This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/b5_puVoiaaK1luof_u2L7B-PTEE.roa
File:                     b5_puVoiaaK1luof_u2L7B-PTEE.roa (raw, json)
Hash identifier:          Uuu9Wl4sZx9v7YzIOuwEsj+WuePom5BSk93dnj/mc9Q=
Subject key identifier:   6F:9F:E9:B9:5A:22:69:A2:B5:96:EA:1F:FE:ED:8B:EC:1F:8F:4C:41
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       019B7DCB2AC3C18644CE1CA88EF61D419A2D
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/b5_puVoiaaK1luof_u2L7B-PTEE.roa
Signing time:             Fri 02 Jan 2026 08:20:25 +0000
ROA not before:           Fri 02 Jan 2026 08:20:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43366
IP address blocks:        82.150.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:2a:c3:c1:86:44:ce:1c:a8:8e:f6:1d:41:9a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Jan  2 08:20:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f9fe9b95a2269a2b596ea1ffeed8bec1f8f4c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:87:ab:ea:56:7e:4d:81:42:37:6c:ba:10:5e:
                    15:5f:75:25:21:a6:e5:b3:d0:79:1b:a3:5b:5e:49:
                    2d:e6:eb:c7:04:f7:ca:62:d6:2c:03:aa:2e:7b:8d:
                    5b:a2:51:0b:7d:15:ec:8b:bb:7d:19:4e:e9:70:45:
                    1e:c1:25:5a:c1:94:f2:e2:c8:7f:74:ad:11:1a:94:
                    e0:01:ee:72:c0:15:99:68:88:27:45:3b:f9:9c:aa:
                    28:1f:92:31:73:db:f2:7b:9e:d8:cc:1d:d8:c3:8d:
                    53:65:2e:80:7d:61:45:25:cc:61:e0:23:79:a4:5c:
                    de:8c:35:93:75:f9:e5:c7:82:51:0e:17:a7:08:cd:
                    a7:a6:5a:85:c6:16:04:8d:c8:81:36:05:07:2f:99:
                    55:59:43:bb:cb:66:8b:35:f6:e8:5c:1a:9c:86:07:
                    16:c1:c2:34:53:6f:48:18:0e:6d:ba:31:d9:d3:1b:
                    65:16:2c:25:8a:51:b6:aa:4c:a2:ef:18:c1:92:b3:
                    e1:87:7c:ea:10:ee:b1:fe:82:2f:4b:fc:07:c6:ce:
                    a5:31:02:83:fb:03:1a:25:39:c9:44:9e:a4:4b:b6:
                    ec:10:b9:33:79:62:b6:a4:4d:e9:93:21:65:70:83:
                    15:19:14:7f:2c:cf:1a:72:0d:ec:92:df:23:36:c3:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9F:E9:B9:5A:22:69:A2:B5:96:EA:1F:FE:ED:8B:EC:1F:8F:4C:41
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/b5_puVoiaaK1luof_u2L7B-PTEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.150.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a0:f5:a5:5d:f4:14:cf:e7:9c:3b:92:b4:ad:0a:ae:6f:d7:
         01:33:b2:de:a2:aa:d9:34:12:fd:e2:48:9e:53:bd:f1:bb:50:
         32:fc:36:af:1e:6c:b6:01:fe:ad:16:54:01:9a:d1:6e:6b:90:
         b2:6e:26:cd:5d:62:1b:81:e2:de:74:a7:4c:39:c1:82:90:03:
         fa:db:eb:aa:19:b4:0b:91:42:6b:ce:71:4b:54:1d:bd:dd:bd:
         3f:23:0f:f4:ad:87:1d:6c:8b:30:07:87:1f:48:50:89:78:e9:
         3d:81:57:ea:22:a2:c1:f4:e2:2e:9d:bb:f4:8a:85:ba:63:30:
         61:f5:57:6d:c0:20:8e:20:0d:06:cc:8e:91:76:a3:d6:b8:82:
         65:0d:42:28:e5:d5:7a:48:a3:19:2d:f6:ab:7d:4a:99:3f:61:
         f2:43:13:83:eb:ef:87:1f:e8:78:b1:3c:75:2d:5e:e5:32:34:
         36:33:82:d5:cb:b4:c1:ed:19:93:b2:23:01:a2:59:e3:0e:85:
         51:eb:11:b7:52:1d:aa:56:8b:aa:21:ab:07:6e:30:fa:22:87:
         23:9c:85:af:89:49:6c:71:a4:67:60:07:b7:25:84:8c:38:70:
         28:0b:f5:fd:f3:4d:a4:8e:bb:cc:4e:0d:fe:39:41:25:f5:05:
         57:e0:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:06:29 2026 by rpki-client