This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5T6muliVBW8fS-8i29q4TfjPKww.roa
File:                     5T6muliVBW8fS-8i29q4TfjPKww.roa (raw, json)
Hash identifier:          tQ3qJO54TZ3cHoxqFq0bCzVKBXdLkF5Xol5mChz7hcM=
Subject key identifier:   E5:3E:A6:BA:58:95:05:6F:1F:4B:EF:22:DB:DA:B8:4D:F8:CF:2B:0C
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019B7E39047019CB8CBE2620CEC2D5A25DDB
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5T6muliVBW8fS-8i29q4TfjPKww.roa
Signing time:             Fri 02 Jan 2026 10:20:24 +0000
ROA not before:           Fri 02 Jan 2026 10:20:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28725
IP address blocks:        212.96.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:04:70:19:cb:8c:be:26:20:ce:c2:d5:a2:5d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Jan  2 10:20:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e53ea6ba5895056f1f4bef22dbdab84df8cf2b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:58:82:f5:79:57:5e:06:b8:74:99:32:ea:
                    8b:c7:ff:ce:90:4b:74:bb:c9:8a:10:0a:fd:18:fe:
                    9a:6a:02:94:04:54:2d:77:bf:6b:8a:aa:25:8d:87:
                    36:73:56:f5:e6:43:7e:cb:2a:ee:d5:e8:4d:01:ac:
                    36:e9:71:ed:67:b0:d1:e4:8e:90:28:ff:5b:d8:f1:
                    e6:17:68:cf:ca:ce:de:7b:80:ab:1f:72:ae:83:85:
                    94:e3:a0:ef:74:d9:76:a4:ae:6f:11:02:ae:35:9f:
                    b2:5a:77:6e:1e:c9:27:2b:ba:93:aa:8c:99:65:e0:
                    fd:49:64:c4:bf:f8:c0:28:81:70:aa:df:5c:22:a2:
                    c3:5f:64:0e:76:e6:71:39:1a:eb:f7:da:22:68:77:
                    75:5e:b4:66:18:95:ca:b1:20:65:2d:89:47:95:d2:
                    40:5e:74:cd:23:de:ac:a1:bc:0e:6f:55:a0:31:67:
                    fa:13:98:19:12:95:83:e8:24:f3:3d:92:5b:65:8f:
                    f4:4b:94:b9:56:a7:b9:5e:ab:a0:31:6c:6a:47:e9:
                    7a:8c:29:c8:c2:d3:2a:d5:22:c6:8f:e2:dc:3d:b8:
                    97:89:f0:ee:7b:72:c6:bf:60:88:1a:33:c1:d3:26:
                    6e:b5:65:32:1a:d4:8a:5d:51:93:8e:ac:94:82:e9:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3E:A6:BA:58:95:05:6F:1F:4B:EF:22:DB:DA:B8:4D:F8:CF:2B:0C
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5T6muliVBW8fS-8i29q4TfjPKww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.96.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:57:1a:4e:86:34:e2:6b:3a:55:4a:57:f0:c1:05:20:f9:5e:
         bc:dd:b0:52:a8:e2:49:c9:bd:39:d5:25:b0:8b:47:d1:90:e5:
         b2:89:f8:cd:46:fd:a8:21:32:cc:df:91:ce:c1:ff:a6:eb:2d:
         cd:7a:6b:96:3c:60:f9:88:96:b7:8a:e7:6f:be:6f:a2:b3:9f:
         2f:3a:98:c0:25:e0:8f:7f:7e:40:1c:2e:c4:f7:6f:84:60:ce:
         e5:65:a8:76:36:2b:79:ce:eb:47:99:41:07:6d:68:4b:0f:3e:
         4b:e0:95:b9:da:a3:fe:01:60:e8:1a:0e:12:e3:3e:49:ab:b4:
         dc:24:ff:2a:93:1a:bb:56:a0:78:c8:66:c2:05:21:46:3e:ca:
         2f:f4:1c:3c:1c:6a:2a:57:96:16:a3:d0:f6:c2:ad:51:59:a9:
         5a:4e:a8:06:5d:2a:77:73:7d:05:50:3d:68:8d:16:ec:3e:d9:
         cf:3a:aa:bb:d5:58:cb:0a:da:0c:23:a2:d2:34:83:a3:84:b4:
         01:57:01:b0:9e:b4:f8:e9:d7:5c:b1:ef:c3:6d:f0:5d:4d:2a:
         2b:48:90:d8:b7:d5:61:3e:c6:fb:af:14:be:7f:f2:a7:48:1f:
         53:c0:74:e7:63:9b:4d:fc:23:da:a4:bb:08:23:e3:3d:64:6a:
         db:29:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:49 2026 by rpki-client