This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/eGOpd_Er2DUNNdzHqUXvL1oZbeY.roa
File:                     eGOpd_Er2DUNNdzHqUXvL1oZbeY.roa (raw, json)
Hash identifier:          /bBF8EeljPj/y2ZurKbhYzBL/2ygwrOngQ6G1dWPWxE=
Subject key identifier:   78:63:A9:77:F1:2B:D8:35:0D:35:DC:C7:A9:45:EF:2F:5A:19:6D:E6
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       019C0EAD18A213AA17164EC84B3F7D741088
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/eGOpd_Er2DUNNdzHqUXvL1oZbeY.roa
Signing time:             Fri 30 Jan 2026 11:32:30 +0000
ROA not before:           Fri 30 Jan 2026 11:32:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142019
IP address blocks:        185.129.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0e:ad:18:a2:13:aa:17:16:4e:c8:4b:3f:7d:74:10:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: Jan 30 11:32:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7863a977f12bd8350d35dcc7a945ef2f5a196de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:b8:47:f3:c3:52:73:d6:b9:e9:e6:c8:66:
                    22:db:9c:4f:8f:6c:32:30:d6:5c:76:9b:7c:f9:74:
                    1b:27:01:fd:5c:51:ac:42:9b:7a:c3:3c:91:ac:4a:
                    45:43:8c:a1:db:da:4c:ce:fb:04:6e:aa:82:2b:8a:
                    8e:15:7c:69:f8:e8:b4:50:6e:5b:d9:67:84:27:76:
                    9f:f4:1c:1c:b3:52:90:c9:e7:2d:14:c2:f7:6e:78:
                    64:3d:9e:e0:d8:94:dd:92:1b:bb:9f:72:cb:73:6a:
                    1e:8f:fc:d5:be:53:8e:61:28:e3:cf:76:ad:d3:b9:
                    46:1d:9d:03:9f:2e:47:02:a4:6e:15:d6:18:d0:32:
                    55:b8:07:94:ae:81:26:07:92:1a:e7:91:f1:c8:8c:
                    22:d8:80:a5:78:f5:6f:9b:d2:a0:8b:5f:8b:f3:03:
                    15:88:fb:1d:36:0a:fd:ae:38:34:85:f7:83:9c:ef:
                    f4:cf:96:b8:b0:72:2b:6d:18:16:03:cc:2a:d3:bb:
                    6b:b2:54:9a:ef:a8:9a:03:b7:88:5f:01:df:cd:e6:
                    17:74:24:ba:82:0b:6f:e2:c2:99:27:76:14:73:15:
                    fa:ab:c2:91:10:ec:56:b5:54:bf:55:6b:26:42:1f:
                    74:2a:f1:1c:9a:e8:2a:c6:25:9e:1b:0e:f7:6b:35:
                    10:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:63:A9:77:F1:2B:D8:35:0D:35:DC:C7:A9:45:EF:2F:5A:19:6D:E6
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/eGOpd_Er2DUNNdzHqUXvL1oZbeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.129.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:4e:15:8e:f4:be:44:6a:2d:2e:87:42:91:df:bf:f8:97:a4:
         ee:cd:73:9d:13:50:0d:0c:b6:49:77:da:72:4b:e5:65:d1:9c:
         72:6c:f7:b7:f2:84:a1:c6:66:bb:15:57:d3:e2:e8:d9:5d:a2:
         7e:dd:ed:bc:60:08:fb:2b:be:cb:b8:63:4a:c1:03:0e:cc:3a:
         6b:78:87:0f:d1:9f:41:08:a4:ab:bf:c9:af:58:77:91:7b:19:
         fb:dd:8a:70:e2:ac:5a:8b:ad:20:42:7d:87:34:c6:3c:60:12:
         78:21:98:9a:3e:51:f6:44:19:95:de:18:8b:08:2e:e5:b9:60:
         c2:7f:45:ed:a7:ca:a0:6a:e1:fb:8e:ce:a5:01:4d:c1:d2:72:
         07:f2:35:88:58:29:e2:e1:75:9d:d2:44:76:71:6a:23:1f:07:
         01:d6:75:2f:ca:3e:0a:8b:94:ca:a5:14:42:b8:94:41:3c:27:
         36:73:b6:89:9a:df:4e:53:03:63:b7:43:4d:7f:d3:a3:81:36:
         fc:f6:e8:49:81:1a:67:77:5c:bb:c3:a5:00:6b:69:e0:49:8a:
         61:17:34:d8:5e:d3:9c:54:34:17:89:09:a7:e0:bc:79:64:6d:
         06:34:4b:87:10:88:66:88:0b:db:64:df:d4:8c:66:e5:c0:13:
         8e:65:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:56:33 2026 by rpki-client