This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/EqAh_11DL2TI1_FfkN_y27t6S1c.roa
File:                     EqAh_11DL2TI1_FfkN_y27t6S1c.roa (raw, json)
Hash identifier:          ZNAfSFNbRdghry8RJ6jnskPON8ekbE8YuRLsmfHCrBg=
Subject key identifier:   12:A0:21:FF:5D:43:2F:64:C8:D7:F1:5F:90:DF:F2:DB:BB:7A:4B:57
Certificate issuer:       /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial:       019B7C1353B8446A7520C70FEE5DF7C5F56E
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/EqAh_11DL2TI1_FfkN_y27t6S1c.roa
Signing time:             Fri 02 Jan 2026 00:19:59 +0000
ROA not before:           Fri 02 Jan 2026 00:19:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19211
IP address blocks:        217.22.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 16:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:53:b8:44:6a:75:20:c7:0f:ee:5d:f7:c5:f5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
        Validity
            Not Before: Jan  2 00:19:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12a021ff5d432f64c8d7f15f90dff2dbbb7a4b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:7a:a4:b0:d5:00:ba:0d:b3:58:a0:78:7a:
                    42:17:a6:09:10:b7:4b:73:b5:db:59:0b:8c:a0:40:
                    89:8f:67:4c:0b:04:f9:ec:5a:71:25:ea:38:45:db:
                    46:52:84:b4:9b:3f:d2:98:dd:94:e3:b9:ff:fb:4c:
                    b7:d1:49:94:5a:8f:27:37:2e:ff:ce:83:ba:a2:ca:
                    b9:49:b5:4a:dd:d5:e9:8f:96:53:ab:9a:ba:32:93:
                    fe:12:ec:b5:f5:8f:2e:10:96:1b:3f:ee:f5:3a:b3:
                    fd:60:00:7e:dc:9c:ca:6b:ca:34:15:c3:7a:86:1e:
                    68:c8:99:6d:30:2b:62:a8:bb:3c:ce:d7:a2:59:32:
                    ec:ba:da:d9:8b:a0:a5:f0:75:2d:cf:a6:66:45:c8:
                    24:dc:63:41:eb:88:26:f2:61:34:36:48:3e:98:42:
                    74:81:2f:d2:09:65:ab:0b:ac:d4:07:1d:57:b2:b9:
                    34:35:98:c3:a9:6d:17:76:5e:19:6f:84:ae:cb:f4:
                    ee:dc:e6:2f:f2:67:68:01:39:3d:e3:b2:69:2d:e2:
                    fe:d2:ec:d2:6d:97:ef:4f:56:ef:97:b8:23:b0:32:
                    28:b8:3b:40:a5:03:2c:41:af:8e:50:9d:52:95:7f:
                    ff:ee:34:b8:7c:08:8a:94:2b:71:bd:08:d2:79:51:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A0:21:FF:5D:43:2F:64:C8:D7:F1:5F:90:DF:F2:DB:BB:7A:4B:57
            X509v3 Authority Key Identifier:
                keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/EqAh_11DL2TI1_FfkN_y27t6S1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.22.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:81:13:39:83:7d:8d:3e:0e:47:47:0b:16:c3:c0:b3:00:
         af:8e:96:64:80:35:9a:eb:e9:44:42:dd:ff:38:50:a1:e2:5a:
         3f:d2:0f:34:4c:3a:2d:7c:bb:0d:57:44:a8:55:a2:fc:29:38:
         4c:1c:31:2c:14:d8:33:9e:28:67:be:9f:1f:c3:43:70:54:2c:
         db:4e:be:c8:bc:63:62:1a:76:13:79:08:85:71:96:ff:65:d0:
         3e:3b:84:ec:31:c4:2c:2a:76:3f:23:96:36:36:19:17:5b:55:
         0d:7c:a3:4a:1f:2b:22:f0:d0:be:ee:7c:e4:74:83:2b:05:3b:
         4f:d4:d2:80:40:6f:ee:23:a1:79:84:1d:93:4e:a2:49:c1:21:
         73:b5:fc:78:df:27:ff:b8:57:77:0b:dd:41:b2:af:08:86:fc:
         0a:6c:92:9a:9d:83:2d:ab:9e:cf:4b:57:33:64:da:75:d7:a9:
         e5:55:f6:e1:bd:04:bc:e7:2a:49:2e:b2:68:80:e4:4b:9b:6f:
         de:18:18:e0:bf:96:7b:2e:aa:af:a6:a3:ae:24:ff:a3:1f:91:
         7b:fd:c8:36:c9:a4:6a:9c:4d:0b:04:73:81:d9:ef:40:6f:81:
         11:9d:f2:37:c8:8f:3c:c3:95:33:5a:07:94:b6:3e:ba:7c:fd:
         33:52:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 02:11:27 2026 by rpki-client