This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/eVoNOatSRfhuXM7VthqXLINerLI.roa
File:                     eVoNOatSRfhuXM7VthqXLINerLI.roa (raw, json)
Hash identifier:          ztlCcPqCI+akzeK//M1QjBNCZ/FiH8i56TSQ9QdKnuc=
Subject key identifier:   79:5A:0D:39:AB:52:45:F8:6E:5C:CE:D5:B6:1A:97:2C:83:5E:AC:B2
Certificate issuer:       /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial:       019B7834C815C78ED7D9F616864D99A5FDA7
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/eVoNOatSRfhuXM7VthqXLINerLI.roa
Signing time:             Thu 01 Jan 2026 06:18:03 +0000
ROA not before:           Thu 01 Jan 2026 06:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56754
IP address blocks:        94.176.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:c8:15:c7:8e:d7:d9:f6:16:86:4d:99:a5:fd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
        Validity
            Not Before: Jan  1 06:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=795a0d39ab5245f86e5cced5b61a972c835eacb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:26:7e:9c:f4:73:72:d8:27:09:fc:6e:e1:
                    d4:7b:4e:50:3a:06:c7:3b:05:fc:d7:cb:fe:c8:21:
                    d3:d2:e3:47:a7:83:c0:5b:5d:f9:ed:aa:f2:79:a6:
                    f1:27:1d:f4:db:7c:c5:46:ac:7a:5d:53:34:56:65:
                    13:79:b0:c2:3c:6c:41:99:7d:aa:b3:0c:b7:15:85:
                    23:d0:1e:9d:84:8c:c3:3a:8d:e3:17:65:ee:c0:d8:
                    63:7d:0f:a9:06:38:5a:2c:21:3f:90:be:71:bc:57:
                    13:9f:45:ad:49:b2:63:88:6d:d7:fa:de:8e:4a:2d:
                    b9:8d:8a:cb:02:55:5e:9c:33:3c:08:ea:d5:a7:eb:
                    cb:57:51:0e:99:89:9a:b5:67:32:0d:74:d7:54:6d:
                    0e:b3:05:66:cc:84:75:0a:af:6c:35:f7:ac:dc:fc:
                    c6:11:fb:23:af:da:b5:7e:90:2c:59:d1:04:ba:e4:
                    05:03:1c:29:64:82:c7:4e:ec:06:69:2d:47:d9:60:
                    18:8b:9b:eb:4e:2d:9b:09:e3:8a:ee:8a:94:78:a1:
                    5f:e4:11:53:e8:14:ea:fa:5f:5c:f1:84:9b:36:cf:
                    0f:8d:bd:2e:3a:26:fc:e6:9d:d7:ed:7b:1a:af:bb:
                    32:a4:93:84:bc:99:d8:bd:35:80:f2:91:32:af:bf:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5A:0D:39:AB:52:45:F8:6E:5C:CE:D5:B6:1A:97:2C:83:5E:AC:B2
            X509v3 Authority Key Identifier:
                keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/eVoNOatSRfhuXM7VthqXLINerLI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:20:d2:aa:0f:f0:1c:9e:30:04:30:01:92:f9:3a:82:c1:f3:
         13:61:bc:b5:24:dc:d4:38:b0:b1:17:fa:16:0a:b1:17:fe:9b:
         ca:33:52:b8:6c:7d:f0:bf:5b:d0:86:be:a7:31:d7:85:66:47:
         4f:59:74:8d:18:c0:34:20:d6:14:00:46:76:bf:ab:a4:09:d2:
         8e:d3:50:f7:b7:60:6f:ab:fd:f1:12:ea:68:0b:87:48:19:91:
         64:94:25:6f:a2:94:2b:97:95:3a:cc:b9:87:2f:5f:80:17:52:
         f5:92:a8:de:a4:3b:a3:b7:a6:c3:b8:63:e0:3f:55:c4:c5:4a:
         01:fc:f7:f5:b2:a0:71:dd:43:22:3b:e3:93:0c:5d:6c:ac:18:
         08:29:9c:50:07:9b:3a:66:7b:56:8e:f9:d3:22:b6:67:31:3b:
         4c:20:3d:a6:d1:75:b4:fd:4a:c3:e5:40:c4:35:3e:1f:c8:25:
         0b:ed:90:91:1c:93:58:11:6b:8f:9b:4d:1a:27:83:30:eb:9e:
         7e:ca:ad:ee:87:9f:32:f4:74:d7:b7:db:0f:b3:48:08:07:27:
         9a:e2:b0:3f:6c:ea:a1:6f:90:ac:7d:86:9c:97:27:94:4f:cb:
         4e:36:8d:10:fe:b6:8c:42:95:02:a9:23:8b:d6:26:44:5d:a2:
         c5:82:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:42 2026 by rpki-client