This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/jZdEfTmuJriG5AyLUa3HiefzbcA.roa
File:                     jZdEfTmuJriG5AyLUa3HiefzbcA.roa (raw, json)
Hash identifier:          S7xLT6xDphnbTUXgFvGzB5Dv+d/rhkukYS1/zmgto9w=
Subject key identifier:   8D:97:44:7D:39:AE:26:B8:86:E4:0C:8B:51:AD:C7:89:E7:F3:6D:C0
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       019B7EA6F1CCB991E3AC0D49ACC7A44F3575
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/jZdEfTmuJriG5AyLUa3HiefzbcA.roa
Signing time:             Fri 02 Jan 2026 12:20:28 +0000
ROA not before:           Fri 02 Jan 2026 12:20:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202061
IP address blocks:        93.159.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:f1:cc:b9:91:e3:ac:0d:49:ac:c7:a4:4f:35:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  2 12:20:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8d97447d39ae26b886e40c8b51adc789e7f36dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:ec:ec:37:76:56:b1:be:45:bd:04:00:f5:
                    75:c2:9d:d5:e1:a4:16:0d:28:c8:5a:e7:59:ff:65:
                    5c:33:df:53:c4:37:6c:fa:fb:0a:ab:ef:c2:11:83:
                    20:d5:af:5e:17:fd:38:1f:4f:8b:ba:84:e6:1e:21:
                    8e:9e:7a:d3:8f:e8:21:6a:48:a4:dd:91:35:a0:68:
                    64:e2:df:96:b9:f2:8e:a3:33:6c:3b:d6:0d:68:f6:
                    39:d2:1c:4f:06:8f:db:83:2d:08:97:e6:e5:9b:b0:
                    ef:53:c8:54:42:b2:4d:24:14:62:d3:20:3d:83:95:
                    16:b5:7a:a9:f5:03:55:f4:69:ca:56:0c:1e:b0:dc:
                    95:1f:1f:6d:ab:a7:b5:fc:58:81:83:29:49:41:2d:
                    2c:2c:ae:d4:99:76:0d:93:63:ae:67:f4:b0:8d:ad:
                    68:6f:67:d1:cd:cb:4f:90:c7:10:aa:50:98:49:52:
                    05:08:81:7d:30:e4:9b:42:72:23:11:7e:27:1f:be:
                    2e:08:f2:01:5f:2d:56:e1:11:f1:8a:6d:eb:ad:fe:
                    8f:c2:32:ab:b2:c0:62:f1:fc:58:34:6d:8f:ed:5b:
                    e2:87:58:6a:6a:b2:d1:d1:b4:09:14:2d:53:b2:08:
                    1f:1c:0e:92:7d:ed:7e:55:2f:f8:1f:7a:28:2e:62:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:97:44:7D:39:AE:26:B8:86:E4:0C:8B:51:AD:C7:89:E7:F3:6D:C0
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/jZdEfTmuJriG5AyLUa3HiefzbcA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b1:0d:9d:39:94:8b:19:e2:82:f4:51:6a:16:c0:f2:56:36:
         03:e3:37:c8:0f:d5:b0:57:b5:de:0a:32:fa:5b:ae:a5:e2:9b:
         d8:68:de:b3:76:5d:ff:b5:57:d5:03:12:dd:9c:c5:6b:69:e0:
         df:5e:01:31:83:09:11:4b:02:0f:91:ec:c1:5d:43:6a:23:06:
         ff:d9:81:7b:30:b4:05:1c:f6:ab:20:59:4d:09:bc:0b:a7:ad:
         22:4e:c2:ee:47:7e:d6:3c:d6:7c:0d:5b:7c:2a:f8:c8:a9:5b:
         34:91:4b:5b:db:fc:34:f1:4d:f9:a5:ba:88:75:3d:78:b8:7f:
         21:88:d7:f1:2b:1f:51:d4:fe:77:c7:25:ba:a5:73:b0:f7:ff:
         63:54:21:4b:bc:ab:ab:88:6a:2f:8a:1f:8c:05:d5:12:83:d7:
         be:4b:40:d7:92:23:0e:4b:33:90:46:25:88:cb:a4:a4:5f:bb:
         29:4e:93:23:b3:71:b3:37:99:3d:0c:f4:4a:1b:7c:16:b0:9a:
         b2:a1:58:c3:68:2c:1d:7e:e3:cc:d4:e0:96:78:2c:76:8e:6b:
         3a:8f:9d:3b:14:56:49:73:7e:1d:07:e0:21:10:ef:60:d1:25:
         51:e4:11:c0:73:93:3b:0d:7e:30:2d:8a:b8:ea:8d:f7:27:cf:
         5f:37:e6:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pvHMuZHjrA1JrMekTzV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl
MzRiOTMwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDk3NDQ3ZDM5YWUyNmI4ODZlNDBjOGI1MWFkYzc4OWU3ZjM2ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodns7Dd2VrG+Rb0EAPV1wp3V4aQW
DSjIWudZ/2VcM99TxDds+vsKq+/CEYMg1a9eF/04H0+LuoTmHiGOnnrTj+ghakik
3ZE1oGhk4t+WufKOozNsO9YNaPY50hxPBo/bgy0Il+blm7DvU8hUQrJNJBRi0yA9
g5UWtXqp9QNV9GnKVgwesNyVHx9tq6e1/FiBgylJQS0sLK7UmXYNk2OuZ/Swja1o
b2fRzctPkMcQqlCYSVIFCIF9MOSbQnIjEX4nH74uCPIBXy1W4RHxim3rrf6PwjKr
ssBi8fxYNG2P7Vvih1hqarLR0bQJFC1TsggfHA6Sfe1+VS/4H3ooLmK2vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI2XRH05ria4huQMi1Gtx4nn823AMB8GA1UdIwQY
MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt
NWNiZDFmM2ZmMzlhLzEvalpkRWZUbXVKcmlHNUF5TFVhM0hpZWZ6YmNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh
LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ+5MA0G
CSqGSIb3DQEBCwUAA4IBAQCUsQ2dOZSLGeKC9FFqFsDyVjYD4zfID9WwV7XeCjL6
W66l4pvYaN6zdl3/tVfVAxLdnMVraeDfXgExgwkRSwIPkezBXUNqIwb/2YF7MLQF
HParIFlNCbwLp60iTsLuR37WPNZ8DVt8KvjIqVs0kUtb2/w08U35pbqIdT14uH8h
iNfxKx9R1P53xyW6pXOw9/9jVCFLvKuriGovih+MBdUSg9e+S0DXkiMOSzOQRiWI
y6SkX7spTpMjs3GzN5k9DPRKG3wWsJqyoVjDaCwdfuPM1OCWeCx2jms6j507FFZJ
c34dB+AhEO9g0SVR5BHAc5M7DX4wLYq46o33J89fN+Z+
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:21 2026 by rpki-client