This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-l5uVc54PydSELuogxMSOlvZknc.roa
File:                     1-l5uVc54PydSELuogxMSOlvZknc.roa (raw, json)
Hash identifier:          IqbYRdGYfwB0/Ape3iNBhfXkFPQtJCX9oUdgHc+bBrQ=
Subject key identifier:   FA:5E:6E:55:CE:78:3F:27:52:10:BB:A8:83:13:12:3A:5B:D9:92:77
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       019B79ED1B074B1D513DAC5A6BD0679DC637
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-l5uVc54PydSELuogxMSOlvZknc.roa
Signing time:             Thu 01 Jan 2026 14:19:00 +0000
ROA not before:           Thu 01 Jan 2026 14:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60421
IP address blocks:        148.81.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:1b:07:4b:1d:51:3d:ac:5a:6b:d0:67:9d:c6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 14:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fa5e6e55ce783f275210bba88313123a5bd99277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:77:cb:d1:d1:ad:c1:02:76:e5:3a:da:d6:cc:
                    95:c7:91:79:d5:b6:1c:43:35:35:e6:52:88:f7:ed:
                    08:0a:e5:f8:03:c8:3f:e2:17:42:3c:a0:ac:96:cf:
                    be:76:b9:3f:4b:7e:6b:f1:fe:d7:a9:dd:78:6c:f3:
                    06:96:7e:ad:ce:9f:79:1b:73:5b:48:ea:bc:9c:86:
                    77:82:40:41:09:7c:3e:8c:86:91:52:73:f8:81:d3:
                    59:46:af:b9:43:8d:63:27:95:64:bb:41:77:37:8e:
                    a6:20:50:62:00:11:c9:61:27:25:79:5b:6c:12:63:
                    f0:25:44:9f:c4:b8:24:8b:ce:ab:41:32:2c:9a:d3:
                    61:53:f1:a3:bb:79:ee:f9:a8:d7:6b:42:83:00:c2:
                    6b:8c:be:39:c3:7a:a1:ae:38:4b:6c:d1:2e:f9:f9:
                    d3:b2:01:67:d8:20:6f:2e:47:78:ef:2d:52:89:22:
                    97:75:1b:48:9c:8d:a9:bf:6e:0c:b5:f6:27:da:19:
                    a9:49:29:af:13:76:9e:71:69:8b:eb:5f:3a:ac:02:
                    70:68:d5:a7:34:5e:a2:27:85:2f:62:05:79:c6:db:
                    c4:22:f9:4d:26:76:6a:71:57:fd:2c:59:13:0a:00:
                    db:2e:b7:8a:b4:eb:36:25:8b:4f:64:d7:77:85:cb:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5E:6E:55:CE:78:3F:27:52:10:BB:A8:83:13:12:3A:5B:D9:92:77
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/1-l5uVc54PydSELuogxMSOlvZknc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:ae:66:6b:96:da:45:a9:d4:2d:7f:9d:cd:37:9c:d7:a5:
         5c:24:c0:5f:b1:98:16:56:e5:f7:6f:38:4f:05:84:b8:0c:55:
         2e:64:bc:c1:2f:ae:c5:0e:8f:36:10:e4:d1:9b:c2:17:d6:c3:
         26:c4:50:2b:ce:0b:07:40:ab:df:97:25:9e:d5:63:d3:88:4f:
         9d:92:0c:a0:c1:eb:22:23:f3:a7:75:88:65:63:12:00:9a:26:
         85:d7:52:b8:44:a4:27:a0:f9:86:52:9a:74:a4:05:63:64:6b:
         90:5a:9b:55:23:bd:22:00:68:24:fd:42:a4:1a:44:5a:5d:be:
         f9:8b:d4:85:5a:3a:01:91:47:29:50:92:31:57:28:ea:f3:db:
         af:d7:9c:53:6e:bb:e3:19:62:bf:d9:31:4b:3c:64:b4:a1:e4:
         ac:5d:41:42:82:7f:d4:2e:9f:86:59:f0:76:0e:4b:a4:22:c7:
         39:70:a6:e5:59:de:4f:be:b9:c4:f7:13:84:6c:52:b3:bb:06:
         7e:8b:45:f7:2b:06:53:70:96:ba:7a:c2:ce:24:be:59:22:ef:
         c6:96:36:f8:99:9c:68:c2:09:0a:29:fd:40:39:6f:e9:2f:b8:
         74:bc:21:25:c2:bb:49:0b:a9:ca:3d:e5:d5:82:3b:6a:b9:72:
         2d:fa:44:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:38:48 2026 by rpki-client