This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa
File:                     ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa (raw, json)
Hash identifier:          5I9TJRb3cc5VhsKq+pB92ABihn+aPu3v2b27S765Sxc=
Subject key identifier:   11:26:98:37:C2:2A:18:33:CD:DB:C7:56:43:21:4F:32:52:39:16:4F
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       019B7DC9FF3FACFAD20C35574EE5955A1B34
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa
Signing time:             Fri 02 Jan 2026 08:19:08 +0000
ROA not before:           Fri 02 Jan 2026 08:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     4224
IP address blocks:        185.220.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:ff:3f:ac:fa:d2:0c:35:57:4e:e5:95:5a:1b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Jan  2 08:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=11269837c22a1833cddbc75643214f325239164f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:b1:1b:c8:1d:3b:f3:4c:d4:08:87:82:7b:
                    ea:db:fe:aa:54:27:86:ce:7d:54:5f:6c:07:a2:22:
                    03:e7:26:a8:63:11:00:30:1e:6a:2c:93:1b:4d:0f:
                    b8:49:ae:ef:02:d0:00:1b:24:94:c9:d0:47:91:a6:
                    f4:dd:7a:0f:52:b3:87:60:44:e8:28:f3:92:e9:55:
                    f5:66:75:26:b0:98:fe:3d:bc:66:60:82:41:99:c4:
                    28:3d:3b:fc:24:c1:f3:13:86:af:b2:e1:e6:32:8e:
                    ed:b3:5a:9e:38:16:aa:18:cf:20:43:ad:c4:c7:bb:
                    6f:fb:f3:0c:e5:4f:88:72:b6:4a:5b:31:e9:3a:0f:
                    38:bd:55:c4:98:6a:e2:d7:8e:cc:35:66:fb:02:80:
                    04:68:35:15:91:02:f2:57:26:18:9c:8f:78:47:93:
                    3d:df:81:0f:47:a1:7b:29:fb:fc:54:08:a1:56:df:
                    83:36:26:77:4d:2a:4c:94:96:d7:12:53:09:80:ca:
                    f1:12:b5:63:77:19:d8:70:e8:98:b5:4e:ff:06:e7:
                    bf:53:74:8f:dd:09:28:ae:f5:aa:da:7f:e2:3e:99:
                    c0:e1:cd:a5:1c:f9:2b:b2:d1:ff:c9:f6:f2:68:97:
                    39:f3:1e:66:69:8e:80:38:25:fb:ba:1f:12:1d:f3:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:26:98:37:C2:2A:18:33:CD:DB:C7:56:43:21:4F:32:52:39:16:4F
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/ESaYN8IqGDPN28dWQyFPMlI5Fk8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:42:e2:b6:f9:8c:37:97:fc:74:ac:e5:9c:a4:9d:c8:7c:5d:
         fe:2f:59:10:99:17:24:b1:0b:f1:00:78:a5:ab:5a:b2:7e:3e:
         48:8a:58:03:85:75:b6:06:e7:c5:2d:00:9b:e8:dd:52:b6:b1:
         fe:bc:2d:1e:a9:19:45:2d:2b:70:67:aa:89:f1:56:5f:37:78:
         f5:de:ab:63:bd:b3:7f:9a:da:6f:2d:1a:e1:ea:1a:e9:2f:d0:
         74:46:96:0f:76:57:b2:9c:47:cb:cd:8e:dd:07:72:c2:c8:a8:
         89:01:ed:9b:ec:5d:18:0e:58:b5:de:cc:c2:0b:32:b0:66:fb:
         f4:5c:e7:f0:3c:8d:01:e0:77:cf:a8:bc:9c:ee:b3:54:76:a3:
         6f:5b:1c:57:5c:f8:46:a1:4c:ef:9d:73:cd:a5:e3:75:64:c5:
         4f:20:ef:cf:ac:e0:70:e5:32:4d:99:ef:68:b4:f3:e3:fe:43:
         ce:01:75:f8:9a:aa:41:c7:c8:ea:41:a2:31:f7:37:d8:7f:77:
         2f:98:e0:9b:ab:b2:40:36:45:ce:c5:a0:e0:fd:e7:77:c3:dc:
         20:15:05:58:83:46:a9:43:50:0a:60:3a:5c:1c:e7:a1:86:5c:
         36:20:4b:75:bb:68:61:cc:fd:e6:20:ed:86:94:2f:b9:87:8e:
         5f:d1:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:21:49 2026 by rpki-client