This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa
File:                     eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (raw, json)
Hash identifier:          yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=
Subject key identifier:   78:C1:83:75:B5:91:1F:96:7B:1A:07:33:FC:2F:94:B9:68:32:B5:20
Certificate issuer:       /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial:       019B775944DACF576177A4EA664C20FDD60D
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa
Signing time:             Thu 01 Jan 2026 02:18:17 +0000
ROA not before:           Thu 01 Jan 2026 02:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59455
IP address blocks:        185.79.108.0/23 maxlen: 23
                          193.33.116.0/23 maxlen: 23
                          193.111.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:44:da:cf:57:61:77:a4:ea:66:4c:20:fd:d6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
        Validity
            Not Before: Jan  1 02:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78c18375b5911f967b1a0733fc2f94b96832b520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5e:ba:da:04:84:46:d0:d4:63:20:27:38:10:
                    05:29:3c:68:93:9e:c9:01:55:20:a4:a6:6c:57:3a:
                    3c:7a:52:55:d7:6d:49:93:fa:68:65:ff:57:5f:d1:
                    8d:ef:4a:bf:5d:fe:b1:26:51:40:7d:c1:58:47:b7:
                    fa:74:b8:91:09:c8:a3:99:27:2a:b0:93:1f:e6:b1:
                    3b:6c:a1:f8:58:7f:fe:fc:1b:d1:f8:77:13:f0:48:
                    b5:03:d1:f7:a4:87:b8:e8:b1:33:ed:20:d3:5b:bb:
                    4b:57:74:42:3d:30:67:cf:59:94:e4:a6:bd:b3:12:
                    72:62:bc:15:44:8d:5b:2f:9b:88:db:68:04:20:ec:
                    5d:97:f3:7c:88:eb:b3:02:91:67:96:6b:bc:4a:e2:
                    ee:33:e2:5b:d2:78:6f:84:30:3d:ed:e1:23:d7:26:
                    ba:38:84:ad:c1:d3:28:ff:19:32:89:8b:44:a7:69:
                    e9:8d:1a:ca:44:2e:ab:c3:ac:94:18:42:b5:10:15:
                    ad:09:cf:37:62:7e:e6:79:1a:37:81:08:90:d4:d2:
                    7f:45:6a:4c:de:82:30:35:b0:6f:c1:be:44:3c:51:
                    a0:88:cd:ce:c4:f9:04:31:c9:de:75:37:ba:98:7d:
                    ef:9c:55:04:de:18:79:99:37:0c:49:38:70:b0:e7:
                    6d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:83:75:B5:91:1F:96:7B:1A:07:33:FC:2F:94:B9:68:32:B5:20
            X509v3 Authority Key Identifier:
                keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.108.0/23
                  193.33.116.0/23
                  193.111.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:8e:e7:d8:2d:2e:87:79:48:bd:66:7a:08:be:aa:0a:d0:9d:
         d7:aa:49:a1:4e:b1:09:d8:8a:fc:0f:44:cb:b7:9f:85:d2:c8:
         ec:75:3d:01:a0:5f:b3:93:71:86:bf:49:c3:c1:9e:e5:f0:70:
         b2:fe:43:ae:21:f2:de:10:b4:21:ac:ff:ff:b4:e4:15:c2:05:
         a8:32:fe:6d:87:83:19:b3:11:02:a3:28:cf:79:8d:d8:59:f2:
         e0:07:43:e3:70:2f:61:e0:d4:8b:76:2a:79:83:32:d1:66:0c:
         86:8c:56:70:3f:a5:21:61:b0:3f:fc:0e:48:cd:d8:75:16:6e:
         f1:53:9f:2e:05:d8:ef:09:11:61:ea:3e:2b:93:cd:d0:13:b8:
         4c:56:3c:8d:47:e3:a1:27:b6:2a:f4:ce:55:09:21:90:48:e5:
         90:50:dc:57:5a:dc:d2:0a:ee:f3:c3:41:04:47:51:a7:f4:87:
         3c:3a:c1:cd:69:28:f2:54:8a:16:01:5d:e9:44:ab:8a:e1:c2:
         86:0a:da:16:82:f4:37:d4:98:45:a1:c5:ce:4e:ce:15:2a:c7:
         52:6f:92:0c:c5:40:1d:ba:2e:26:26:f0:0a:c0:37:44:25:cc:
         3e:1b:01:4c:f3:52:fd:d2:27:42:ad:96:67:52:a3:91:2d:8f:
         b7:30:f3:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt3WUTaz1dhd6TqZkwg/dYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMWUyODM1OWMxODBlYTZjNDg4YTk4Y2EzYWY3N2I1YmI3
OTNkZWUwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGMxODM3NWI1OTExZjk2N2IxYTA3MzNmYzJmOTRiOTY4MzJiNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51662gSERtDUYyAnOBAFKTxok57J
AVUgpKZsVzo8elJV121Jk/poZf9XX9GN70q/Xf6xJlFAfcFYR7f6dLiRCcijmScq
sJMf5rE7bKH4WH/+/BvR+HcT8Ei1A9H3pIe46LEz7SDTW7tLV3RCPTBnz1mU5Ka9
sxJyYrwVRI1bL5uI22gEIOxdl/N8iOuzApFnlmu8SuLuM+Jb0nhvhDA97eEj1ya6
OIStwdMo/xkyiYtEp2npjRrKRC6rw6yUGEK1EBWtCc83Yn7meRo3gQiQ1NJ/RWpM
3oIwNbBvwb5EPFGgiM3OxPkEMcnedTe6mH3vnFUE3hh5mTcMSThwsOdtxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHjBg3W1kR+WexoHM/wvlLloMrUgMB8GA1UdIwQY
MBaAFCMeKDWcGA6mxIipjKOvd7W7eT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2It
NWIzNGJjMzc4NDM2LzEvZU1HRGRiV1JINVo3R2djel9DLVV1V2d5dFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2ItNWIzNGJjMzc4NDM2
LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuU9sAwQB
wSF0AwQAwW8hMA0GCSqGSIb3DQEBCwUAA4IBAQCxjufYLS6HeUi9ZnoIvqoK0J3X
qkmhTrEJ2Ir8D0TLt5+F0sjsdT0BoF+zk3GGv0nDwZ7l8HCy/kOuIfLeELQhrP//
tOQVwgWoMv5th4MZsxECoyjPeY3YWfLgB0PjcC9h4NSLdip5gzLRZgyGjFZwP6Uh
YbA//A5Izdh1Fm7xU58uBdjvCRFh6j4rk83QE7hMVjyNR+OhJ7Yq9M5VCSGQSOWQ
UNxXWtzSCu7zw0EER1Gn9Ic8OsHNaSjyVIoWAV3pRKuK4cKGCtoWgvQ31JhFocXO
Ts4VKsdSb5IMxUAdui4mJvAKwDdEJcw+GwFM81L90idCrZZnUqORLY+3MPO6
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:11:14 2026 by rpki-client