This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EEQ18MJD-QFM041ezxz0Jr-cpQk.roa
File:                     EEQ18MJD-QFM041ezxz0Jr-cpQk.roa (raw, json)
Hash identifier:          6f42tqMjwuh7lt1pWqrlzUGqWxEundbWYPEM0xO9PW8=
Subject key identifier:   10:44:35:F0:C2:43:F9:01:4C:D3:8D:5E:CF:1C:F4:26:BF:9C:A5:09
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       019B78345A6B51B1920C39B3CE74DDE3016E
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EEQ18MJD-QFM041ezxz0Jr-cpQk.roa
Signing time:             Thu 01 Jan 2026 06:17:35 +0000
ROA not before:           Thu 01 Jan 2026 06:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212164
IP address blocks:        92.118.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:5a:6b:51:b1:92:0c:39:b3:ce:74:dd:e3:01:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  1 06:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=104435f0c243f9014cd38d5ecf1cf426bf9ca509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:08:b6:30:df:a7:39:4e:96:ad:a1:8c:61:
                    91:c3:70:b4:5b:56:34:65:8d:34:d9:f9:55:b5:5c:
                    60:cb:fb:e3:4d:7f:72:53:fa:85:ea:10:d0:5f:a8:
                    d5:7f:ee:f4:42:f8:e8:1b:c4:9f:0c:ff:28:49:fd:
                    4d:20:92:ea:68:8d:51:d1:54:9d:63:79:ad:93:02:
                    4d:26:e0:3e:65:4b:e0:f8:c5:6b:5d:e8:ed:9e:4f:
                    7a:6a:49:93:8a:6f:55:05:88:1a:37:1b:12:92:44:
                    04:31:86:eb:9b:73:f7:36:64:cd:53:be:71:5f:8f:
                    8d:ce:eb:00:7b:e4:0f:24:35:35:eb:f1:22:1d:20:
                    86:d6:af:84:22:e7:54:1b:a4:4c:58:d5:73:6b:ca:
                    52:58:56:d9:92:57:e4:2f:be:a9:e4:27:87:49:1f:
                    0f:d9:71:0d:40:44:38:f8:d5:b2:b4:5e:88:b4:46:
                    19:72:5f:2b:72:d5:92:1f:5d:3c:34:3c:9f:4d:3b:
                    c7:83:67:f6:3f:c7:93:24:32:7c:77:62:ce:0d:27:
                    fe:18:73:e5:7d:76:08:fe:f3:cc:90:46:e2:dc:32:
                    d5:50:43:81:f5:4b:a3:13:54:b4:66:e9:9d:40:82:
                    b9:44:61:18:a4:12:6c:9f:ba:3c:92:6f:c8:bf:0c:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:44:35:F0:C2:43:F9:01:4C:D3:8D:5E:CF:1C:F4:26:BF:9C:A5:09
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/EEQ18MJD-QFM041ezxz0Jr-cpQk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:0d:ef:6c:e8:6f:3a:d2:06:2a:c7:c4:0e:ba:e7:46:57:c3:
         19:cb:bd:99:f2:5d:a9:ed:2f:ef:a9:2b:b8:f5:34:6a:46:17:
         0c:29:e1:62:60:38:e5:5d:e2:52:aa:45:ca:d5:5a:c9:0d:b8:
         ba:47:ab:5f:46:99:eb:ab:cc:80:f3:6f:e9:53:a5:95:ee:a1:
         e2:9e:a6:cc:06:58:c5:90:ca:c0:63:8f:0f:e9:c5:a4:dd:82:
         7f:42:d9:9b:85:28:40:a0:04:15:be:7b:8c:67:52:56:a5:bf:
         83:41:0b:ef:00:3c:b4:d9:68:d6:d6:77:94:e5:86:b2:ab:96:
         ba:ef:98:7c:b3:63:66:0a:e3:ec:70:f5:fb:79:15:0a:5d:1b:
         d3:3e:25:c1:a1:91:ae:55:4b:ba:3a:04:de:a1:1d:d8:2f:72:
         91:06:2f:36:bc:82:7d:60:ce:36:91:75:d0:49:a2:c9:15:4b:
         52:d8:d2:5a:b3:75:71:cc:25:fb:56:f8:1b:83:6a:bf:4f:2b:
         72:cf:fd:03:17:b7:3a:ea:9a:cd:b5:f5:f4:c1:76:a6:b1:a7:
         6d:40:34:90:52:14:63:19:66:fa:4f:5a:6f:25:3f:7a:b5:7f:
         30:08:e4:a4:7c:2f:44:ba:73:20:41:0b:db:01:93:68:5c:90:
         25:9b:94:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:03:00 2026 by rpki-client