This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa
File:                     Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa (raw, json)
Hash identifier:          /lqPOANyW17qinqhiK8qfXDXg0mEzP1UjKBeGgxEB10=
Subject key identifier:   12:AF:09:0B:36:3F:DB:18:2B:58:D2:EE:4C:5A:4A:CF:C2:F2:61:82
Certificate issuer:       /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial:       019BD067C06AE98ED895358CA4A232C52077
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa
Signing time:             Sun 18 Jan 2026 09:20:18 +0000
ROA not before:           Sun 18 Jan 2026 09:20:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214025
IP address blocks:        194.116.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 19:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d0:67:c0:6a:e9:8e:d8:95:35:8c:a4:a2:32:c5:20:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
        Validity
            Not Before: Jan 18 09:20:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12af090b363fdb182b58d2ee4c5a4acfc2f26182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:52:6f:f3:0f:63:09:c7:9a:db:02:96:61:
                    2f:96:02:78:61:ad:93:b4:79:f2:6b:8b:8b:b8:a4:
                    7d:d0:d7:ef:36:37:f5:de:d6:be:06:46:b8:83:8b:
                    86:47:16:49:50:4f:a5:b7:25:da:a8:1c:9e:b5:24:
                    8e:6d:54:96:b6:3e:77:62:db:f3:d1:50:ae:61:cd:
                    2a:bd:21:c8:3a:be:8a:cf:de:c4:58:aa:52:f6:2a:
                    5d:fe:d9:07:4a:08:4a:6f:5b:67:cd:e0:21:f7:68:
                    7b:ca:c3:0b:41:cd:27:82:32:0a:26:dd:78:5b:2e:
                    a8:0d:66:3f:dd:2f:97:58:8c:9b:36:e8:52:e9:cc:
                    05:a6:5a:b2:61:89:21:ae:63:b8:93:49:39:d2:66:
                    3b:63:cb:b3:f4:fa:fe:45:93:7a:f2:69:c5:6f:ec:
                    f4:b0:64:d4:ee:ba:a6:52:a7:85:9e:7b:16:17:32:
                    fc:b9:fa:24:14:98:0b:3d:61:86:96:f6:33:ac:bf:
                    6c:8a:d8:ef:03:49:85:15:9f:c0:4b:fd:b5:d1:a3:
                    be:69:f2:be:e4:89:d1:1b:88:74:46:7b:a1:0a:46:
                    7e:b0:8d:5d:0d:d3:e3:c9:b9:2f:a0:ad:3f:2a:19:
                    ac:e5:e0:e7:3f:11:2a:1c:00:8f:6f:ab:8a:5e:0f:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:09:0B:36:3F:DB:18:2B:58:D2:EE:4C:5A:4A:CF:C2:F2:61:82
            X509v3 Authority Key Identifier:
                keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/Eq8JCzY_2xgrWNLuTFpKz8LyYYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:ca:2e:81:72:fa:09:98:6a:d6:b2:7d:5f:8d:0a:84:05:
         31:97:c1:ff:79:85:b8:db:45:3b:25:a0:ef:38:c4:ae:36:d3:
         3e:f3:6a:a8:cf:7e:1a:3a:bb:b3:be:b0:c6:1f:fc:96:fa:83:
         a6:ac:21:50:dc:11:6f:19:14:46:fc:49:b2:0a:32:6e:64:a6:
         da:47:c3:5a:6c:9f:20:28:d9:46:a1:71:27:43:c8:07:da:74:
         3b:53:82:54:08:99:80:e7:4a:bc:a4:60:11:3e:98:01:7d:9a:
         1d:b2:f8:b6:9c:fd:a5:f2:90:10:d8:4f:45:95:5b:05:20:dc:
         3e:18:f6:38:8f:dc:f8:19:91:7c:b5:f6:79:63:cc:41:0d:e9:
         45:4f:61:74:9c:3c:91:57:1c:82:70:53:f2:fd:41:18:b1:70:
         cc:9a:f2:36:82:32:fe:8d:87:3c:d1:cd:22:a1:61:3a:32:38:
         35:e8:96:f5:10:03:53:4e:66:f9:be:bc:f3:c5:6e:87:0a:a8:
         19:76:3b:d0:ce:44:38:b8:39:2d:03:9c:7f:72:b9:9f:d5:12:
         08:c9:35:15:87:b7:91:de:47:06:e6:c7:46:17:aa:6d:c3:a8:
         eb:eb:74:dc:f8:9d:91:86:88:68:43:1d:a2:42:dc:6d:20:05:
         3b:27:2d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 05:21:58 2026 by rpki-client