This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/g5Y-_EcPjE3O__qFJoDexDcP9QQ.roa
File:                     g5Y-_EcPjE3O__qFJoDexDcP9QQ.roa (raw, json)
Hash identifier:          jA08FUCpbAyf9PB0HMueJkfNek08hakgUpGNyDn6Z64=
Subject key identifier:   83:96:3E:FC:47:0F:8C:4D:CE:FF:FA:85:26:80:DE:C4:37:0F:F5:04
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       019BEF6A78A04A7489B1FFAEA6BA67AE25D7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/g5Y-_EcPjE3O__qFJoDexDcP9QQ.roa
Signing time:             Sat 24 Jan 2026 09:51:30 +0000
ROA not before:           Sat 24 Jan 2026 09:51:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        163.5.53.0/24 maxlen: 24
                          163.5.58.0/24 maxlen: 24
                          163.5.102.0/24 maxlen: 24
                          163.5.119.0/24 maxlen: 24
                          163.5.136.0/24 maxlen: 24
                          163.5.157.0/24 maxlen: 24
                          163.5.161.0/24 maxlen: 24
                          163.5.175.0/24 maxlen: 24
                          163.5.179.0/24 maxlen: 24
                          163.5.182.0/24 maxlen: 24
                          163.5.186.0/24 maxlen: 24
                          163.5.196.0/24 maxlen: 24
                          163.5.200.0/24 maxlen: 24
                          163.5.215.0/24 maxlen: 24
                          163.5.223.0/24 maxlen: 24
                          163.5.238.0/24 maxlen: 24
                          163.5.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ef:6a:78:a0:4a:74:89:b1:ff:ae:a6:ba:67:ae:25:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jan 24 09:51:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=83963efc470f8c4dcefffa852680dec4370ff504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:07:69:54:98:be:50:5b:1e:0f:8a:83:50:
                    8d:9c:81:e4:67:2a:16:b7:ef:a6:24:88:74:14:58:
                    24:e8:32:2b:c7:d7:6c:dc:db:44:30:16:e8:1b:32:
                    38:cd:a4:67:17:3b:fd:52:c0:60:38:3c:d9:b7:aa:
                    9e:1f:82:42:a7:8c:71:14:8e:90:74:c6:df:f6:80:
                    33:c0:58:99:ca:ed:de:05:55:22:00:52:f0:44:6b:
                    09:7e:84:67:92:88:e2:97:72:cb:ed:7e:e9:dc:d5:
                    83:87:9b:0a:17:9f:c5:9f:e0:57:bd:2f:69:cb:01:
                    aa:b0:ba:9b:a9:6b:0c:4a:8c:c9:47:64:09:60:85:
                    78:22:ed:72:34:32:c9:4b:9f:9a:5c:2d:a8:06:26:
                    a4:ab:0e:30:a4:67:6c:0e:cc:a9:34:b7:ba:65:cb:
                    02:5b:89:c7:85:27:73:f5:b9:9b:6c:4f:d2:c0:8b:
                    26:e2:f7:16:fb:2c:6d:b1:e6:ec:ef:7f:8a:24:09:
                    71:c0:a1:4e:13:83:54:f5:95:81:80:97:30:c4:2e:
                    ea:96:ad:df:c2:24:e8:ec:32:97:a7:6c:98:c2:37:
                    e6:c4:d9:b1:91:f5:4e:08:cb:e0:b5:04:df:90:05:
                    58:ef:c2:96:66:18:01:13:0a:00:f3:fc:63:d4:5e:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:96:3E:FC:47:0F:8C:4D:CE:FF:FA:85:26:80:DE:C4:37:0F:F5:04
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/g5Y-_EcPjE3O__qFJoDexDcP9QQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.53.0/24
                  163.5.58.0/24
                  163.5.102.0/24
                  163.5.119.0/24
                  163.5.136.0/24
                  163.5.157.0/24
                  163.5.161.0/24
                  163.5.175.0/24
                  163.5.179.0/24
                  163.5.182.0/24
                  163.5.186.0/24
                  163.5.196.0/24
                  163.5.200.0/24
                  163.5.215.0/24
                  163.5.223.0/24
                  163.5.238.0/24
                  163.5.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:42:89:16:c2:33:50:c3:b8:52:5d:c4:b2:5b:e7:92:fe:5a:
         47:10:ff:b0:a4:1c:5d:c9:e5:bf:88:e9:b5:1c:a3:92:86:1a:
         95:f3:38:db:46:c3:f6:6d:0a:96:8a:76:b1:c9:79:60:2b:c9:
         dd:71:10:3b:9b:17:2e:ce:88:26:d2:61:56:fc:e4:df:99:2a:
         84:c3:77:ed:f4:c3:f5:7d:8d:05:0e:3a:9c:4d:18:4f:53:72:
         22:92:00:4d:96:0d:e4:67:e0:95:d5:ea:d2:40:0d:b4:aa:3b:
         cf:d0:8b:78:7b:c7:e3:69:53:30:5c:aa:24:bd:70:bc:4b:a7:
         38:7a:5e:2e:7a:2f:e7:4f:fd:46:8a:16:72:d2:c5:3f:68:ff:
         15:5c:98:e3:c5:84:87:95:3a:14:22:b1:50:1e:b6:df:53:2a:
         85:b1:da:4b:20:16:e0:b1:0c:7a:33:4d:76:bb:a6:6e:7d:31:
         c6:47:3c:ff:f8:9a:6b:b5:66:24:b6:73:3b:5d:86:0e:56:f1:
         ec:65:da:b4:a9:0a:8e:20:1e:5e:36:56:5f:19:3e:bb:99:c5:
         d7:6d:ad:60:63:16:d6:16:04:70:36:17:08:84:58:7b:67:28:
         ec:87:8c:19:d8:3a:ff:dc:6d:48:03:bf:2f:74:74:b1:dc:15:
         b8:4c:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:48:25 2026 by rpki-client