This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2ixhfEikxksljZta27LQrDoTauQ.roa
File:                     2ixhfEikxksljZta27LQrDoTauQ.roa (raw, json)
Hash identifier:          XQteM1cNrwebXQAKpW0VZ/zeYzjTmDP02b7E+myH6K0=
Subject key identifier:   DA:2C:61:7C:48:A4:C6:4B:25:8D:9B:5A:DB:B2:D0:AC:3A:13:6A:E4
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019B7CEE4E2D5F2E2C10877F8BD82B5882D6
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2ixhfEikxksljZta27LQrDoTauQ.roa
Signing time:             Fri 02 Jan 2026 04:19:10 +0000
ROA not before:           Fri 02 Jan 2026 04:19:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18186
IP address blocks:        87.229.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:4e:2d:5f:2e:2c:10:87:7f:8b:d8:2b:58:82:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jan  2 04:19:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=da2c617c48a4c64b258d9b5adbb2d0ac3a136ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:7c:71:c9:be:8c:6f:a1:1f:81:dd:d1:6b:
                    8a:bb:9b:b4:8b:0d:da:67:da:fc:72:b5:3a:1b:5b:
                    a7:6a:e5:82:b5:03:6c:a6:08:1b:e0:5e:02:99:90:
                    d3:99:1c:c0:45:77:97:96:40:67:fb:dc:24:20:48:
                    ad:f8:42:f1:69:12:2e:92:12:58:ef:b2:c2:92:ce:
                    95:08:51:3a:e8:fd:31:ac:e4:b2:f2:4c:b5:6c:1b:
                    74:60:bc:1d:66:d7:45:c6:2c:b9:39:03:fc:93:aa:
                    71:75:6f:b0:c8:ac:d2:8e:45:1e:c1:57:41:c4:e7:
                    d6:e3:5f:14:5f:32:9e:42:d6:bd:d4:8a:66:fb:b5:
                    a4:b1:18:51:2b:d5:71:b9:b6:a9:e2:68:0a:98:31:
                    f1:cc:ba:d1:44:5f:36:63:98:e1:23:f5:f3:8c:70:
                    6a:13:80:2f:2d:d9:f4:aa:70:a5:c4:59:ea:14:26:
                    eb:22:cf:dc:74:eb:69:fb:22:02:26:e4:24:24:05:
                    25:63:37:f6:9f:93:9d:61:e7:04:00:1f:38:9a:08:
                    66:85:f2:6b:d7:93:95:51:41:dc:8a:a6:ed:4d:51:
                    7e:c5:4c:65:f7:bc:79:b7:4a:8e:9d:4a:5e:07:80:
                    db:54:29:07:04:07:2d:93:db:75:3e:08:94:44:4d:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2C:61:7C:48:A4:C6:4B:25:8D:9B:5A:DB:B2:D0:AC:3A:13:6A:E4
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/2ixhfEikxksljZta27LQrDoTauQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:57:ba:f4:84:75:8b:30:c6:f2:c3:36:f4:47:22:1e:39:d3:
         04:e2:7e:70:5c:45:26:95:f2:86:fa:27:7c:81:d4:73:4a:3c:
         d6:bf:1d:f7:95:99:1d:18:a9:f3:14:c7:53:33:46:a1:2a:7e:
         25:55:d7:e6:57:a7:fb:3c:85:19:97:ca:e5:6d:ef:22:2d:4b:
         ef:2d:cb:7d:52:74:4d:29:2f:92:dd:67:43:3b:1c:c0:9f:15:
         e8:29:ab:6b:77:7c:15:0e:55:af:ce:e9:3b:50:4e:b5:e7:ac:
         14:8e:ef:fa:2d:4b:99:23:10:cf:4f:87:44:5b:dd:4c:7d:d5:
         f0:6c:7b:54:96:d5:76:b7:16:ee:30:a8:3e:39:e9:09:79:01:
         58:f1:49:61:99:1e:ed:61:9f:9b:05:44:56:5f:f0:72:19:32:
         39:71:63:5f:c0:0b:f7:a7:29:67:90:6c:bd:00:70:4c:0e:56:
         10:bd:fd:c5:c7:7f:d4:a2:d8:17:96:b6:04:e1:ed:30:fd:b9:
         f4:31:8d:f0:ec:03:af:09:74:60:34:d3:a2:eb:2c:04:26:bc:
         b5:28:2c:a1:ba:a9:24:65:9b:cc:b2:ad:d1:84:10:32:bf:b3:
         01:82:7c:48:cf:23:dc:2f:ba:6a:26:3a:a2:3e:dc:ab:50:d7:
         d1:e3:93:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:49:12 2026 by rpki-client