This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/81Vi1aAuD3_Toh0Zh6ZPftI-RpY.roa
File:                     81Vi1aAuD3_Toh0Zh6ZPftI-RpY.roa (raw, json)
Hash identifier:          PST7bygH7M5OnItN7WKDLmCebDfhyk3LMCuDadZUDKk=
Subject key identifier:   F3:55:62:D5:A0:2E:0F:7F:D3:A2:1D:19:87:A6:4F:7E:D2:3E:46:96
Certificate issuer:       /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial:       019A839CB92B0E6F94EE687EBE3375B1753A
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/81Vi1aAuD3_Toh0Zh6ZPftI-RpY.roa
Signing time:             Fri 14 Nov 2025 18:24:37 +0000
ROA not before:           Fri 14 Nov 2025 18:24:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212913
IP address blocks:        2a06:1301:4610::/48 maxlen: 48
                          2a14:a402::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:83:9c:b9:2b:0e:6f:94:ee:68:7e:be:33:75:b1:75:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
        Validity
            Not Before: Nov 14 18:24:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f35562d5a02e0f7fd3a21d1987a64f7ed23e4696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:97:28:5c:84:bd:92:5b:5c:67:d1:c9:ce:
                    fa:6c:8c:97:51:10:f7:6e:fa:49:7a:94:3e:fb:64:
                    ba:9e:21:bb:e6:ff:0a:9c:2e:cc:66:94:ba:9b:e8:
                    c0:50:e0:7f:71:6e:36:fd:df:1c:3e:ec:71:f7:6f:
                    78:62:57:0e:e1:a5:dd:70:27:d5:b5:19:28:71:4d:
                    81:0f:56:6c:6c:a9:8a:4c:80:31:a5:69:75:1b:32:
                    8d:33:72:48:3d:25:50:33:20:e8:bf:70:d7:5b:3b:
                    2f:2e:ac:70:04:6e:05:bd:39:13:21:ae:3e:a7:0f:
                    aa:ca:b6:85:2b:70:17:d8:78:16:47:c0:5e:9c:be:
                    e6:66:d6:30:3b:79:34:9e:eb:d9:47:9f:fe:4e:e1:
                    31:75:77:90:b1:76:2b:27:16:8b:d4:cb:46:58:1c:
                    12:dd:58:08:73:28:fb:e8:d8:10:55:ea:5b:23:c4:
                    e2:3f:b5:17:7b:93:c5:32:4a:b3:c8:05:9c:d6:f2:
                    29:2e:4e:48:da:32:f3:5a:ab:52:07:f3:4c:aa:80:
                    a2:0f:e9:78:e0:e7:30:3e:db:9f:9d:bc:75:c2:ba:
                    59:d5:e2:8c:57:9a:5c:bd:ff:70:3b:07:0d:e3:60:
                    ff:ae:cc:b6:1d:74:54:aa:f3:8e:69:c6:ba:31:0f:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:55:62:D5:A0:2E:0F:7F:D3:A2:1D:19:87:A6:4F:7E:D2:3E:46:96
            X509v3 Authority Key Identifier:
                keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/81Vi1aAuD3_Toh0Zh6ZPftI-RpY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1301:4610::/48
                  2a14:a402::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:04:f5:77:77:0d:75:05:6c:7c:44:87:71:5d:6f:45:dc:87:
         53:34:2a:52:0c:74:c6:8d:91:43:f7:1c:1b:25:86:c8:55:55:
         82:1d:9a:f5:aa:2d:0a:84:48:d2:f1:b7:fe:ec:c0:e7:0c:27:
         cc:5b:5a:89:61:fa:3b:b3:bf:4b:04:43:98:80:c8:b8:75:8b:
         7e:1e:d2:e2:ae:00:cf:72:16:1e:30:c5:7c:ce:19:fc:07:44:
         c5:1c:68:87:5b:6e:cd:66:ed:97:f6:ab:64:9c:da:79:41:c8:
         59:20:c3:42:84:54:b5:86:d3:81:42:9c:4e:2c:45:c0:fb:bd:
         48:0f:83:ba:4a:6d:95:95:6a:cb:d4:69:49:fb:4c:38:c1:10:
         25:7a:1b:e6:94:c6:76:b4:b8:d8:82:e0:08:36:9c:40:f1:bf:
         c6:36:c5:0b:07:6f:4c:bd:8f:4c:5f:b4:ec:c2:11:62:ec:4a:
         7d:0b:c2:74:a1:a6:09:18:d1:92:3e:b8:d8:d5:1c:9e:78:e8:
         e2:fa:ca:eb:de:d4:a8:59:92:e5:53:0b:d7:ff:13:1f:f8:1d:
         44:70:95:99:99:6a:2a:9b:2c:65:88:d7:3d:ee:13:29:59:26:
         60:dc:6f:9e:99:eb:0e:63:a9:2a:66:06:93:b7:b2:e5:96:29:
         6f:21:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:25:15 2025 by rpki-client