This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/EvXM-b680z9EvOO26D18ZcZMtPQ.roa
File:                     EvXM-b680z9EvOO26D18ZcZMtPQ.roa (raw, json)
Hash identifier:          yR1psjcP7WJDLXrNWlxvJsBJL/7C/J53luvxS8fesS4=
Subject key identifier:   12:F5:CC:F9:BE:BC:D3:3F:44:BC:E3:B6:E8:3D:7C:65:C6:4C:B4:F4
Certificate issuer:       /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial:       019B7B36D14E7A9C8AAC32A6B1BEA96F7A4F
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/EvXM-b680z9EvOO26D18ZcZMtPQ.roa
Signing time:             Thu 01 Jan 2026 20:19:08 +0000
ROA not before:           Thu 01 Jan 2026 20:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209220
IP address blocks:        185.104.122.0/24 maxlen: 24
                          2a06:3000:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:d1:4e:7a:9c:8a:ac:32:a6:b1:be:a9:6f:7a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
        Validity
            Not Before: Jan  1 20:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12f5ccf9bebcd33f44bce3b6e83d7c65c64cb4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:26:e2:82:b3:a9:5b:db:b8:bf:09:83:8f:
                    84:f6:55:bd:3e:f3:da:ac:58:71:59:4b:dc:03:85:
                    7b:c7:2b:8b:ef:75:ba:3a:6d:29:56:08:ca:b0:30:
                    ef:ee:6e:a3:bf:e9:75:17:58:52:a3:5c:7b:b0:50:
                    19:86:7f:3c:57:2b:70:0c:1c:5a:e8:f9:b8:63:11:
                    90:92:25:4f:ae:59:ba:21:d2:bc:b8:6f:dc:6f:02:
                    0b:87:7d:72:76:51:d4:22:65:60:0f:bd:b0:29:87:
                    3b:67:8f:c8:55:b5:95:1b:f8:fa:5e:36:02:a2:50:
                    a3:69:fb:7b:ef:c8:6f:b8:26:6a:80:2a:76:d3:ba:
                    4b:6a:e2:68:11:cd:54:55:b7:13:52:2d:77:c1:44:
                    c8:59:b2:dd:17:ce:25:b1:72:64:ec:5d:da:dc:bb:
                    73:23:63:9a:8d:5e:bc:b5:cd:1a:f8:a5:fd:40:fb:
                    24:27:27:e7:3e:29:ec:32:d7:ae:12:65:ba:81:e3:
                    72:28:a3:57:82:e3:d2:dd:3e:69:70:66:3f:62:5d:
                    c3:ec:e0:52:63:07:9a:3b:e5:b2:a2:1e:17:c0:bd:
                    63:51:c8:76:95:fb:91:44:63:2a:c4:2c:d6:cc:92:
                    8d:0d:31:38:7e:83:85:04:f3:ff:5d:2b:d0:f5:f9:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F5:CC:F9:BE:BC:D3:3F:44:BC:E3:B6:E8:3D:7C:65:C6:4C:B4:F4
            X509v3 Authority Key Identifier:
                keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/EvXM-b680z9EvOO26D18ZcZMtPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.122.0/24
                IPv6:
                  2a06:3000:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:90:51:b0:60:c2:42:6d:2f:4e:76:71:1b:b5:b4:c9:58:72:
         47:35:de:59:b0:e1:d7:a3:23:a9:e9:3f:b6:23:0b:f9:fa:c3:
         46:9e:85:a1:aa:43:69:e9:55:d3:8a:18:e9:98:49:04:bf:05:
         8e:cf:cd:56:3e:90:94:28:e8:db:63:e2:37:8f:00:cb:38:63:
         0e:28:be:ac:8c:21:bb:f0:d4:92:24:01:cc:8c:bd:2a:1b:ea:
         6d:ea:dd:f1:14:9a:fc:a3:83:28:d6:50:35:c2:8f:ea:56:f4:
         13:b0:98:30:bb:61:18:7f:1e:a2:d3:de:f0:82:bd:87:d9:30:
         79:95:62:02:d2:b4:db:ec:b3:ac:a4:4b:bd:6a:89:3e:d2:3e:
         b0:89:5d:af:f3:6c:ce:22:c0:ad:b4:a4:fd:09:e9:53:19:c6:
         14:0d:29:ed:ce:b0:d3:55:76:3c:15:79:0a:28:d7:b5:dc:38:
         f1:33:3b:52:cb:8b:ef:e8:db:25:e9:67:ca:f3:98:fd:85:30:
         6d:56:6d:c3:7b:29:aa:69:f6:fb:30:72:f7:15:3a:e1:ee:d3:
         d0:44:39:2f:32:e2:66:78:32:86:40:88:e8:10:53:e0:45:95:
         f6:92:6b:02:00:64:e1:e1:33:fb:30:d4:4d:d4:26:ad:cd:a4:
         69:44:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:17 2026 by rpki-client