This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/7zjuMpSlT2aP7S1emNMPu08nhaM.roa
File:                     7zjuMpSlT2aP7S1emNMPu08nhaM.roa (raw, json)
Hash identifier:          pmrlJgUnhMLcWKoghbqDtSCeAr5KHP5AIQALOgBZFjc=
Subject key identifier:   EF:38:EE:32:94:A5:4F:66:8F:ED:2D:5E:98:D3:0F:BB:4F:27:85:A3
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       019B7EA6F1A28A10675029CFABC4C7AAFE2E
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/7zjuMpSlT2aP7S1emNMPu08nhaM.roa
Signing time:             Fri 02 Jan 2026 12:20:28 +0000
ROA not before:           Fri 02 Jan 2026 12:20:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199774
IP address blocks:        93.159.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:f1:a2:8a:10:67:50:29:cf:ab:c4:c7:aa:fe:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  2 12:20:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef38ee3294a54f668fed2d5e98d30fbb4f2785a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:b6:f3:e4:bf:a6:77:f2:93:a1:b8:64:90:
                    8d:92:a2:e7:31:db:64:7d:bb:b6:da:96:df:3c:87:
                    d1:95:60:c5:95:74:c6:1d:ec:f1:cc:1f:ed:99:b5:
                    87:bf:c7:59:39:ee:67:7c:54:65:4a:ff:ed:66:e3:
                    3d:2d:9b:60:57:db:c2:e3:36:c9:f0:90:a3:a9:d2:
                    9f:9c:26:e0:1b:4d:50:5a:5a:f1:92:60:02:48:be:
                    26:ac:92:46:6d:ca:15:36:94:65:52:2d:e2:f6:00:
                    24:a0:6f:00:1b:ef:c0:b0:a4:48:ef:46:6c:3e:b0:
                    22:b8:90:bc:bd:fb:32:97:ae:64:ed:89:ab:15:09:
                    96:13:62:85:59:0e:6b:62:40:de:bf:05:d0:58:1c:
                    c9:46:92:02:f1:4a:3a:89:50:e1:7a:c6:cb:e1:27:
                    19:8e:ff:d3:7d:a1:e9:54:a7:e6:c9:fd:c9:a6:3b:
                    cd:93:05:1d:f7:fa:39:c3:d1:19:be:6b:9d:35:a7:
                    1d:bd:4d:0c:d4:01:cf:8d:cd:df:4c:17:17:2d:51:
                    e6:09:90:06:e1:28:32:94:66:02:73:50:a7:76:6a:
                    18:80:00:5b:2e:11:f0:c4:b7:41:cd:6b:4d:27:c1:
                    74:45:cd:72:6f:6f:77:7b:fd:5c:e1:4e:84:5e:03:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:38:EE:32:94:A5:4F:66:8F:ED:2D:5E:98:D3:0F:BB:4F:27:85:A3
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/7zjuMpSlT2aP7S1emNMPu08nhaM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:62:1e:ed:22:6e:49:69:a7:93:7b:e3:16:e3:f5:2c:11:a2:
         20:1b:c2:a0:44:29:60:6a:2f:c1:58:25:f7:ff:71:30:d7:c4:
         a0:36:52:1f:01:14:94:e9:45:71:6f:36:a1:58:bf:e5:e8:18:
         26:60:5b:c8:df:05:df:32:0c:71:b3:c4:2c:2e:f4:a6:80:ce:
         e4:c8:8f:5b:46:5b:2c:5e:04:ec:c4:a2:a3:68:ca:8d:27:e5:
         ad:ec:73:7e:0d:a9:47:d7:f3:a1:3d:13:34:ab:0e:e5:c2:0e:
         bf:f1:e3:06:e1:ce:d0:d1:39:1a:ac:b4:cd:22:07:f9:c8:a3:
         0e:33:18:d5:3e:57:d0:36:bd:f8:32:ff:d1:9f:67:da:c9:15:
         13:3e:cc:d1:ce:0b:63:94:a3:8f:c6:65:cd:f0:df:cc:06:7a:
         95:94:f7:af:31:34:f1:21:d4:6a:e7:14:cc:91:1a:b5:16:65:
         6a:cf:4b:d7:b0:99:c4:da:21:ac:e5:3d:ce:17:8d:cb:78:8a:
         c4:e9:be:8e:c7:fa:df:5f:13:87:06:5f:74:be:72:c7:25:92:
         76:32:c7:e8:fb:ca:cb:ec:b1:a4:72:2c:ad:53:2d:8a:0a:fb:
         14:20:c5:ad:4a:c0:7d:ef:c9:ed:23:fd:a4:e1:73:df:86:0f:
         93:7a:ae:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:45 2026 by rpki-client