This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EPrveg7VsczFW66vCWx3p_X17_k.roa
File:                     EPrveg7VsczFW66vCWx3p_X17_k.roa (raw, json)
Hash identifier:          L/tmzrZOrnJ49YRuwI2/5Y2nIeH/8skkoW6XEaMvZ40=
Subject key identifier:   10:FA:EF:7A:0E:D5:B1:CC:C5:5B:AE:AF:09:6C:77:A7:F5:F5:EF:F9
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       019B76EAC90E4935AE60B6CA6A3BC6BCF843
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EPrveg7VsczFW66vCWx3p_X17_k.roa
Signing time:             Thu 01 Jan 2026 00:17:36 +0000
ROA not before:           Thu 01 Jan 2026 00:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153393
IP address blocks:        92.118.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:c9:0e:49:35:ae:60:b6:ca:6a:3b:c6:bc:f8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Jan  1 00:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=10faef7a0ed5b1ccc55baeaf096c77a7f5f5eff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c8:2a:24:f1:a9:37:0c:07:80:88:8b:a9:e3:
                    da:dc:90:af:e7:84:78:41:af:b2:31:2f:2b:08:a0:
                    a5:fa:22:d7:19:32:70:6a:5b:38:28:c0:76:fd:08:
                    ae:35:28:d7:b2:d3:e8:e2:d7:6a:67:51:f2:b2:9b:
                    bf:1e:09:93:09:44:03:37:73:ee:3d:4a:91:9e:12:
                    d9:77:11:4c:f7:cc:31:98:23:6b:a8:8d:91:9f:77:
                    86:a6:e2:7c:2b:26:52:d3:29:03:3a:3d:7f:9d:a5:
                    63:2d:a8:77:73:68:3f:c1:76:07:42:ed:bb:9f:e0:
                    fc:c7:8e:9f:8b:97:0e:9e:29:8a:e4:bd:12:aa:93:
                    98:c8:28:bb:cb:74:60:ee:18:f6:79:6a:34:b2:96:
                    98:96:5a:94:42:5e:a7:83:e0:cd:73:bc:66:32:ec:
                    af:29:c5:70:f4:a4:df:4f:af:5a:e1:0e:7b:7b:23:
                    e9:8e:6e:96:28:82:1c:fc:1f:43:ff:fd:e6:4a:2c:
                    0c:86:5a:f6:07:b1:2e:9f:74:26:fb:89:49:09:41:
                    11:7b:2f:c9:3a:a2:fe:ff:c2:14:34:9f:77:89:f8:
                    47:1e:cc:72:53:9e:d7:18:7b:a4:e8:36:ff:1c:cc:
                    b0:e5:cc:39:e7:6d:01:f0:ff:2c:0c:ad:c2:90:b9:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FA:EF:7A:0E:D5:B1:CC:C5:5B:AE:AF:09:6C:77:A7:F5:F5:EF:F9
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EPrveg7VsczFW66vCWx3p_X17_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:e3:f3:9d:3c:72:e6:94:e3:55:a7:9c:6b:40:14:af:e9:
         c6:a5:48:ed:d7:17:a3:d2:c0:ce:b7:95:3f:46:66:dc:9a:93:
         7c:8d:52:10:5e:94:fb:e8:41:79:55:9c:33:fc:dc:c6:2d:6b:
         99:5e:27:e9:b8:58:9c:6e:99:a1:67:19:df:b3:b5:11:46:84:
         89:44:51:8a:b2:2b:86:6a:73:19:10:b6:3a:4c:45:f5:d5:28:
         2b:4a:0a:0d:61:31:2c:40:2b:8c:d4:d7:a8:77:04:90:fb:75:
         cd:b5:4a:49:d0:18:97:be:7a:1b:30:83:ed:01:67:ae:e1:b7:
         97:c1:9b:3e:4d:7f:cf:2e:6d:98:70:3e:2a:a2:0b:87:24:34:
         c7:83:c2:b8:b0:ca:84:17:4f:a0:b4:f3:e4:4b:de:cf:84:42:
         4a:f1:f4:ab:c3:14:75:54:2d:56:ce:63:43:92:dc:fc:d5:84:
         0e:76:29:2d:f9:3b:1a:8e:07:a8:82:f1:f0:f1:c8:a4:06:52:
         fe:8f:99:cb:68:54:66:28:d2:0d:b7:a6:af:c7:dc:d1:36:41:
         e8:c1:fe:6a:16:e9:0e:5a:72:85:85:0b:81:87:81:af:2a:f6:
         bf:dd:4b:46:d5:24:54:c6:91:38:ef:16:f3:d9:6f:1d:2b:bd:
         35:1d:64:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26skOSTWuYLbKajvGvPhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGZhZWY3YTBlZDViMWNjYzU1YmFlYWYwOTZjNzdhN2Y1ZjVlZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8gqJPGpNwwHgIiLqePa3JCv54R4
Qa+yMS8rCKCl+iLXGTJwals4KMB2/QiuNSjXstPo4tdqZ1Hyspu/HgmTCUQDN3Pu
PUqRnhLZdxFM98wxmCNrqI2Rn3eGpuJ8KyZS0ykDOj1/naVjLah3c2g/wXYHQu27
n+D8x46fi5cOnimK5L0SqpOYyCi7y3Rg7hj2eWo0spaYllqUQl6ng+DNc7xmMuyv
KcVw9KTfT69a4Q57eyPpjm6WKIIc/B9D//3mSiwMhlr2B7Eun3Qm+4lJCUERey/J
OqL+/8IUNJ93ifhHHsxyU57XGHuk6Db/HMyw5cw5520B8P8sDK3CkLnJdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBD673oO1bHMxVuurwlsd6f19e/5MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvRVBydmVnN1ZzY3pGVzY2dkNXeDNwX1gxN19rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHbrMA0G
CSqGSIb3DQEBCwUAA4IBAQAV4OPznTxy5pTjVaeca0AUr+nGpUjt1xej0sDOt5U/
RmbcmpN8jVIQXpT76EF5VZwz/NzGLWuZXifpuFicbpmhZxnfs7URRoSJRFGKsiuG
anMZELY6TEX11SgrSgoNYTEsQCuM1NeodwSQ+3XNtUpJ0BiXvnobMIPtAWeu4beX
wZs+TX/PLm2YcD4qoguHJDTHg8K4sMqEF0+gtPPkS97PhEJK8fSrwxR1VC1WzmND
ktz81YQOdikt+TsajgeogvHw8cikBlL+j5nLaFRmKNINt6avx9zRNkHowf5qFukO
WnKFhQuBh4GvKva/3UtG1SRUxpE47xbz2W8dK701HWRI
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:16:16 2026 by rpki-client