This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/EhG-iYZNFoJEhs2X2OptzmxOfqw.roa
File:                     EhG-iYZNFoJEhs2X2OptzmxOfqw.roa (raw, json)
Hash identifier:          aCu6x2h9aVNHZRLsGFz7tjoYTapCoh/tz4jAafHyEh0=
Subject key identifier:   12:11:BE:89:86:4D:16:82:44:86:CD:97:D8:EA:6D:CE:6C:4E:7E:AC
Certificate issuer:       /CN=79df50e26894bb0e81359606d82b7190c17598cc
Certificate serial:       019B7C80C5C784454E104475ABCF59FA02F8
Authority key identifier: 79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/EhG-iYZNFoJEhs2X2OptzmxOfqw.roa
Signing time:             Fri 02 Jan 2026 02:19:32 +0000
ROA not before:           Fri 02 Jan 2026 02:19:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201059
IP address blocks:        185.81.148.0/22 maxlen: 22
                          2a05:68c0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:c5:c7:84:45:4e:10:44:75:ab:cf:59:fa:02:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df50e26894bb0e81359606d82b7190c17598cc
        Validity
            Not Before: Jan  2 02:19:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1211be89864d16824486cd97d8ea6dce6c4e7eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:b1:a0:00:aa:b4:9b:3b:31:b0:23:1c:7e:
                    56:ce:c9:b3:ca:12:9d:d5:49:86:12:34:81:08:04:
                    5a:2d:40:9c:66:c4:4d:38:db:d0:b2:bc:21:f0:e2:
                    6c:c0:20:43:18:33:b5:db:07:8b:8c:0e:d7:bf:17:
                    e8:1d:94:8d:e8:57:e2:03:d6:3c:71:de:6a:7d:a8:
                    37:a8:d7:9d:ed:bd:68:69:9f:28:58:24:39:dc:98:
                    07:e2:dc:b8:8f:09:86:97:4b:9f:44:dd:2a:07:1c:
                    94:9f:e1:28:f4:54:79:ea:56:c2:51:a3:61:f1:fd:
                    3a:8c:d6:3e:f9:b9:95:63:30:2b:c3:48:f2:17:7b:
                    31:dc:1e:f2:bf:24:d5:0c:af:6e:de:86:06:db:b6:
                    9c:93:49:f9:9d:52:43:a7:d6:dc:87:90:9e:dd:91:
                    e5:6d:df:3f:69:21:33:d1:66:88:39:3a:0a:f4:22:
                    88:4c:63:6e:d5:7e:81:cf:63:4f:9c:32:46:0c:81:
                    25:1c:2f:2f:ee:07:8f:e0:c9:9b:8f:33:5e:58:68:
                    2f:5a:04:33:e6:1d:fe:44:75:15:ac:04:b3:38:bd:
                    88:4b:f9:2e:8f:c0:2a:7d:98:81:1d:ff:b1:be:e8:
                    75:e1:6a:19:10:c5:a2:b2:3e:60:3d:cb:bc:5c:80:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:BE:89:86:4D:16:82:44:86:CD:97:D8:EA:6D:CE:6C:4E:7E:AC
            X509v3 Authority Key Identifier:
                keyid:79:DF:50:E2:68:94:BB:0E:81:35:96:06:D8:2B:71:90:C1:75:98:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed9Q4miUuw6BNZYG2CtxkMF1mMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/EhG-iYZNFoJEhs2X2OptzmxOfqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/782447-ec8b-4289-9c1c-28f960eb7a39/1/ed9Q4miUuw6BNZYG2CtxkMF1mMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.148.0/22
                IPv6:
                  2a05:68c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8c:ce:ae:ab:98:45:fd:cb:87:11:c4:a1:ec:70:b0:0d:6b:05:
         82:58:89:d0:4e:2c:57:39:99:b4:dd:04:33:45:b6:84:37:25:
         3c:17:e2:78:02:2e:21:5b:c1:c1:fe:e5:7e:19:11:87:4a:aa:
         a9:0b:a2:d0:97:c8:2b:40:40:c2:55:66:56:f0:bd:d2:2d:87:
         f6:e5:ab:cd:ad:fb:ab:09:a7:d0:e9:8d:c6:b2:c2:c1:a6:cf:
         6e:b5:24:d3:ab:9b:0d:cd:65:65:b0:8d:5b:b7:e8:c6:ea:86:
         2b:da:f7:1c:ec:6d:ea:0e:50:90:12:9e:e7:08:c4:a7:c2:ad:
         5f:af:4e:06:2d:ca:59:b5:b4:52:cc:8c:fd:43:cb:64:7d:de:
         9a:60:b6:c5:3b:81:46:5d:09:67:8f:eb:a5:44:eb:e8:da:2f:
         8f:1c:59:ea:89:51:db:38:f4:af:91:8e:66:6a:2a:e2:18:27:
         00:64:95:c1:66:09:6c:6a:18:b8:e6:93:9a:28:40:d8:30:28:
         e4:03:4d:f2:28:75:54:ec:b0:3b:b2:42:5d:87:e1:6f:b6:23:
         1c:23:fd:86:e8:8c:7d:90:c8:75:e9:00:4f:71:25:c2:65:54:
         c7:c9:77:36:52:aa:02:ab:21:3e:70:e2:5f:94:1b:5f:60:4a:
         8c:a5:83:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:38 2026 by rpki-client