This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5Ijh0ndBehWTBz-5PDqwKuErTk4.roa
File:                     5Ijh0ndBehWTBz-5PDqwKuErTk4.roa (raw, json)
Hash identifier:          PioIepS+0/QeD2IjWIHCQLfPyCS4i9r0w1X2pVYevkQ=
Subject key identifier:   E4:88:E1:D2:77:41:7A:15:93:07:3F:B9:3C:3A:B0:2A:E1:2B:4E:4E
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C79BFF578EEC1CB2AC608FEE1F159C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5Ijh0ndBehWTBz-5PDqwKuErTk4.roa
Signing time:             Thu 01 Jan 2026 04:18:48 +0000
ROA not before:           Thu 01 Jan 2026 04:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216446
IP address blocks:        195.136.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:9b:ff:57:8e:ec:1c:b2:ac:60:8f:ee:1f:15:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e488e1d277417a1593073fb93c3ab02ae12b4e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:20:01:01:07:9b:7c:38:b5:a2:ec:34:f6:
                    cc:e7:3c:b4:c4:7a:12:19:0d:63:ed:c5:54:9b:4f:
                    c9:89:46:3e:a2:82:9f:87:5e:29:aa:79:80:bb:c3:
                    f5:6b:0d:c7:4b:23:e7:d9:a5:5a:38:ea:9f:8e:de:
                    34:98:8e:5d:88:a4:08:cc:1d:42:95:44:60:a8:26:
                    e3:6e:92:a3:e1:1d:e5:f6:eb:dd:42:a6:79:13:34:
                    d0:ce:33:29:54:e3:44:0c:2b:64:43:2f:41:0a:40:
                    f3:96:64:cf:cc:37:a1:fb:c8:e6:74:59:b0:ad:22:
                    68:f8:50:1b:32:69:05:0c:cc:63:7d:b8:a5:47:d8:
                    7b:58:9d:8d:f3:ab:ce:5f:57:33:56:9e:bd:2a:9d:
                    62:83:75:66:05:23:38:15:94:4c:6f:f0:69:7d:48:
                    11:a5:9e:5e:d9:f7:6b:2b:90:cd:3f:90:50:f8:a2:
                    33:e2:43:7a:50:91:23:d3:3e:5e:45:b6:9b:5c:0a:
                    0f:77:c8:93:dd:70:99:58:1f:9a:83:13:1f:a1:eb:
                    6b:82:4e:5a:f5:84:cd:20:15:cb:99:f9:a8:ef:63:
                    ae:11:b3:19:9f:a8:ff:6a:1f:90:a2:ed:a0:5e:1e:
                    da:ff:74:0a:1a:50:e1:45:af:9d:fe:f7:4c:f5:d2:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:E1:D2:77:41:7A:15:93:07:3F:B9:3C:3A:B0:2A:E1:2B:4E:4E
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5Ijh0ndBehWTBz-5PDqwKuErTk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.136.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:e4:1a:e8:21:d1:18:89:5f:aa:42:59:36:99:e7:16:18:2c:
         6e:ff:41:8b:16:63:fd:b1:13:91:cf:e8:a1:fd:b9:35:8f:37:
         8e:7d:60:53:90:c7:40:1e:e9:87:f3:4f:c8:15:9c:f1:3a:89:
         14:1c:a1:1b:fd:4b:34:2f:d0:b1:87:22:11:41:91:c3:7f:6e:
         ff:07:57:4c:c7:cb:41:88:e9:25:3b:b9:8c:4d:01:18:34:a9:
         38:25:a3:20:ed:8a:a5:1c:c6:83:d9:a0:18:0f:3c:ef:07:82:
         43:34:74:60:ad:1a:b8:e0:f4:cd:de:b9:6e:5a:c1:b0:f7:33:
         90:38:b4:21:41:49:33:82:58:96:52:bf:6e:45:8a:26:ab:7d:
         7a:2e:82:32:75:fb:3c:7e:72:a7:80:b0:e8:c3:fb:ad:1c:76:
         20:5c:af:d2:2b:59:d3:ab:a7:0b:86:d6:31:83:1b:36:06:6d:
         ed:9e:72:66:01:3b:71:b7:56:c0:6b:98:96:81:f8:91:a4:0a:
         50:f9:89:85:6b:02:25:71:47:2f:fa:c0:ee:6f:1f:04:b6:ec:
         58:91:80:26:a1:f4:9e:53:3a:9c:87:22:b7:fa:4a:f6:27:58:
         bf:d7:74:94:67:2f:ee:4e:6a:53:a0:27:d5:97:b2:7c:a7:f1:
         07:ff:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:04 2026 by rpki-client