This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/EegrrbfeC9SgkR2CZfyo0Bs1_34.roa
File:                     EegrrbfeC9SgkR2CZfyo0Bs1_34.roa (raw, json)
Hash identifier:          F2/jpGD8TRNF02/czQ88JphqmKluFCTY4tvjgN66Ezs=
Subject key identifier:   11:E8:2B:AD:B7:DE:0B:D4:A0:91:1D:82:65:FC:A8:D0:1B:35:FF:7E
Certificate issuer:       /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial:       019C1A0C7738A89B1FA0E8FACE2106DF156D
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/EegrrbfeC9SgkR2CZfyo0Bs1_34.roa
Signing time:             Sun 01 Feb 2026 16:32:30 +0000
ROA not before:           Sun 01 Feb 2026 16:32:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48847
IP address blocks:        185.176.208.0/22 maxlen: 22
                          185.176.208.0/24 maxlen: 24
                          185.176.208.0/27 maxlen: 27
                          185.176.208.128/27 maxlen: 27
                          185.176.209.0/24 maxlen: 24
                          185.176.210.0/24 maxlen: 24
                          185.176.210.48/29 maxlen: 29
                          185.176.210.104/29 maxlen: 29
                          185.176.211.0/24 maxlen: 24
                          185.176.211.224/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1a:0c:77:38:a8:9b:1f:a0:e8:fa:ce:21:06:df:15:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
        Validity
            Not Before: Feb  1 16:32:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=11e82badb7de0bd4a0911d8265fca8d01b35ff7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:72:c4:e0:3b:7c:2c:aa:48:76:87:5f:4b:
                    fa:d6:05:61:c7:ac:6a:cf:d8:85:33:7a:45:f9:40:
                    7d:bd:9b:d9:e6:94:da:18:eb:ea:ff:15:60:61:71:
                    6e:b4:1a:bf:de:07:d3:2c:eb:df:2e:7c:6f:84:12:
                    34:be:ae:0f:5c:e8:eb:e0:e1:88:32:2e:44:15:a3:
                    5e:f1:b4:9d:bd:0a:ce:8b:10:0e:98:35:e3:cb:16:
                    4d:76:99:b2:c5:6e:ff:a9:1d:c7:ce:96:63:88:61:
                    d5:0c:7d:23:a2:73:07:50:3b:ba:1e:6d:c6:f9:d2:
                    d0:86:91:f0:59:6a:1c:48:2e:6f:48:24:39:53:18:
                    b9:35:f2:98:cc:d0:1a:32:04:e0:5d:fb:ed:16:63:
                    b1:d8:ec:ea:64:03:d7:47:06:76:60:e8:1f:a7:6d:
                    40:cd:d8:4c:98:97:c9:7e:eb:4b:9d:3a:2d:d3:5c:
                    c0:53:b6:53:09:65:d1:5f:4b:a0:76:d1:41:b4:0e:
                    96:05:22:8c:95:7b:54:b3:a6:00:9d:ae:8d:31:a8:
                    fe:01:37:8f:dc:cd:21:52:58:f5:96:17:4e:50:e7:
                    92:f5:1e:2c:68:0e:e7:37:31:83:d9:cb:50:a7:d2:
                    9d:21:74:20:4a:d1:3d:81:07:24:8f:07:3f:3a:19:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E8:2B:AD:B7:DE:0B:D4:A0:91:1D:82:65:FC:A8:D0:1B:35:FF:7E
            X509v3 Authority Key Identifier:
                keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/EegrrbfeC9SgkR2CZfyo0Bs1_34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:de:e6:74:e9:50:73:34:50:b2:7d:61:a9:9e:fd:5c:7c:7d:
         a6:d2:c9:87:8b:4f:cc:6e:49:9a:16:d4:4e:1e:22:52:cc:4c:
         b5:94:5c:83:43:ed:7d:df:6a:2d:93:e8:9b:75:63:31:b3:cc:
         7c:10:05:98:64:b7:2f:a0:00:9b:26:e5:1c:54:ad:aa:15:5d:
         17:0e:7a:82:79:ad:aa:7a:b2:48:57:81:78:68:de:45:43:9c:
         32:2a:b0:ee:b5:dc:cf:6e:63:b7:88:89:22:04:0f:b3:0b:14:
         91:81:af:74:c2:18:3c:51:77:cf:2d:3a:86:a9:0a:78:e6:46:
         40:b8:ab:07:d9:16:b8:ba:2d:ce:d9:e3:17:a8:7f:8c:f1:35:
         6b:f3:1b:6b:8b:c7:db:62:24:36:7e:ac:28:30:d4:48:25:f9:
         ac:59:ce:26:28:cc:c0:9c:73:e7:34:73:90:c7:33:4d:55:4c:
         44:67:73:21:3f:e0:90:cd:1e:87:cd:c7:3f:04:d5:57:ee:5b:
         f1:d9:20:88:47:38:ee:20:26:26:6a:be:e7:df:da:e2:57:30:
         a7:bb:d1:90:7c:1e:59:6f:eb:76:32:95:ba:d1:76:a0:4f:b1:
         1c:de:7b:16:eb:af:6f:27:8d:55:b4:90:65:ac:06:1a:2b:7e:
         39:c5:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:32:05 2026 by rpki-client