This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/g-5OExobBPKpwq86-mokeUHrM5s.roa
File:                     g-5OExobBPKpwq86-mokeUHrM5s.roa (raw, json)
Hash identifier:          esJBdIejJQA3R77ejO+4/6JoDvhxDi/exjc+GoZuVe8=
Subject key identifier:   83:EE:4E:13:1A:1B:04:F2:A9:C2:AF:3A:FA:6A:24:79:41:EB:33:9B
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       019B7758F57DD4F35206D53EB6561B619DF9
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/g-5OExobBPKpwq86-mokeUHrM5s.roa
Signing time:             Thu 01 Jan 2026 02:17:57 +0000
ROA not before:           Thu 01 Jan 2026 02:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215416
IP address blocks:        5.134.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:f5:7d:d4:f3:52:06:d5:3e:b6:56:1b:61:9d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jan  1 02:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=83ee4e131a1b04f2a9c2af3afa6a247941eb339b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:99:11:93:25:83:80:97:40:ce:8a:56:2d:
                    5f:63:d2:ac:ae:e6:84:37:ec:3f:ca:d3:95:00:93:
                    f6:5b:4a:53:5d:e0:3c:fb:01:58:86:dd:cb:c5:62:
                    48:4a:ea:70:3c:e8:89:8b:f5:54:5d:9b:a7:1f:b5:
                    f2:66:7d:c3:da:2e:c1:d3:b9:bd:d3:62:73:5a:a6:
                    5c:bd:26:29:92:7c:a7:d8:74:e8:3d:66:7f:ac:b0:
                    af:fe:21:db:8e:8f:3b:17:50:3b:be:71:d1:ad:b3:
                    d7:dd:f3:2d:fb:1e:7f:2a:9f:ca:f0:e7:95:57:08:
                    c0:9b:2e:5f:1b:f4:23:a0:37:ac:f5:29:85:d6:15:
                    10:7e:3a:13:97:6d:45:0c:b6:a3:df:c8:3c:98:97:
                    d8:fe:95:02:32:f5:4e:76:8a:1f:99:8a:a7:7c:fd:
                    aa:51:f7:5a:69:04:6c:fd:24:62:ce:2b:56:b1:26:
                    c3:d6:78:24:b6:35:7e:08:05:45:2d:5c:29:26:6d:
                    19:ab:f2:0d:29:1f:49:86:93:85:7c:8d:a3:55:4b:
                    12:6d:fd:f6:44:65:ac:96:be:d2:09:9b:0a:1c:ea:
                    5e:40:81:b1:50:04:6e:0a:f3:88:6a:d5:81:dd:3e:
                    d0:4a:ac:3c:18:34:b8:1d:a4:8f:81:3e:3b:00:17:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EE:4E:13:1A:1B:04:F2:A9:C2:AF:3A:FA:6A:24:79:41:EB:33:9B
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/g-5OExobBPKpwq86-mokeUHrM5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:53:fa:fa:de:7a:4f:06:4c:c8:ec:9c:88:9c:9f:e7:b1:53:
         06:fa:b3:3a:55:fe:9c:a2:cc:ca:09:13:c6:bf:06:e0:d3:55:
         fa:8d:8c:ed:30:5d:90:0d:2e:94:c7:e6:f9:a0:5d:d5:6d:a6:
         72:13:ce:d8:0a:1c:44:e1:e4:58:c2:e4:81:8b:d6:ab:f5:e8:
         39:ca:0c:ef:75:03:82:ae:ff:a0:04:81:ca:f5:47:c2:b1:2a:
         94:41:d0:ee:5b:96:e1:56:0d:b1:81:8a:b9:62:f7:41:c6:1c:
         4a:0a:a1:8b:1d:25:9a:f6:f2:0c:fa:07:17:30:60:a0:af:a9:
         8f:de:d8:bd:3e:d4:cf:ba:bc:cd:dd:22:57:35:37:4d:01:f1:
         48:e4:2e:11:08:1e:f3:f7:25:5b:7a:e3:48:d0:c7:5b:92:0e:
         db:97:bc:fb:50:2a:52:94:48:b5:af:21:e9:10:ec:07:e7:7c:
         4a:43:9a:c4:68:28:9a:df:cc:ba:07:ce:d8:73:58:8d:21:b5:
         fc:2b:1c:6e:38:aa:ea:23:67:a1:17:de:98:5d:a4:b2:ad:1e:
         5d:3a:01:c3:f1:83:a4:a2:c3:7a:54:8d:44:ab:a9:9a:45:59:
         a6:be:18:25:4f:6c:4c:dc:cf:a2:fc:50:82:b1:ee:fa:9d:f3:
         77:9b:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:24 2026 by rpki-client