This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/eQZKGZ2aBM0yBF905-r8c86PiNY.roa
File:                     eQZKGZ2aBM0yBF905-r8c86PiNY.roa (raw, json)
Hash identifier:          Ih70b8QzHB6XF9meZM8P6Y7eTavMkPPydbwU5tJHSkQ=
Subject key identifier:   79:06:4A:19:9D:9A:04:CD:32:04:5F:74:E7:EA:FC:73:CE:8F:88:D6
Certificate issuer:       /CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
Certificate serial:       019B7E3911FA326F3D230026802D28FDF065
Authority key identifier: 9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/eQZKGZ2aBM0yBF905-r8c86PiNY.roa
Signing time:             Fri 02 Jan 2026 10:20:27 +0000
ROA not before:           Fri 02 Jan 2026 10:20:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210924
IP address blocks:        195.96.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:11:fa:32:6f:3d:23:00:26:80:2d:28:fd:f0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeecb353f1cdc5fd3a9d54a8873531efd285c46
        Validity
            Not Before: Jan  2 10:20:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79064a199d9a04cd32045f74e7eafc73ce8f88d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:6e:5d:97:75:5c:66:39:46:d7:a6:32:3d:
                    d4:4b:d3:13:3d:2c:08:fb:ad:84:de:5c:dd:19:ea:
                    46:2d:a3:75:d7:21:b4:8c:3c:ca:81:74:ba:94:54:
                    c9:18:a6:00:9c:8b:33:40:d5:11:0d:83:5b:85:f2:
                    a3:28:31:e1:47:0d:1b:36:38:de:e8:a0:88:60:60:
                    e5:a2:2f:08:35:55:84:bc:c2:12:64:49:d9:d9:01:
                    5c:6d:0e:1f:e0:63:13:7b:58:76:25:25:91:96:8c:
                    b0:6f:6d:dc:33:08:f0:c4:0b:7f:4f:ad:9d:da:74:
                    84:31:a0:43:21:e9:64:9f:7e:f6:1a:d3:df:c0:83:
                    3b:26:82:fb:7f:dd:fc:60:d6:16:bf:06:47:61:21:
                    ff:39:c1:67:b3:c6:cc:11:eb:8d:70:8d:68:97:10:
                    32:37:0f:4f:04:07:8c:2c:f1:46:8e:70:5a:de:a7:
                    e4:7b:56:18:20:0d:c0:1d:05:0e:44:3a:46:0a:b1:
                    9d:b1:7d:cc:fb:27:cf:8b:02:cc:74:39:dc:c0:2d:
                    44:4f:ef:d9:e5:fe:df:f8:e1:a2:7d:ad:bf:3b:08:
                    c1:a5:e1:ef:84:e6:8e:7c:df:0f:84:08:1a:47:db:
                    d7:69:bd:15:7a:aa:3b:f3:b3:fb:f9:84:ef:b5:de:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:06:4A:19:9D:9A:04:CD:32:04:5F:74:E7:EA:FC:73:CE:8F:88:D6
            X509v3 Authority Key Identifier:
                keyid:9A:EE:CB:35:3F:1C:DC:5F:D3:A9:D5:4A:88:73:53:1E:FD:28:5C:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu7LNT8c3F_TqdVKiHNTHv0oXEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/eQZKGZ2aBM0yBF905-r8c86PiNY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/15863b-787f-4084-b7f6-5944960e31cf/1/mu7LNT8c3F_TqdVKiHNTHv0oXEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.96.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:8b:81:b9:93:f6:fb:94:a9:cc:d4:cd:84:c4:92:9a:93:51:
         4a:36:ab:79:1b:a9:ae:9a:c5:0e:2a:2b:24:65:b8:bc:3b:41:
         d5:e5:8b:5a:c0:1a:54:5e:03:78:6b:1a:6b:96:d1:e3:67:87:
         62:44:31:37:32:b7:70:ad:df:5b:84:c9:64:8f:ae:16:69:f3:
         0c:15:b6:b7:77:ad:50:6b:43:57:57:47:52:de:61:1d:cb:44:
         a5:4f:88:09:4e:ca:55:c6:ff:86:41:cb:f2:95:d5:20:96:5a:
         10:63:62:12:92:92:04:b4:91:a8:15:20:68:2c:86:51:8c:77:
         73:7a:60:9b:20:41:db:a6:23:b2:d2:6c:52:81:e7:5f:bf:2d:
         32:4b:42:8d:ac:51:25:87:4b:8a:d5:5a:9d:6f:b9:5d:9d:d1:
         ad:cf:48:2a:20:1d:d6:06:1b:ae:2d:81:48:a6:2c:7c:4d:9f:
         e7:59:02:29:76:83:e4:43:10:ca:74:fb:64:fe:60:3b:ee:b0:
         ed:27:c1:64:d7:ad:7d:ab:1a:58:18:56:2f:06:f8:86:c9:e9:
         3c:ad:37:1d:27:73:33:32:58:3f:03:a8:30:0b:f9:6a:d6:3c:
         5b:a8:1f:46:5f:70:ab:76:3b:7a:ac:a0:96:a0:23:dd:2b:4e:
         41:9b:62:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:22 2026 by rpki-client