This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/R5U4tCglGzyQuzN4kbk_EuhCb-0.roa
File:                     R5U4tCglGzyQuzN4kbk_EuhCb-0.roa (raw, json)
Hash identifier:          5WlSrnWjnkuqY5Nq+W6oJFQd2APt1BSvyimKzbV6aPk=
Subject key identifier:   47:95:38:B4:28:25:1B:3C:90:BB:33:78:91:B9:3F:12:E8:42:6F:ED
Certificate issuer:       /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial:       019B7FF24B49F722F7999958B7248309F01C
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/R5U4tCglGzyQuzN4kbk_EuhCb-0.roa
Signing time:             Fri 02 Jan 2026 18:22:23 +0000
ROA not before:           Fri 02 Jan 2026 18:22:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12703
IP address blocks:        84.45.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:4b:49:f7:22:f7:99:99:58:b7:24:83:09:f0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
        Validity
            Not Before: Jan  2 18:22:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=479538b428251b3c90bb337891b93f12e8426fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:38:05:44:eb:8d:ed:7e:cc:94:be:77:19:
                    a8:74:49:6a:cd:c8:c4:f3:25:45:c0:c8:9a:f4:51:
                    ad:7c:f0:91:7e:2c:9a:67:c0:f4:af:e2:27:d7:dc:
                    09:22:7e:e8:bd:82:cc:d4:29:cf:5e:9f:a6:04:7a:
                    98:29:26:6e:28:c3:b2:da:54:34:f6:ae:6c:03:f2:
                    27:32:8e:14:84:98:90:9e:f1:ac:54:0f:8f:a3:d9:
                    65:69:95:8d:c5:75:f0:82:a4:63:95:2a:7d:fd:36:
                    e5:2d:12:d2:f9:f1:ee:4d:ac:48:7c:f3:2d:47:d3:
                    a7:23:98:c2:de:55:03:ff:7b:5e:90:91:3a:6d:86:
                    37:01:a1:0d:fd:76:57:68:65:e4:bf:3c:3d:c4:12:
                    f0:5f:9a:ad:9f:42:ce:d6:ee:23:98:31:72:3a:47:
                    0e:7f:c7:1a:a7:25:7c:83:87:f0:35:e6:6f:63:4d:
                    26:49:11:db:87:a8:82:83:94:4b:5e:7e:09:65:63:
                    43:8f:ab:a5:6d:67:88:b8:89:6c:16:fe:aa:db:16:
                    94:78:63:fb:f6:1a:cf:12:ac:8b:74:ec:0c:7c:a9:
                    69:69:e7:95:3f:d1:3d:7b:3d:52:92:1d:36:8f:fe:
                    54:d8:e6:57:42:92:c2:16:66:1d:ee:b3:b9:65:e3:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:95:38:B4:28:25:1B:3C:90:BB:33:78:91:B9:3F:12:E8:42:6F:ED
            X509v3 Authority Key Identifier:
                keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/R5U4tCglGzyQuzN4kbk_EuhCb-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.45.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:8a:5c:a6:f1:24:3f:d0:c7:d8:f3:56:6b:53:e3:85:9d:92:
         b0:d4:c8:62:1a:cc:51:b7:18:e0:bf:f4:3d:ac:a5:17:eb:37:
         ff:9e:70:6a:ad:75:26:9a:aa:42:c1:31:78:f6:19:b5:24:0a:
         88:5b:f2:dc:ab:a8:d4:4b:97:3f:47:49:23:6c:64:3a:b1:b1:
         ae:1f:a2:69:62:52:ca:d6:c4:ab:8b:0c:ea:34:55:0e:14:a2:
         b7:44:19:e3:ee:44:86:7e:47:0a:ad:13:db:f5:3a:6c:ab:cd:
         0c:29:3e:08:3c:2d:09:1f:7c:bc:54:ff:7b:9e:94:bf:2d:76:
         08:b5:69:df:48:0f:8e:8a:a6:23:8b:b3:bc:b2:96:18:cf:23:
         62:d8:23:90:23:27:e8:68:4e:9d:8e:3d:16:8e:60:65:78:30:
         2f:ca:7f:5a:bb:2a:58:ed:9e:9a:5a:a6:b6:dd:55:84:3e:0a:
         1e:0b:06:ab:e9:db:33:01:21:93:25:48:61:70:dc:d4:9b:ba:
         8b:5e:8d:cf:e6:01:5a:8f:9d:80:ee:9e:00:86:c9:40:b2:00:
         1c:a5:2f:39:5b:0a:55:7e:6d:94:49:67:9f:c6:85:0a:82:2c:
         50:11:8b:31:c1:b1:47:e8:35:7f:fe:76:48:25:a8:11:8e:33:
         98:23:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:13:25 2026 by rpki-client