This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/e-UyDpfAgeCXwVCZG2C_8K2xub8.roa
File:                     e-UyDpfAgeCXwVCZG2C_8K2xub8.roa (raw, json)
Hash identifier:          9M9KcCzKHonhmbTtNOcC9taMG1LtCMlTc8IfcKGHBuU=
Subject key identifier:   7B:E5:32:0E:97:C0:81:E0:97:C1:50:99:1B:60:BF:F0:AD:B1:B9:BF
Certificate issuer:       /CN=13fc5ddf49e36d69936301ad22bf243a471b524c
Certificate serial:       019B7C7FF299EEDEE4A8374D13BDA801BB3E
Authority key identifier: 13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/e-UyDpfAgeCXwVCZG2C_8K2xub8.roa
Signing time:             Fri 02 Jan 2026 02:18:38 +0000
ROA not before:           Fri 02 Jan 2026 02:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204478
IP address blocks:        185.11.168.0/22 maxlen: 22
                          185.41.76.0/22 maxlen: 22
                          185.70.68.0/22 maxlen: 22
                          185.108.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:f2:99:ee:de:e4:a8:37:4d:13:bd:a8:01:bb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fc5ddf49e36d69936301ad22bf243a471b524c
        Validity
            Not Before: Jan  2 02:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7be5320e97c081e097c150991b60bff0adb1b9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:04:fb:37:63:7f:59:16:2c:95:58:71:4d:
                    e5:26:52:23:66:3e:fa:30:8f:ea:47:5c:39:32:29:
                    65:47:80:36:ea:e4:67:52:47:0b:b3:80:07:80:03:
                    18:d8:73:c7:8b:2b:91:0a:77:64:2c:73:6c:87:6e:
                    51:c0:e5:6e:f1:23:52:01:e6:83:ff:b2:40:bd:ec:
                    cd:0a:a8:cf:56:ad:bd:62:c4:fb:b5:a7:e8:4b:a2:
                    24:5c:49:9d:81:6f:fb:21:a0:bc:09:3e:86:f2:f4:
                    93:de:2c:5f:1a:77:13:41:23:62:9d:6b:63:6c:e0:
                    ef:a5:28:a4:63:b5:f9:04:cd:51:f2:0c:1b:2a:1f:
                    3b:34:8f:97:3e:ca:4e:8d:b0:32:ef:7b:12:8d:c1:
                    45:5f:33:1a:db:e3:f9:c9:bc:29:2b:26:42:29:ea:
                    e0:13:b8:06:16:74:fc:f1:34:98:52:68:ab:9d:1b:
                    cf:83:c9:d1:36:72:ae:37:06:45:59:ef:bb:b4:f6:
                    1e:a9:5c:95:28:a3:17:2b:5e:14:cd:2b:9e:3d:95:
                    8a:ed:4d:7e:da:bf:c0:78:41:f5:c0:0f:5b:af:80:
                    70:dd:46:aa:83:b3:37:51:06:1b:44:7b:2b:0d:56:
                    54:f5:0d:45:98:9b:19:21:ce:49:32:5f:16:64:05:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E5:32:0E:97:C0:81:E0:97:C1:50:99:1B:60:BF:F0:AD:B1:B9:BF
            X509v3 Authority Key Identifier:
                keyid:13:FC:5D:DF:49:E3:6D:69:93:63:01:AD:22:BF:24:3A:47:1B:52:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_xd30njbWmTYwGtIr8kOkcbUkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/e-UyDpfAgeCXwVCZG2C_8K2xub8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ef848-3611-40c0-a6bc-44a7a1588162/1/E_xd30njbWmTYwGtIr8kOkcbUkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.11.168.0/22
                  185.41.76.0/22
                  185.70.68.0/22
                  185.108.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:5f:6c:87:2a:bc:e9:15:ec:c0:01:c4:9b:20:6b:a6:51:
         b0:3b:40:48:45:00:73:8f:7e:9a:1e:79:00:83:ec:51:64:99:
         a7:6a:04:a5:32:4f:27:ca:49:0a:d4:ac:32:93:d2:fb:3e:ea:
         67:41:f2:5b:70:92:8b:f6:e3:be:08:3d:a7:d7:92:b1:69:d8:
         97:1a:a3:65:b7:06:94:9f:26:a1:f6:c4:3b:c0:6b:43:36:8c:
         4d:76:86:11:9c:0e:67:6b:d7:98:e8:2c:4b:a7:26:b8:f9:4b:
         05:36:01:be:b0:48:f3:94:ab:ed:e2:24:e3:0a:1a:a3:73:3e:
         19:7c:8d:4d:a4:1f:a5:c1:9e:df:76:91:c0:fa:8d:ca:3f:6d:
         83:94:d6:32:7f:fa:6c:55:0a:25:94:3c:e8:9e:ae:bf:e1:01:
         20:f3:65:be:1a:dc:31:06:4a:b0:8c:4d:58:54:25:cc:ed:06:
         d2:f3:34:b2:4a:f7:7e:10:4d:96:f0:17:57:2a:f2:ca:0c:63:
         8b:d9:4b:27:2d:f1:9d:f4:ad:71:6c:85:7b:65:6d:0b:45:f9:
         69:64:bb:40:4d:cd:6d:b1:d1:f7:96:ee:28:b2:28:a9:ed:6c:
         78:eb:2c:32:14:73:5d:d5:93:bb:f5:be:6a:a3:14:f4:d5:47:
         43:a4:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:45 2026 by rpki-client