This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/TSfqyIUxAgfu2d6E5vUEde-a71w.roa
File:                     TSfqyIUxAgfu2d6E5vUEde-a71w.roa (raw, json)
Hash identifier:          m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=
Subject key identifier:   4D:27:EA:C8:85:31:02:07:EE:D9:DE:84:E6:F5:04:75:EF:9A:EF:5C
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       019B7AC8C72AFF6D387134EF33944023316B
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/TSfqyIUxAgfu2d6E5vUEde-a71w.roa
Signing time:             Thu 01 Jan 2026 18:18:57 +0000
ROA not before:           Thu 01 Jan 2026 18:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48214
IP address blocks:        194.5.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:c7:2a:ff:6d:38:71:34:ef:33:94:40:23:31:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Jan  1 18:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d27eac885310207eed9de84e6f50475ef9aef5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:74:27:48:ea:41:be:63:86:29:6b:db:82:
                    50:28:ee:35:4e:1a:bc:14:3f:ae:25:82:88:a0:e3:
                    30:2c:12:e3:51:d3:34:a6:8e:ed:22:56:86:e3:ec:
                    cd:d6:ee:ab:40:a5:1b:45:da:34:e6:15:9d:37:6f:
                    5b:c7:0d:0d:1b:a7:1a:b6:5b:17:d7:fa:11:d5:c0:
                    ee:1f:52:11:69:d2:cc:ec:65:4d:fa:02:31:d0:d5:
                    89:49:d7:e1:16:b9:f7:c3:6e:df:45:8c:fc:28:b3:
                    79:3c:5e:a8:d5:58:91:ec:0e:ee:0e:88:d6:3e:c1:
                    2e:1a:04:cd:84:ea:d2:92:50:26:87:3f:01:c8:de:
                    51:ab:7d:d1:32:e9:e3:af:07:40:8c:40:55:ee:c7:
                    6e:cd:8c:47:3d:70:92:d8:aa:b8:5f:25:c3:c9:d9:
                    9e:eb:06:1a:76:cb:08:79:11:85:cc:ea:8b:ed:dc:
                    96:9f:32:73:3d:54:dd:81:d5:d4:41:f6:b8:8c:ba:
                    43:db:e5:6d:ae:43:1c:1f:7c:e0:da:48:77:75:d1:
                    fc:38:5d:03:17:ef:40:e6:5a:56:3a:ee:96:0b:15:
                    bf:c4:1b:26:39:0d:eb:97:01:f8:7c:3c:7d:cd:95:
                    de:bc:23:54:a8:60:a9:34:3a:3b:7d:10:0a:cb:ae:
                    84:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:27:EA:C8:85:31:02:07:EE:D9:DE:84:E6:F5:04:75:EF:9A:EF:5C
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/TSfqyIUxAgfu2d6E5vUEde-a71w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:8a:dd:8a:84:5e:8d:de:d5:62:2e:1f:58:8b:7e:35:75:4c:
         9e:00:22:c9:96:b2:ee:be:11:77:9a:34:ac:95:0f:68:94:50:
         db:92:69:8d:2f:5a:d1:62:1f:28:a0:67:2a:4b:7d:31:7d:45:
         ee:75:5c:43:03:39:81:76:d2:10:07:4c:17:1d:61:e3:8d:d6:
         7d:e0:57:4d:1e:f9:dd:41:c9:f7:0c:a5:e1:59:4a:40:46:85:
         37:d4:3c:33:a9:ed:d8:9b:65:f6:c0:3f:2f:b3:b9:cc:69:eb:
         84:07:1e:be:2a:78:2f:45:9e:d9:52:89:47:c2:47:1f:26:69:
         13:72:f7:7c:36:3e:eb:81:64:6d:8c:1f:83:4f:2d:ce:c5:31:
         9b:64:54:ff:1c:b1:5b:45:9a:e7:93:4b:25:05:d0:94:a3:7f:
         c3:1e:5a:b4:1c:2f:a5:7c:14:19:65:54:5f:73:40:cb:f5:b2:
         25:08:a1:16:ff:d0:ee:9c:4e:0f:1e:3a:a4:51:80:6f:88:b7:
         da:55:05:a8:e7:ec:b6:b8:10:6c:ed:37:64:df:23:1d:44:03:
         7e:78:2f:db:2e:fa:82:89:3b:69:94:02:31:12:cc:a3:2e:ac:
         16:b6:ae:d4:19:3a:96:a2:f2:86:e7:3b:a1:93:c0:91:7f:dd:
         ce:6d:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:22 2026 by rpki-client