This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/7bhQAxt7LG4RTh69WNyEDaY_6HA.roa
File:                     7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (raw, json)
Hash identifier:          dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=
Subject key identifier:   ED:B8:50:03:1B:7B:2C:6E:11:4E:1E:BD:58:DC:84:0D:A6:3F:E8:70
Certificate issuer:       /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial:       019B7DCAA7BBB880FCCD868019AA15D7AFCF
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/7bhQAxt7LG4RTh69WNyEDaY_6HA.roa
Signing time:             Fri 02 Jan 2026 08:19:51 +0000
ROA not before:           Fri 02 Jan 2026 08:19:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50360
IP address blocks:        5.181.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:a7:bb:b8:80:fc:cd:86:80:19:aa:15:d7:af:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
        Validity
            Not Before: Jan  2 08:19:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=edb850031b7b2c6e114e1ebd58dc840da63fe870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:fc:86:19:8d:d4:24:c8:7c:f3:e5:4a:7d:
                    32:9b:a2:d8:a7:d4:c2:e7:ed:9a:d7:3a:37:12:c0:
                    35:44:2a:f4:bb:28:45:79:8f:d3:22:04:42:67:03:
                    aa:c8:2d:8c:ba:85:f0:0b:3a:40:9c:7d:8d:e7:d3:
                    ff:f4:ae:30:ae:0f:76:0d:2b:91:0a:e7:20:9e:b8:
                    17:41:ee:a8:a9:ec:d7:dd:29:64:c4:45:3c:60:76:
                    36:3e:f7:34:f4:81:fc:1c:f5:f3:f7:a2:09:df:66:
                    f3:4c:d8:2f:e6:ad:7e:f8:7a:85:e1:d2:e7:e4:7d:
                    13:84:18:08:d6:03:a1:61:6f:54:5e:4b:b3:c1:7c:
                    5b:d8:30:71:8f:62:85:b0:3d:4a:b0:ee:e5:95:16:
                    0f:22:1f:5b:79:37:c7:fd:66:fa:64:78:84:27:71:
                    f4:86:55:1d:7a:01:1b:5b:cd:42:11:07:92:f0:c7:
                    21:86:b9:6d:c7:75:06:ad:97:ed:65:c1:7e:cf:b2:
                    2e:d2:16:07:43:df:1c:f4:61:5a:74:d5:bd:c3:01:
                    6a:4b:6c:7f:81:e4:7a:6e:58:14:fd:32:cb:3c:59:
                    de:f5:80:40:3c:69:6d:e9:d8:34:65:50:06:63:c9:
                    44:73:36:45:40:86:a9:f2:4b:f8:6e:5b:10:05:38:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:50:03:1B:7B:2C:6E:11:4E:1E:BD:58:DC:84:0D:A6:3F:E8:70
            X509v3 Authority Key Identifier:
                keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/7bhQAxt7LG4RTh69WNyEDaY_6HA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:47:ef:ed:ae:a5:68:aa:6f:c9:a7:01:25:0c:ec:a4:67:42:
         ac:aa:32:cd:b8:df:df:4e:d3:3d:9d:84:aa:11:fd:ec:2d:5c:
         d8:5e:fb:65:2e:c0:4a:23:d8:bb:2b:b5:3d:17:77:c2:14:06:
         74:9c:b4:2b:26:d1:ca:e3:da:6f:c3:62:ce:1d:29:c4:2b:39:
         32:a1:75:36:ee:1a:13:8d:7f:c5:6f:2e:24:9b:72:22:82:1e:
         2e:f5:fc:33:9d:06:78:2f:a0:07:01:70:23:57:86:05:ab:b8:
         93:b4:dc:42:d4:90:ff:21:14:77:40:b3:68:a1:16:83:8a:84:
         9b:ae:82:11:c3:19:a1:6c:6b:3a:c9:d8:8c:8f:10:22:87:99:
         39:6b:78:86:ba:1a:9f:75:c7:1e:04:09:99:88:9e:2f:41:67:
         21:e1:49:85:81:b7:70:36:8a:45:d9:33:46:91:9a:59:09:f0:
         33:1e:7a:dc:a9:b3:f3:e2:aa:12:40:2f:a5:5b:ca:3a:30:1b:
         68:5b:33:2d:87:06:fe:8a:ca:27:10:cc:0f:8d:c8:9e:5d:4d:
         ad:23:21:ca:be:fc:bf:e4:ca:37:7c:90:88:81:61:86:7c:1e:
         e9:77:f3:08:34:2d:94:77:96:fc:ea:84:51:a7:d8:80:89:96:
         06:0b:79:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:09 2026 by rpki-client