This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/e1ImFgRyhdMOKFgAB5kl9XY5Nfc.roa
File:                     e1ImFgRyhdMOKFgAB5kl9XY5Nfc.roa (raw, json)
Hash identifier:          nTHeDeSEMp4wiPOugAgAjRRaTG5Sm3T4L+dSsNdSPbM=
Subject key identifier:   7B:52:26:16:04:72:85:D3:0E:28:58:00:07:99:25:F5:76:39:35:F7
Certificate issuer:       /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial:       019B7758B0E112F7E89A2E4D4FE9CBCEC410
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/e1ImFgRyhdMOKFgAB5kl9XY5Nfc.roa
Signing time:             Thu 01 Jan 2026 02:17:39 +0000
ROA not before:           Thu 01 Jan 2026 02:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15615
IP address blocks:        92.63.87.0/24 maxlen: 24
                          185.129.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:b0:e1:12:f7:e8:9a:2e:4d:4f:e9:cb:ce:c4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
        Validity
            Not Before: Jan  1 02:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b522616047285d30e285800079925f5763935f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c9:d2:6f:3b:45:cd:23:77:0f:30:02:40:ac:
                    40:9e:ba:14:a0:b7:a9:6a:41:71:47:7e:e6:bf:2d:
                    ca:0d:41:3c:4c:ba:c8:89:ee:16:e6:8f:c2:ec:af:
                    8b:79:fd:60:f6:2e:49:6e:21:35:46:91:9d:20:f1:
                    3f:fc:34:e9:f4:c1:bc:17:76:f9:54:69:6a:49:9c:
                    15:b6:54:ef:71:8f:bf:37:1c:67:e0:33:fc:1a:5b:
                    74:1a:7b:fb:09:33:6c:48:82:91:e4:cb:c2:3a:60:
                    f9:c6:a9:bc:8f:99:09:9d:ff:08:9b:5e:22:dc:cb:
                    34:7a:6c:53:47:50:4b:1a:88:e4:9e:73:21:22:ad:
                    db:4e:62:fb:b1:91:a2:18:4d:a1:71:cc:33:3e:10:
                    a5:2c:6f:85:cf:0e:85:1f:b0:52:37:71:86:fe:d7:
                    de:39:03:8d:23:e6:51:21:de:23:e8:01:d9:5c:a7:
                    61:08:bd:1a:b5:2e:b4:55:32:1d:df:06:ef:cf:41:
                    46:41:5a:04:6e:07:9c:1f:d5:ab:b6:3c:a5:c3:e5:
                    d0:50:92:99:27:d7:a6:7b:f6:9d:41:6a:4e:13:b9:
                    7c:41:7b:74:4d:92:20:3b:2f:c8:0b:a6:cd:da:4f:
                    b5:49:03:f9:ed:ac:5a:8c:5f:f9:d7:1f:70:39:7e:
                    3d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:52:26:16:04:72:85:D3:0E:28:58:00:07:99:25:F5:76:39:35:F7
            X509v3 Authority Key Identifier:
                keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/e1ImFgRyhdMOKFgAB5kl9XY5Nfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.87.0/24
                  185.129.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:47:37:27:98:37:96:4c:20:18:d0:2a:1d:a2:12:76:3d:1c:
         53:8f:bb:da:c4:b3:5a:c9:ab:88:14:0e:b2:3b:78:e1:bf:f6:
         08:1d:23:01:04:c1:7f:b3:a2:55:83:f0:a0:8c:62:4e:91:c7:
         f4:e8:2e:67:a0:71:4d:3a:01:35:eb:90:55:32:29:3c:54:85:
         27:81:75:8b:37:86:7b:a2:c0:3c:f1:e3:42:96:2a:7d:75:8d:
         1b:02:a1:a3:84:9b:1e:5b:c0:fe:d7:4a:68:69:b5:9b:c8:93:
         8d:fa:ce:01:1a:c2:8a:ec:9e:95:36:f9:c8:90:bf:2c:82:24:
         f5:78:91:dd:2c:4c:b7:b1:9f:e0:d4:15:3e:cd:2b:1a:34:90:
         2f:b4:82:35:d4:22:ab:78:02:94:64:5a:98:bc:de:04:34:35:
         1a:5b:0a:24:0d:50:31:ce:b1:84:c7:69:53:72:eb:22:a3:b1:
         ef:60:71:29:b1:e8:48:d8:a4:68:7a:f7:00:ec:19:81:cd:80:
         f9:d5:ba:13:b4:ee:44:c8:55:de:aa:39:cd:ba:e7:39:9d:a3:
         63:6d:9c:a7:fb:d4:c5:bb:9e:e9:d2:18:3a:fc:96:35:e1:39:
         48:3f:44:0b:1c:83:ff:99:df:c1:5c:56:07:df:54:d6:00:01:
         a3:f5:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:08 2026 by rpki-client