This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/eGy-TWABgnLZkghosaJJHcTee5w.roa
File:                     eGy-TWABgnLZkghosaJJHcTee5w.roa (raw, json)
Hash identifier:          3UQRNaZvYAqVrxrnLNkAfUX6kjr+I18WMoFH16wNXTg=
Subject key identifier:   78:6C:BE:4D:60:01:82:72:D9:92:08:68:B1:A2:49:1D:C4:DE:7B:9C
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       019B78A2EB2661B2119F6BB58DB425E6C442
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/eGy-TWABgnLZkghosaJJHcTee5w.roa
Signing time:             Thu 01 Jan 2026 08:18:21 +0000
ROA not before:           Thu 01 Jan 2026 08:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42831
IP address blocks:        85.237.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:eb:26:61:b2:11:9f:6b:b5:8d:b4:25:e6:c4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Jan  1 08:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=786cbe4d60018272d9920868b1a2491dc4de7b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:e8:81:97:65:99:35:ab:02:92:ed:1b:36:
                    c2:2e:c5:42:9d:94:28:5e:0a:a0:f5:14:2c:b8:85:
                    8a:c6:a8:5e:57:77:97:68:9f:92:e9:ea:96:8f:af:
                    5e:7a:93:8f:1f:cd:e5:31:b1:b4:6a:f1:81:fa:ed:
                    fd:a8:8b:a6:f6:fd:b6:c0:b9:69:e2:2c:86:be:c4:
                    ea:0e:55:0c:6d:9c:1c:b8:30:31:ef:80:d3:05:02:
                    79:b6:37:22:15:66:c7:31:39:51:72:93:46:13:8a:
                    fd:8a:1c:9b:4b:87:91:91:b9:b8:8a:09:39:1a:ae:
                    70:41:50:fd:ac:4f:93:b3:56:26:45:83:f4:1e:94:
                    38:bb:a4:00:20:8b:d4:4e:c0:a3:71:a7:6e:c7:56:
                    28:e0:a1:b1:d5:fd:c9:df:8b:0f:e7:e9:2b:61:dc:
                    d8:9f:d7:28:ed:06:b1:79:a6:40:10:f2:52:d1:bd:
                    b1:cf:e9:87:47:8b:9e:d2:9e:4b:9e:8b:e4:8e:fd:
                    97:7f:22:44:54:c2:18:de:fb:cd:94:9a:e3:e0:3f:
                    4f:05:c0:0f:fc:e6:b2:56:16:39:b1:9d:09:f2:84:
                    29:3e:3b:97:fc:26:f4:64:97:6e:9a:97:95:fd:d2:
                    38:7c:06:b0:c2:66:0b:0d:b6:f4:0c:35:28:68:1f:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6C:BE:4D:60:01:82:72:D9:92:08:68:B1:A2:49:1D:C4:DE:7B:9C
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/eGy-TWABgnLZkghosaJJHcTee5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e1:25:ae:c0:b4:a3:10:ff:fe:77:87:c4:15:c8:04:b9:1f:
         83:98:6e:b9:d8:9d:b4:09:db:6d:70:a5:a0:15:1a:72:6e:8a:
         47:00:c4:98:63:c4:59:96:da:f2:6e:35:4e:06:66:18:63:7d:
         f6:06:b1:ce:f8:d4:62:6c:4d:19:f4:a9:1b:97:b9:f0:21:9d:
         3d:5c:83:65:4a:4f:24:1c:86:10:b3:f7:5d:3b:ae:a9:4e:f3:
         60:40:56:04:e9:d2:44:1e:f1:00:ee:bb:e6:e3:f2:6d:1e:88:
         e5:54:fc:67:54:a9:c1:12:8c:d1:8b:9d:60:a7:52:c7:ba:91:
         87:43:e2:1c:a2:2e:fb:6a:fa:73:79:18:2f:97:f3:68:39:95:
         f6:11:77:40:93:c3:76:42:a3:78:3f:2b:a7:45:bb:ec:3c:e9:
         81:49:51:6f:45:45:ae:fa:f4:5d:6f:c6:a0:5a:33:e4:84:61:
         46:1b:67:0c:e4:f5:75:35:c1:5c:41:43:41:ac:2e:0e:92:cc:
         6b:22:11:8c:eb:59:74:f6:1e:54:73:5d:19:ba:3f:5b:62:c9:
         4c:f1:88:33:11:7f:9a:25:d2:0b:89:8a:d5:9a:f5:43:68:e3:
         ef:92:48:8e:3f:d8:84:f2:8b:6e:a3:9e:22:28:00:3d:37:c3:
         6b:06:8d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:55 2026 by rpki-client