:7d:
                    7a:4f:dc:cf:1a:39:94:7c:bc:5c:c9:82:d4:95:2d:
                    02:1f:6e:28:4c:9c:e9:bb:dc:62:62:b7:69:69:3e:
                    00:27:6e:b9:4f:63:c8:cc:93:47:9d:99:03:cf:f8:
                    9e:7c:6c:71:5b:d7:1f:53:59:f5:ec:ce:02:1e:b4:
                    84:59:91:2c:66:3f:0a:39:ff:cd:9d:1b:9a:b3:0d:
                    90:32:6d:87:8f:56:55:ad:51:60:dd:06:ea:38:da:
                    25:f6:ca:83:8e:0f:77:8a:04:3e:b3:97:7d:78:06:
                    00:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:27:4B:E5:5E:9C:AE:C1:BE:33:2E:5E:1C:56:02:A2:A3:D9:04:97
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/2idL5V6crsG-My5eHFYCoqPZBJc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:94:13:b6:b2:5f:0d:00:ca:70:10:29:f1:e5:6b:43:32:f5:
         f7:2c:35:4e:2b:5d:c1:dc:95:d7:fa:d3:4a:1a:82:79:2d:d2:
         cc:76:63:39:4e:19:d4:30:41:2f:4b:f3:95:22:7c:e9:d8:01:
         01:f5:c0:1b:bc:bb:7e:55:c9:4a:f6:42:2a:15:2b:06:ec:f5:
         01:ba:11:a1:7c:60:7a:1f:ba:26:f0:c7:7e:ed:9c:28:ba:a0:
         dd:f5:d8:ce:ad:bc:a9:ae:ee:7b:b4:fb:73:be:ee:26:3a:7a:
         4a:10:3f:db:15:1e:78:31:c5:e2:8c:24:a7:7c:8c:bf:c4:ed:
         55:94:60:7a:a1:ab:22:db:b5:40:e1:7b:ea:a8:ba:05:28:2f:
         12:ea:1c:dc:b1:a8:7a:35:c4:86:27:1b:d2:8e:fa:01:e4:dd:
         c4:26:dd:59:31:1c:08:f7:fa:6a:26:3c:21:e0:82:2d:cf:aa:
         8f:4b:68:c3:1a:d4:40:a4:07:40:94:96:02:ae:3e:55:07:52:
         0b:24:1f:0a:c0:51:7c:46:6c:ab:15:b0:04:76:58:fd:3a:0a:
         2b:58:77:c5:6f:56:44:54:84:ee:bc:29:51:f3:d2:2f:23:ff:
         e0:e1:d8:8c:d4:3f:2e:78:6b:7b:58:d2:ea:47:23:18:71:d9:
         a5:d3:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:45 2026 by rpki-client