This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Ev6njxlgrpkstlUTyTcSCnkdFjo.roa
File:                     Ev6njxlgrpkstlUTyTcSCnkdFjo.roa (raw, json)
Hash identifier:          1/+G7Xn066bxLccaxINtt3wyPu+3d9kx1mTaF8ip+vA=
Subject key identifier:   12:FE:A7:8F:19:60:AE:99:2C:B6:55:13:C9:37:12:0A:79:1D:16:3A
Certificate issuer:       /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial:       019B7AC90F48A19DC936D595F0B8396AFA0F
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Ev6njxlgrpkstlUTyTcSCnkdFjo.roa
Signing time:             Thu 01 Jan 2026 18:19:15 +0000
ROA not before:           Thu 01 Jan 2026 18:19:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        185.107.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:0f:48:a1:9d:c9:36:d5:95:f0:b8:39:6a:fa:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
        Validity
            Not Before: Jan  1 18:19:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12fea78f1960ae992cb65513c937120a791d163a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:09:ef:cd:9f:71:ad:30:0a:1e:aa:68:29:8c:
                    1f:be:c1:d0:9c:55:8b:23:88:cd:7d:86:51:4a:41:
                    8e:82:3b:5c:4c:d2:e3:42:0c:5c:ae:a2:e5:a1:16:
                    0c:c7:80:8d:63:b2:34:ed:e1:0e:93:26:c6:fd:d4:
                    32:81:c8:fe:a4:d2:79:52:4e:b7:e3:4b:1c:88:44:
                    f9:6f:0b:60:c4:93:b7:70:a4:94:8d:b2:05:8e:07:
                    f1:c7:88:37:5f:1d:4b:70:36:07:de:95:ad:75:01:
                    69:e6:44:6c:c7:52:49:87:ec:61:65:b1:1e:b4:ac:
                    c2:e7:8b:5a:d6:8f:6e:40:a2:2f:9e:54:19:96:bd:
                    9b:f4:d3:e2:74:1d:5c:13:54:7a:76:3c:6d:f7:5d:
                    f5:8f:71:80:c0:7f:8b:c8:40:a9:fe:10:75:19:04:
                    ab:53:7b:35:e9:fe:f8:b4:94:91:76:99:e0:ef:b0:
                    cb:f9:72:c0:29:e2:75:25:02:50:f0:80:45:36:9a:
                    ae:d7:18:51:c7:99:34:4e:18:a5:2a:bc:b8:5e:95:
                    bf:1c:10:d5:04:ac:a6:4e:db:c1:18:70:78:c6:07:
                    9d:7f:7d:d3:46:12:bc:6b:cc:12:34:a7:5b:d3:6e:
                    46:16:aa:cd:9e:cf:93:98:d9:01:b4:65:03:6d:3e:
                    ce:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FE:A7:8F:19:60:AE:99:2C:B6:55:13:C9:37:12:0A:79:1D:16:3A
            X509v3 Authority Key Identifier:
                keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Ev6njxlgrpkstlUTyTcSCnkdFjo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.107.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:8a:b7:a6:b0:b2:c2:cf:a6:c6:ea:15:31:eb:8d:f2:b7:28:
         79:b7:46:de:27:16:32:c5:c6:a6:d9:60:cd:f6:6a:ee:d7:75:
         6c:55:26:5d:3e:19:ea:a9:43:6e:4a:83:68:84:5b:bb:2c:ab:
         7e:84:81:8e:e3:c6:94:f2:f7:24:53:81:00:68:51:ed:7d:bb:
         bc:b5:fb:1a:6e:3e:78:16:02:98:6a:a8:e1:a9:2c:49:25:45:
         9c:42:1a:29:67:de:da:0a:95:e4:11:73:7b:5c:a5:29:1d:83:
         7f:36:2f:6b:27:9e:a9:14:43:18:e5:1a:76:68:05:88:ec:91:
         da:74:7c:dd:56:ee:3c:2b:a7:69:7e:c0:02:7d:e5:b3:ed:69:
         97:0b:f3:37:3a:e4:ac:d9:28:33:cd:ee:dd:49:62:65:09:47:
         af:48:43:65:e2:df:1c:16:20:56:b5:e8:8a:b7:39:64:fb:65:
         ce:fa:f7:9a:38:3b:7c:50:d5:0e:25:c1:87:c2:54:ad:46:10:
         39:7b:6c:20:ea:4c:33:30:01:d6:b9:3e:b4:ea:9e:43:d6:f7:
         0b:a3:34:a5:0e:26:ed:56:0d:62:b0:cf:c8:c0:bc:32:73:da:
         83:77:b9:44:ca:7f:55:bf:09:fd:64:a5:ee:74:3c:89:a6:b5:
         fa:2c:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:17 2026 by rpki-client