This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/ekViUfVjeX96GOzSolN__8-4A4k.roa
File:                     ekViUfVjeX96GOzSolN__8-4A4k.roa (raw, json)
Hash identifier:          YyzGmywtQBLblhHE3rDDlveGwps6u/nY6w46Xdc6qtY=
Subject key identifier:   7A:45:62:51:F5:63:79:7F:7A:18:EC:D2:A2:53:7F:FF:CF:B8:03:89
Certificate issuer:       /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial:       019B78355CD62EEA63DFD2121CA6856E3F84
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/ekViUfVjeX96GOzSolN__8-4A4k.roa
Signing time:             Thu 01 Jan 2026 06:18:41 +0000
ROA not before:           Thu 01 Jan 2026 06:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199989
IP address blocks:        185.6.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:5c:d6:2e:ea:63:df:d2:12:1c:a6:85:6e:3f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
        Validity
            Not Before: Jan  1 06:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a456251f563797f7a18ecd2a2537fffcfb80389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e5:00:5a:6d:39:a3:eb:d7:e4:1c:c0:41:1a:
                    51:0c:e6:0e:39:b9:db:dc:d6:46:26:a7:a3:8f:b1:
                    10:9b:2c:91:8f:4a:6c:1b:13:10:1f:b8:18:ac:4b:
                    d3:66:1c:15:d3:a9:66:0b:ab:11:9f:ec:02:10:98:
                    c9:c5:4b:3e:c8:90:d0:18:3c:ce:fd:e1:8f:1b:a9:
                    2f:7a:69:dc:d1:c7:33:42:8e:f7:67:76:5d:65:e1:
                    61:4f:d0:51:57:0f:15:dc:c8:34:78:dc:e8:0b:6c:
                    e7:26:a2:be:38:aa:25:dd:63:14:6e:b8:af:78:5e:
                    3e:2c:35:38:cd:5b:04:e8:33:73:80:c2:28:8c:b9:
                    de:04:69:78:55:7a:a6:66:16:bd:fb:fb:0b:e2:54:
                    be:b9:dd:44:32:24:1f:9d:41:ba:fb:aa:e3:ea:78:
                    a7:a0:8c:b8:59:e1:55:c6:c3:44:58:f9:cb:4b:b5:
                    91:78:73:86:6f:ec:f3:90:5b:08:e4:22:b7:e5:7e:
                    7e:95:79:f4:c8:f2:ef:28:92:b8:db:79:d8:cd:f6:
                    4d:d8:f3:ab:ff:26:ad:a9:42:f8:45:9c:fb:54:6b:
                    a8:ee:4c:be:5f:b2:7c:06:23:7f:30:da:81:9e:08:
                    8a:1c:20:a1:b8:e5:92:3a:06:49:72:f7:7e:07:58:
                    ff:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:45:62:51:F5:63:79:7F:7A:18:EC:D2:A2:53:7F:FF:CF:B8:03:89
            X509v3 Authority Key Identifier:
                keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/ekViUfVjeX96GOzSolN__8-4A4k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.6.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:6d:4e:33:2a:ac:56:3b:b3:aa:1d:a4:b0:a7:42:39:b4:
         20:4f:a3:a4:0c:35:c1:60:54:65:db:4c:1e:77:2e:c2:59:16:
         49:c1:69:14:6b:d8:e0:b5:12:24:33:28:ee:45:42:19:18:cf:
         5b:43:53:73:00:15:8b:52:58:6e:d1:21:1b:9c:0f:65:f8:ce:
         6c:06:43:d7:ed:88:1f:f8:28:0a:21:1a:b4:b8:70:3f:ec:bd:
         dc:02:e0:86:fb:58:0a:99:65:a9:70:54:3e:4c:2b:99:2c:71:
         2e:ef:6c:f0:35:18:26:51:5b:da:b7:44:bd:67:70:6e:b0:75:
         3d:a3:39:a7:96:f8:89:33:84:1b:4b:98:4f:3e:92:54:30:f5:
         53:8c:ed:48:80:68:ac:c9:7e:2e:cd:26:3d:aa:96:ec:9f:4a:
         9f:eb:31:40:d0:51:c2:fe:fc:32:85:db:89:29:fb:f6:fe:19:
         34:5a:c0:41:93:34:22:6b:8b:4a:9c:d8:f2:60:61:7b:1a:68:
         02:09:95:98:6d:9c:28:b2:12:2b:43:4f:73:d4:27:3a:6b:e0:
         01:ce:f7:89:2a:fd:7c:4c:b6:db:9a:91:e1:5e:4c:ba:fe:ee:
         fa:d9:46:c7:c1:84:17:9d:43:d4:07:fa:b8:e7:be:80:cb:e1:
         8b:d2:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:32:17 2026 by rpki-client