This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/tq5QKqbMMTaUnj8tOh43h-aM2MA.roa
File:                     tq5QKqbMMTaUnj8tOh43h-aM2MA.roa (raw, json)
Hash identifier:          Kr/dZ1o0wiqZMbEqoVrPXCiIdUPvP+Mdp3n01wZE5Kc=
Subject key identifier:   B6:AE:50:2A:A6:CC:31:36:94:9E:3F:2D:3A:1E:37:87:E6:8C:D8:C0
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       019B7EA6F0666A499858D9586FF48BD91A7B
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/tq5QKqbMMTaUnj8tOh43h-aM2MA.roa
Signing time:             Fri 02 Jan 2026 12:20:28 +0000
ROA not before:           Fri 02 Jan 2026 12:20:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49102
IP address blocks:        93.159.128.0/18 maxlen: 18
                          2a00:1578::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:f0:66:6a:49:98:58:d9:58:6f:f4:8b:d9:1a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  2 12:20:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b6ae502aa6cc3136949e3f2d3a1e3787e68cd8c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:37:2e:a8:07:b1:3c:13:c8:da:56:b2:2e:
                    86:2c:83:18:2a:94:40:b0:54:3e:a7:b8:5b:89:7e:
                    e5:fe:dd:5e:4d:0f:8e:93:f2:23:9d:34:69:9f:c0:
                    3f:6c:1f:ea:05:87:80:2a:a4:65:d6:08:ec:fb:5c:
                    fd:93:69:5c:81:3c:e9:1d:6a:15:40:8a:12:88:03:
                    24:5a:2f:cb:71:ee:0a:12:25:ae:7c:c1:c8:1f:ab:
                    26:15:ae:a7:da:cf:f2:e1:16:dd:4e:f6:3a:8a:a5:
                    74:df:48:bc:24:26:83:5f:11:1b:5e:99:6c:9b:39:
                    dc:d1:1c:88:3a:92:5d:c9:21:61:6e:c0:a1:f4:79:
                    af:b6:59:2c:93:2c:d3:9a:8f:89:6f:4e:83:bc:89:
                    d0:9a:17:00:7a:4c:a3:0a:c8:49:5e:5b:19:32:84:
                    5b:94:f3:d9:8d:f2:31:fc:2f:da:77:1a:fe:18:c4:
                    0b:b5:1b:6c:57:01:0c:29:13:18:b1:67:ec:37:b3:
                    6c:c4:6d:8d:2d:47:b5:14:b4:ee:99:52:55:37:b8:
                    78:30:25:81:ad:11:12:4e:2a:56:6b:f0:7b:cf:f1:
                    ea:81:d6:c5:65:95:9b:96:2f:ad:fd:be:3f:35:00:
                    e8:c4:e3:be:92:55:be:cd:29:e8:3d:a7:68:41:67:
                    ed:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AE:50:2A:A6:CC:31:36:94:9E:3F:2D:3A:1E:37:87:E6:8C:D8:C0
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/tq5QKqbMMTaUnj8tOh43h-aM2MA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.128.0/18
                IPv6:
                  2a00:1578::/29

    Signature Algorithm: sha256WithRSAEncryption
         b3:ac:18:a7:02:a5:54:71:df:a5:cc:f2:fd:19:d0:91:aa:ab:
         80:de:ee:c5:6a:3d:95:b8:79:22:68:c3:e1:ed:34:69:b8:21:
         c3:3a:2c:15:ce:bc:4e:8c:82:1d:21:da:25:aa:05:cc:2d:41:
         da:7d:dd:b1:4a:aa:89:2c:f3:c5:34:77:de:ce:c1:e7:b7:e6:
         be:21:20:78:c6:1e:3b:04:a2:ac:b8:8a:df:39:a6:fa:da:66:
         5d:21:b2:ca:78:3a:f9:f3:7e:f3:15:6e:12:c8:bd:18:ae:2a:
         6a:cd:a4:3c:50:f5:54:a3:49:b4:0f:ff:9e:0e:58:a3:52:97:
         1f:43:b0:25:78:e1:ea:b3:11:42:9e:4d:e7:52:e0:d6:a8:ae:
         21:5d:d1:03:be:8e:8e:6e:10:da:cc:d9:ec:b5:46:3b:65:be:
         11:90:06:5a:f0:3f:a2:d8:bc:f1:99:f1:b4:fc:6b:c9:65:75:
         ad:53:85:bc:58:c5:80:38:0e:40:28:5a:32:a3:1f:79:bf:99:
         75:e0:00:70:cd:ec:7a:59:8d:19:21:4a:8a:3b:a3:b2:85:99:
         c4:77:0a:55:26:b4:38:e1:b9:e3:58:0a:01:10:c1:26:a9:39:
         09:b7:b9:10:97:56:a2:83:1e:5b:42:f2:45:6e:7b:28:2d:ed:
         20:f1:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:21:18 2026 by rpki-client