This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/F5-0m80tGgQaB6VZO47ty9lw_m0.roa
File:                     F5-0m80tGgQaB6VZO47ty9lw_m0.roa (raw, json)
Hash identifier:          oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=
Subject key identifier:   17:9F:B4:9B:CD:2D:1A:04:1A:07:A5:59:3B:8E:ED:CB:D9:70:FE:6D
Certificate issuer:       /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial:       019B79EC5330FF31B8901C13DF90DB3FEDA7
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/F5-0m80tGgQaB6VZO47ty9lw_m0.roa
Signing time:             Thu 01 Jan 2026 14:18:09 +0000
ROA not before:           Thu 01 Jan 2026 14:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45014
IP address blocks:        5.159.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:53:30:ff:31:b8:90:1c:13:df:90:db:3f:ed:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
        Validity
            Not Before: Jan  1 14:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=179fb49bcd2d1a041a07a5593b8eedcbd970fe6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:ff:2f:bd:15:75:f8:f4:b7:35:fa:b3:92:
                    af:08:c0:33:c4:e2:55:96:37:86:0a:62:a6:93:39:
                    ba:19:1d:6d:f1:58:2b:51:e8:d7:56:e3:58:be:d5:
                    9a:8a:f1:58:7f:44:15:af:d2:ea:88:e0:9e:36:3a:
                    f4:cf:a8:01:6f:71:23:4b:26:fd:6a:87:96:04:96:
                    4f:76:c1:c4:ef:7d:2c:10:9c:70:c9:bd:8c:6c:e3:
                    78:17:60:af:bc:32:23:93:e6:b8:f6:64:5b:84:05:
                    a4:16:d4:95:b0:b5:d1:fe:0c:4a:a4:1f:26:72:1a:
                    a0:e9:9f:22:6a:eb:f6:6f:a8:c4:cb:b9:95:72:75:
                    42:48:9c:56:42:63:33:d2:9c:e2:4d:3d:b9:81:33:
                    1e:0e:2f:00:87:0c:19:b6:9a:30:01:e7:72:1f:8b:
                    94:22:55:16:fd:13:93:ff:9d:9e:c1:c3:8c:7a:b3:
                    c6:a8:5d:fd:2b:ca:d3:40:a3:72:7a:5e:3c:01:8c:
                    95:6f:95:f2:0d:9b:27:50:e1:8d:95:f3:21:56:fe:
                    b9:14:69:2b:dd:50:74:30:ee:4a:43:08:02:07:e9:
                    a1:34:57:8a:38:bf:c0:e4:a2:dc:55:f0:aa:39:27:
                    82:df:08:65:8a:1d:1f:47:7b:05:e5:61:aa:33:7a:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9F:B4:9B:CD:2D:1A:04:1A:07:A5:59:3B:8E:ED:CB:D9:70:FE:6D
            X509v3 Authority Key Identifier:
                keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/F5-0m80tGgQaB6VZO47ty9lw_m0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.159.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:d6:82:94:68:cc:1d:3a:06:58:9a:96:fe:54:cd:16:9e:53:
         75:5f:2a:96:11:1c:d5:88:d4:77:85:5c:5f:e1:bc:dc:da:b0:
         ab:f0:43:fd:1d:1a:15:de:bb:c1:bc:cf:34:87:9f:6a:56:59:
         6f:b2:eb:86:74:7a:39:c5:b9:71:f2:f0:89:df:26:54:75:e5:
         87:4d:32:31:3e:64:62:60:38:50:fd:e0:2f:ef:3f:20:2d:92:
         a1:c4:91:bb:db:09:d3:7e:19:54:00:db:df:e8:b0:9c:df:b4:
         85:c0:5b:d5:27:74:89:0f:c7:e4:4c:6c:d0:ac:f8:e2:d5:63:
         60:3c:15:b7:60:39:e8:6d:79:3c:ad:2c:9e:4e:35:cf:eb:56:
         58:c1:e2:e0:3b:36:b3:2a:b0:21:33:b7:69:86:4b:dc:2d:aa:
         12:0d:1c:58:c7:36:54:d1:97:1c:c7:bf:68:80:bb:0d:59:c0:
         6c:5c:71:42:ba:e7:9b:65:46:e4:63:c0:92:05:db:19:04:1a:
         cd:57:63:44:6c:8d:2e:f8:ad:48:b5:f0:78:56:10:21:f8:cc:
         01:da:8d:ce:5a:6c:66:4c:f6:d9:56:f1:a4:f9:ee:bf:36:24:
         8e:04:10:40:29:ec:b3:53:0a:37:a5:b7:7b:8d:cf:30:9f:27:
         d5:aa:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:44:01 2026 by rpki-client