This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/EOVG1E-Fss-TCAZp6FvBla5puoE.roa
File:                     EOVG1E-Fss-TCAZp6FvBla5puoE.roa (raw, json)
Hash identifier:          QLZCSRXuXCEog/Ml5Xp9IxcczY5XpGCzAWi6jfDK03o=
Subject key identifier:   10:E5:46:D4:4F:85:B2:CF:93:08:06:69:E8:5B:C1:95:AE:69:BA:81
Certificate issuer:       /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial:       019B7BA51C35928BA29133E0D99412E27619
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/EOVG1E-Fss-TCAZp6FvBla5puoE.roa
Signing time:             Thu 01 Jan 2026 22:19:36 +0000
ROA not before:           Thu 01 Jan 2026 22:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44329
IP address blocks:        193.109.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:1c:35:92:8b:a2:91:33:e0:d9:94:12:e2:76:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
        Validity
            Not Before: Jan  1 22:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=10e546d44f85b2cf93080669e85bc195ae69ba81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:86:a7:22:43:56:5c:8b:b5:53:e3:20:cb:df:
                    75:87:dc:bf:ce:b1:28:65:ac:74:af:c2:dd:b4:43:
                    78:c2:46:6d:52:4c:e7:fc:1c:10:55:f2:0d:e4:0a:
                    fc:cc:28:e9:a2:22:ca:32:85:fb:23:f9:8c:1d:73:
                    05:10:0d:92:79:0d:bf:3d:61:df:fb:e1:77:25:d3:
                    fb:3e:f1:7a:98:65:a0:e9:1a:7d:13:fc:26:28:04:
                    2e:d7:b6:a2:1b:fd:04:07:3b:c1:75:71:5b:e7:4c:
                    f8:51:13:de:56:85:8d:85:44:6c:ad:5e:55:2b:2d:
                    c7:02:92:af:5c:2d:d2:52:43:5c:e8:78:67:e1:cc:
                    f6:77:b5:a5:da:f0:3e:63:88:c8:58:67:7b:3d:de:
                    52:5c:1a:cf:fc:5e:c2:60:47:a8:9d:ee:d3:40:f0:
                    11:e5:78:1f:2f:12:5c:52:81:be:6b:9b:8a:ab:1c:
                    cb:7b:26:0a:76:96:43:cb:5b:df:21:1a:46:db:75:
                    a7:86:66:87:ed:7b:88:b3:48:20:db:ab:70:8e:8e:
                    5f:de:e7:48:04:42:a8:1c:2f:6b:4d:99:ea:8c:f6:
                    0d:fe:7a:4c:45:01:b6:2a:84:87:ef:84:1f:eb:d2:
                    07:42:6d:78:49:07:33:b4:db:cd:a5:e4:8f:58:fb:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E5:46:D4:4F:85:B2:CF:93:08:06:69:E8:5B:C1:95:AE:69:BA:81
            X509v3 Authority Key Identifier:
                keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/EOVG1E-Fss-TCAZp6FvBla5puoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:e6:b9:e7:fb:84:0d:48:75:c7:03:a0:44:78:c3:1c:e6:
         8f:ae:f1:08:51:62:06:bc:91:51:71:5b:41:87:fa:e7:5a:33:
         88:d2:69:f4:6a:96:fa:8a:2c:76:d5:ab:45:86:b3:fc:7e:24:
         26:f4:bf:8b:30:c9:97:94:ab:b7:fb:41:21:f4:e7:85:d4:12:
         70:ce:63:e0:1b:4f:68:3f:85:bf:c6:2d:a4:b9:b0:fa:a1:03:
         6f:21:5f:d1:71:d8:0f:82:a3:d2:11:ea:90:62:64:7d:3d:35:
         24:a6:00:fe:00:16:d1:2e:43:80:11:fc:31:35:08:bd:b9:6e:
         0f:16:82:fd:fb:7b:2c:4d:bc:2a:65:2b:68:fc:dd:99:ac:2c:
         1a:64:e4:70:e5:49:b2:0d:f3:ef:c0:b9:cd:59:c7:0f:04:ee:
         da:3f:5c:6e:bd:19:75:3e:47:8b:77:03:77:28:8e:08:4c:25:
         24:c5:4a:a7:f5:10:e0:d6:fb:89:a6:be:8e:89:32:1d:d9:80:
         91:9c:d5:f5:db:ba:f9:67:15:bc:a8:72:db:31:91:26:4a:5b:
         9c:82:7e:a0:71:b5:85:47:53:00:fc:8f:09:5c:15:f5:ab:72:
         2b:ef:e3:92:88:3d:67:87:2e:f2:6f:e2:58:62:c9:0f:06:da:
         9c:ad:14:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:24 2026 by rpki-client