This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa
File:                     oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa (raw, json)
Hash identifier:          c4HWnVLhY5gwzEC9ub/fPbXgeg83cue7m376DrPhXoA=
Subject key identifier:   A1:EB:B3:41:46:32:3E:45:BE:57:65:24:3A:5C:4F:FE:35:64:FB:8C
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       019B7AC8753437BCB788B4CCC76D6B084B07
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa
Signing time:             Thu 01 Jan 2026 18:18:36 +0000
ROA not before:           Thu 01 Jan 2026 18:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48359
IP address blocks:        185.129.184.0/24 maxlen: 24
                          185.129.185.0/24 maxlen: 24
                          185.129.186.0/24 maxlen: 24
                          185.129.187.0/24 maxlen: 24
                          185.129.198.0/24 maxlen: 24
                          185.129.201.0/24 maxlen: 24
                          185.129.212.0/24 maxlen: 24
                          185.129.228.0/24 maxlen: 24
                          185.129.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:75:34:37:bc:b7:88:b4:cc:c7:6d:6b:08:4b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Jan  1 18:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a1ebb34146323e45be5765243a5c4ffe3564fb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:18:e6:4e:87:f3:2a:3c:67:91:43:97:2a:
                    2d:2b:0f:e0:95:11:89:78:36:1b:e1:45:3d:c4:17:
                    b3:82:60:a1:c4:4c:6e:de:59:00:45:fa:b2:59:19:
                    d9:a1:1e:18:a9:b8:7f:ce:a7:94:a4:cd:4b:59:34:
                    01:e9:80:cd:21:c6:16:10:00:f9:48:15:16:72:54:
                    ad:40:79:42:d9:bd:61:d1:36:08:84:0f:4b:1d:ff:
                    ac:4e:cb:c3:30:2f:51:fd:30:88:27:ad:17:b5:00:
                    30:66:4b:15:c3:5c:13:bb:8d:39:fe:14:bc:74:49:
                    69:8b:d4:7c:e6:07:1e:b5:c0:4d:69:98:5f:03:5b:
                    a3:b3:a4:c3:c3:a4:61:05:ab:0e:f5:09:c0:03:a0:
                    73:29:fc:66:2e:ad:d0:f8:d4:5d:e5:a7:eb:52:68:
                    37:dc:80:bd:a4:75:9e:80:c5:28:da:b8:9b:b6:81:
                    e8:b7:94:29:a4:88:86:ba:e0:06:00:51:2c:9f:7d:
                    ac:4e:71:91:81:f3:f6:03:bb:dd:7a:32:eb:b8:fd:
                    5e:e0:1f:05:55:d7:4c:3b:74:aa:37:d9:60:cb:a8:
                    5a:dd:43:f3:40:e9:b2:8f:df:ac:91:e0:81:e5:1f:
                    86:7d:6a:47:fb:3f:d9:d2:90:21:c0:49:83:70:1a:
                    9d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EB:B3:41:46:32:3E:45:BE:57:65:24:3A:5C:4F:FE:35:64:FB:8C
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.129.184.0/22
                  185.129.198.0/24
                  185.129.201.0/24
                  185.129.212.0/24
                  185.129.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:92:fe:a1:6a:1d:a3:4b:2b:da:10:4a:e6:2a:13:99:10:d5:
         9e:35:90:db:e1:d8:87:4a:2d:65:f9:16:2d:1c:56:50:0f:ed:
         45:5c:5a:47:e0:87:a9:e8:1f:30:8c:ab:66:a5:33:3d:ae:35:
         6c:37:ce:ab:61:4a:87:ec:76:76:57:8a:ae:c0:11:a3:13:61:
         5d:09:01:bf:03:db:98:9a:6b:a8:77:ec:bf:32:26:d3:b2:cd:
         d2:fe:47:fb:20:d2:c3:13:bc:18:03:64:bf:30:af:57:50:d4:
         78:a8:b6:6c:5b:cc:21:1e:b4:db:68:b4:db:1e:84:73:51:b2:
         cd:24:ae:84:00:b7:d7:23:94:9f:db:8f:c9:1d:b9:91:34:64:
         e1:cd:8b:bc:9a:67:d2:35:6f:96:90:00:fc:84:f5:0c:46:c6:
         06:8f:5b:b7:a7:6c:42:fa:04:50:14:d0:56:7f:29:f1:0f:f3:
         c6:f9:d9:20:b6:61:d0:db:97:a4:10:5c:24:17:05:89:4d:59:
         00:8b:f0:a0:53:17:b8:b5:c0:a7:1a:bb:3d:58:e3:6b:64:90:
         1d:69:c3:75:b1:80:9d:63:a3:ce:a5:01:af:28:b1:90:11:a5:
         44:4b:28:88:e0:a5:f4:b2:3b:5f:03:f6:4e:5b:35:90:92:79:
         29:b2:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:18:44 2026 by rpki-client