This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eVUCZ2gkOg648kh9IahZkIBOJA8.roa
File:                     eVUCZ2gkOg648kh9IahZkIBOJA8.roa (raw, json)
Hash identifier:          vMKWl4EbBRXZC+tfwMZgbq5f1CG1UUPRzQXxRawEkC0=
Subject key identifier:   79:55:02:67:68:24:3A:0E:B8:F2:48:7D:21:A8:59:90:80:4E:24:0F
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       019B7C80A1D538545DD510D8E61BBE7BE507
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eVUCZ2gkOg648kh9IahZkIBOJA8.roa
Signing time:             Fri 02 Jan 2026 02:19:23 +0000
ROA not before:           Fri 02 Jan 2026 02:19:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        85.204.78.0/24 maxlen: 24
                          93.113.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:a1:d5:38:54:5d:d5:10:d8:e6:1b:be:7b:e5:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Jan  2 02:19:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7955026768243a0eb8f2487d21a85990804e240f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c0:3b:60:fc:d6:a5:13:a6:58:c0:9e:06:ac:
                    c3:b2:1d:0f:46:b7:25:45:0f:56:4b:9f:aa:71:4e:
                    15:fa:c7:ba:c9:0b:19:4d:d3:73:1a:e8:de:e1:64:
                    7d:7b:a1:ff:00:db:9a:59:c0:41:8e:2b:90:0f:2a:
                    fb:d5:c2:de:5e:b2:b8:13:71:ea:30:2b:6e:e3:94:
                    26:1a:2d:c0:3c:af:9b:c4:d5:57:e0:e2:b3:3d:c4:
                    94:63:44:f8:20:44:fd:27:40:c8:3c:39:62:82:8e:
                    07:9a:2a:5e:6b:c0:7c:10:20:b5:62:58:aa:9a:e1:
                    2d:94:38:93:b5:7f:3d:96:40:57:6c:b3:43:1f:ce:
                    ac:5f:ba:3e:11:38:e1:a6:9a:90:15:35:6b:df:0b:
                    40:ae:14:cc:50:b6:8b:5f:cd:39:c1:e7:0e:1c:75:
                    2c:80:5d:f6:de:b8:a8:72:47:dd:7c:83:fd:e8:ef:
                    af:74:d6:88:62:6c:92:c4:15:3c:cf:cb:d7:65:4b:
                    62:3f:3b:0a:83:a9:23:a7:53:12:9c:cf:16:11:45:
                    d3:51:ea:90:e4:5c:74:31:3a:25:2f:a4:e0:9d:bc:
                    fa:c5:34:c5:42:d4:dd:05:92:f2:f0:c1:27:36:ee:
                    db:13:55:73:a9:0e:49:16:4e:66:e7:68:b1:9f:5f:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:55:02:67:68:24:3A:0E:B8:F2:48:7D:21:A8:59:90:80:4E:24:0F
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/eVUCZ2gkOg648kh9IahZkIBOJA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.204.78.0/24
                  93.113.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:93:81:be:3c:bd:73:e6:f3:fa:57:ee:d7:17:3b:49:14:6f:
         78:9e:25:c2:cc:43:26:03:0f:c9:f9:c9:18:65:b6:86:1d:7f:
         d7:b1:70:22:6a:78:c6:a9:96:63:10:8b:d1:33:12:6b:11:90:
         f6:e1:9e:87:1c:39:cb:91:d5:35:a1:c9:ba:c2:63:bb:ea:9f:
         26:fa:55:62:a0:17:f9:50:a4:8b:0b:fb:31:03:7b:db:1e:26:
         fc:13:85:f2:a6:66:0a:b5:a5:89:80:0c:e7:fe:0b:2c:68:a1:
         63:99:f4:fd:93:29:97:08:aa:07:75:ff:de:bf:6a:de:c0:30:
         fd:48:00:18:a5:45:dc:ab:90:4e:85:d1:02:b1:ae:ed:95:c1:
         78:63:80:84:a3:da:50:d4:5a:f5:3a:25:27:9c:62:78:78:d5:
         bd:98:64:dc:43:b0:c4:5f:b0:29:70:fe:65:cb:8f:82:20:cd:
         30:9f:f6:42:c7:67:2c:7c:0e:53:4e:85:b5:52:7c:ea:74:3c:
         80:90:8a:2a:61:47:05:9c:f0:a4:fe:2a:d3:3f:75:02:99:87:
         92:ee:76:3d:8d:fc:9e:a6:18:be:27:58:e8:1c:82:4f:31:6e:
         fc:d8:4a:7a:4a:21:2b:e1:9a:97:80:18:76:1c:98:f5:11:d6:
         29:6e:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:48:13 2026 by rpki-client