This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/5mKgFekCnX9KKHG8uIFOfOVDCpA.roa
File:                     5mKgFekCnX9KKHG8uIFOfOVDCpA.roa (raw, json)
Hash identifier:          kagBXZBwsp9ju+8Y236dOevCM6wVBUEfu+L4XYQKWOs=
Subject key identifier:   E6:62:A0:15:E9:02:9D:7F:4A:28:71:BC:B8:81:4E:7C:E5:43:0A:90
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       019B7F8338038D65F4FC9775695F0186FB3A
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/5mKgFekCnX9KKHG8uIFOfOVDCpA.roa
Signing time:             Fri 02 Jan 2026 16:21:04 +0000
ROA not before:           Fri 02 Jan 2026 16:21:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199891
IP address blocks:        82.160.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:38:03:8d:65:f4:fc:97:75:69:5f:01:86:fb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Jan  2 16:21:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e662a015e9029d7f4a2871bcb8814e7ce5430a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:d2:a6:6f:31:f1:ce:18:8a:96:7d:ef:c6:
                    b7:d1:c7:5c:ee:6a:27:2f:91:2b:40:6f:91:f3:fa:
                    9d:3e:aa:2c:99:da:d8:81:84:cf:ac:c5:ec:0d:76:
                    91:fb:9d:c6:ce:d3:39:67:a4:79:4e:d9:34:0b:76:
                    2a:ce:d2:43:18:53:3c:39:f3:32:a7:b8:3d:aa:d8:
                    cf:dd:df:cb:85:a3:b0:46:e9:ba:c5:92:5c:a3:ae:
                    18:72:51:84:76:72:48:7c:fb:d8:ae:42:32:f4:5b:
                    bf:1e:49:38:6b:5e:93:6c:4e:cd:11:49:76:34:b9:
                    5b:d2:ec:2c:33:62:ae:b6:b3:7f:26:6e:b6:7b:6c:
                    2d:07:26:97:a4:7c:1a:13:9f:77:cf:7e:5e:aa:b0:
                    f4:00:19:7a:47:14:09:e4:b7:de:cf:64:be:0a:08:
                    c8:c3:0b:29:d2:8f:11:ad:a6:0c:25:f1:01:3b:87:
                    4c:5e:76:93:37:be:ac:0e:06:c5:e0:09:c0:bf:ac:
                    ac:8e:b7:fd:b0:34:c6:f8:fb:99:c2:e9:13:7f:6f:
                    68:39:78:f2:61:33:fa:0c:bf:24:ca:c8:a4:f4:09:
                    5d:68:3a:bd:c4:e5:4f:03:e4:f6:42:14:52:77:bd:
                    ad:35:f1:ab:0d:cb:44:6c:c1:43:8d:81:e5:53:36:
                    52:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:62:A0:15:E9:02:9D:7F:4A:28:71:BC:B8:81:4E:7C:E5:43:0A:90
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/5mKgFekCnX9KKHG8uIFOfOVDCpA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.160.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:2b:07:ef:b7:3a:56:b0:29:1a:e6:12:ae:a7:ad:90:55:b1:
         4b:ae:8d:c1:ad:2b:33:02:90:62:3f:65:dc:95:8b:d8:4a:2b:
         41:eb:cd:87:e5:71:18:91:47:90:ab:67:61:46:1c:d1:d3:40:
         65:6b:e7:bb:6c:b2:db:46:98:ee:ea:4f:07:20:db:bc:f6:b3:
         5a:a3:7e:66:96:cd:7a:3b:c2:e8:11:dc:ba:1b:e9:d8:54:c1:
         e6:ec:17:74:03:45:11:a3:6c:2e:c1:1b:dd:a6:a4:77:bc:56:
         c5:a7:94:ae:3a:18:89:d8:1e:03:6f:e6:b3:7a:3c:eb:35:d2:
         4b:4c:c3:52:55:4b:e9:b9:0c:02:14:29:a7:77:70:7b:e3:8f:
         b6:a7:36:8c:ae:18:ef:be:da:b5:0f:42:1f:a1:0c:a8:c8:5d:
         e8:b8:3b:2f:81:cb:5f:cf:c6:81:3b:9d:4a:7c:36:6e:d6:74:
         e6:3f:5c:f2:51:48:44:6f:6c:75:d9:83:cc:09:b2:55:6b:d4:
         22:2f:d6:84:9d:f7:f3:cb:94:83:c8:30:25:fa:cb:1b:c3:8d:
         9f:b3:48:1a:0f:2e:39:91:15:e4:ee:8e:5d:a4:41:ce:ba:70:
         e5:a8:7a:3b:2f:03:3f:64:c6:28:72:7b:f1:ae:8d:ca:89:68:
         53:28:68:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/gzgDjWX0/Jd1aV8Bhvs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz
NmFiZmYwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjYyYTAxNWU5MDI5ZDdmNGEyODcxYmNiODgxNGU3Y2U1NDMwYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNrSpm8x8c4YipZ978a30cdc7mon
L5ErQG+R8/qdPqosmdrYgYTPrMXsDXaR+53GztM5Z6R5Ttk0C3YqztJDGFM8OfMy
p7g9qtjP3d/LhaOwRum6xZJco64YclGEdnJIfPvYrkIy9Fu/Hkk4a16TbE7NEUl2
NLlb0uwsM2KutrN/Jm62e2wtByaXpHwaE593z35eqrD0ABl6RxQJ5Lfez2S+CgjI
wwsp0o8RraYMJfEBO4dMXnaTN76sDgbF4AnAv6ysjrf9sDTG+PuZwukTf29oOXjy
YTP6DL8kysik9AldaDq9xOVPA+T2QhRSd72tNfGrDctEbMFDjYHlUzZSgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOZioBXpAp1/SihxvLiBTnzlQwqQMB8GA1UdIwQY
MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt
YWZmOTJjMTZkOGUzLzEvNW1LZ0Zla0NuWDlLS0hHOHVJRk9mT1ZEQ3BBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz
LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUqDcMA0G
CSqGSIb3DQEBCwUAA4IBAQBjKwfvtzpWsCka5hKup62QVbFLro3BrSszApBiP2Xc
lYvYSitB682H5XEYkUeQq2dhRhzR00Bla+e7bLLbRpju6k8HINu89rNao35mls16
O8LoEdy6G+nYVMHm7Bd0A0URo2wuwRvdpqR3vFbFp5SuOhiJ2B4Db+azejzrNdJL
TMNSVUvpuQwCFCmnd3B744+2pzaMrhjvvtq1D0IfoQyoyF3ouDsvgctfz8aBO51K
fDZu1nTmP1zyUUhEb2x12YPMCbJVa9QiL9aEnffzy5SDyDAl+ssbw42fs0gaDy45
kRXk7o5dpEHOunDlqHo7LwM/ZMYocnvxro3KiWhTKGhH
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:05:12 2026 by rpki-client