This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/5NepKsibkXxq0cC5aAvvP_8JjP4.roa
File:                     5NepKsibkXxq0cC5aAvvP_8JjP4.roa (raw, json)
Hash identifier:          7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=
Subject key identifier:   E4:D7:A9:2A:C8:9B:91:7C:6A:D1:C0:B9:68:0B:EF:3F:FF:09:8C:FE
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       019B797E959F173ED4CE988291F3CB973900
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/5NepKsibkXxq0cC5aAvvP_8JjP4.roa
Signing time:             Thu 01 Jan 2026 12:18:17 +0000
ROA not before:           Thu 01 Jan 2026 12:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198121
IP address blocks:        193.224.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:95:9f:17:3e:d4:ce:98:82:91:f3:cb:97:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Jan  1 12:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e4d7a92ac89b917c6ad1c0b9680bef3fff098cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:16:42:1b:f5:99:c2:f5:21:2a:0d:a5:5d:
                    f1:61:68:b4:0b:d6:65:02:26:f0:e3:92:7b:60:c6:
                    1e:6d:91:32:98:76:81:11:66:86:d4:e6:e3:5c:dc:
                    4d:68:03:37:1d:e6:b3:44:5f:90:48:23:bf:ce:67:
                    01:64:67:f4:7c:76:63:a8:14:6c:12:3a:74:76:1b:
                    84:55:2d:68:ea:40:c1:a0:c5:07:36:d9:42:9b:7a:
                    fa:a1:0e:73:42:c4:6d:4c:0e:02:e0:82:d8:1e:da:
                    b1:6b:2f:8c:60:81:88:9b:b8:ca:7a:15:82:ee:52:
                    e9:67:66:bb:d0:bc:4c:b8:e6:90:35:9a:b5:a6:68:
                    b8:9b:f8:62:ee:ff:22:d8:10:01:40:1a:01:6b:b4:
                    8e:91:72:0c:60:2a:a9:6a:91:c5:d3:82:23:02:11:
                    37:42:ef:b4:52:d8:8a:97:c5:c4:ad:7a:66:cc:e5:
                    9a:46:9f:d8:8e:41:b3:dc:28:c0:48:e0:22:27:ed:
                    84:ec:ad:83:96:4b:b8:1d:39:dc:7f:c6:15:c6:77:
                    c4:01:37:2d:a4:b3:2e:f2:19:b1:09:9b:16:a5:2f:
                    93:90:3b:51:1d:fa:b5:5a:0e:93:cd:b3:b5:d1:61:
                    98:fb:21:7c:1b:69:97:04:e6:c4:10:a5:69:1e:51:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:A9:2A:C8:9B:91:7C:6A:D1:C0:B9:68:0B:EF:3F:FF:09:8C:FE
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/5NepKsibkXxq0cC5aAvvP_8JjP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.224.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:43:c7:26:99:26:c8:3f:85:d7:75:75:ab:3b:27:c0:f7:30:
         7e:65:74:06:7b:ba:99:b3:8c:e6:34:11:a6:c8:2c:dd:df:73:
         45:aa:65:14:3c:ac:f3:75:be:88:28:91:6b:bb:31:cb:d7:73:
         ff:99:e2:00:28:0b:29:df:76:9a:5a:6a:92:0f:5c:c8:a5:e3:
         8f:f1:12:53:9a:37:a0:a3:a3:a1:62:5d:41:c2:cb:9a:13:6b:
         8c:64:be:e9:10:b1:0f:7b:86:9d:28:8e:e7:38:06:eb:44:e5:
         8b:b8:c7:ee:65:d4:c5:46:df:e8:3a:9b:64:62:4b:54:57:5f:
         39:c3:b5:11:e0:9f:ab:70:7e:97:83:d0:92:ab:7b:bc:a7:44:
         00:20:74:d5:fb:ba:09:7a:dc:0a:d3:46:04:47:f0:26:96:48:
         b8:6b:70:30:2a:51:67:e6:41:29:85:5b:3b:10:ea:e2:06:57:
         3c:77:e6:46:a5:71:b9:af:8c:44:c2:b8:d9:2e:1b:95:02:c9:
         15:6b:cd:f6:10:34:6b:40:4e:72:2c:67:12:ef:02:e6:88:36:
         3e:e8:d1:4a:4c:07:93:d0:5a:87:87:e3:a4:f3:69:d0:d6:56:
         8c:ac:94:d4:3d:00:56:ff:59:e5:17:db:a0:fa:33:c7:99:f6:
         55:90:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:39 2026 by rpki-client