This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/65LLFCqF5uDnxG2T7Fr5daubIfg.roa
File:                     65LLFCqF5uDnxG2T7Fr5daubIfg.roa (raw, json)
Hash identifier:          5TT2xYzPl9RC/A8fD/N8GvSeuihYgWJ6dQlIc2h9pJA=
Subject key identifier:   EB:92:CB:14:2A:85:E6:E0:E7:C4:6D:93:EC:5A:F9:75:AB:9B:21:F8
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C7800F12FEF4728FB4D265DF140CAF
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/65LLFCqF5uDnxG2T7Fr5daubIfg.roa
Signing time:             Thu 01 Jan 2026 04:18:41 +0000
ROA not before:           Thu 01 Jan 2026 04:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62258
IP address blocks:        81.15.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:80:0f:12:fe:f4:72:8f:b4:d2:65:df:14:0c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb92cb142a85e6e0e7c46d93ec5af975ab9b21f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:82:57:5c:5b:7b:46:71:99:83:1f:55:68:
                    ff:5c:20:04:80:35:1f:e6:4e:6e:8d:9c:1e:57:48:
                    47:bb:f0:1b:f4:5c:a4:33:2e:fe:03:3b:1a:4d:d8:
                    d3:9a:c8:2b:ed:fb:a1:64:39:97:61:7c:ec:d5:11:
                    7f:8e:dd:f9:4a:08:82:63:96:06:dc:db:4a:f3:bc:
                    73:10:e4:18:b6:ab:d7:da:f8:1b:48:b1:aa:02:39:
                    b7:81:ad:58:0f:c5:35:1c:d0:32:d5:37:98:38:40:
                    5b:26:b2:a0:3f:56:b0:21:d3:a8:a8:5f:cc:a4:e5:
                    e0:18:7e:50:8e:28:0d:b3:f1:83:8c:ee:0b:5b:87:
                    ff:16:a9:c4:97:32:19:d9:7a:98:2e:35:0b:e5:68:
                    a1:7f:19:e4:a4:f2:c3:a4:b9:8b:ea:57:41:a1:07:
                    1a:2f:5d:0e:6e:87:de:e0:2d:5f:46:da:b3:d3:56:
                    2a:32:7c:fb:66:d3:7b:12:7c:18:ac:1f:15:be:a7:
                    77:a0:16:a3:1d:9b:c2:c2:da:4a:b4:da:e3:f8:03:
                    57:58:79:81:78:a7:9a:00:a4:0c:c9:b1:38:26:3c:
                    01:96:78:be:f9:51:83:cb:24:4e:c6:92:3c:ee:35:
                    59:47:1f:a7:68:fc:fd:da:3a:19:a7:6f:01:2b:3d:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:92:CB:14:2A:85:E6:E0:E7:C4:6D:93:EC:5A:F9:75:AB:9B:21:F8
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/65LLFCqF5uDnxG2T7Fr5daubIfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:9a:2f:be:61:44:4a:7d:17:35:95:23:a9:5d:a6:ec:c0:4e:
         6e:ec:97:7b:0b:bb:39:ba:87:ec:d2:35:77:f3:dc:43:5e:5d:
         9b:f3:ac:b7:23:4a:f2:4e:3b:fb:05:45:78:e7:d3:a4:bc:26:
         fd:3e:75:fb:18:30:6c:8a:91:1f:39:46:9c:90:ca:33:f1:6b:
         0e:a9:42:4b:95:c3:6a:51:cb:55:34:a1:60:48:78:66:94:8f:
         bc:3f:ea:7b:17:10:05:f4:5a:86:6a:54:01:6b:01:55:0e:75:
         9c:37:ee:dd:cb:c7:b0:3d:87:af:e1:5a:9e:2b:dd:d1:0f:80:
         4e:1d:d5:00:79:6c:38:4b:37:9f:a8:f4:ea:89:33:01:4e:7c:
         8f:17:17:35:78:68:ce:65:df:c0:c1:53:ff:1c:c4:86:64:e3:
         d2:2b:92:e5:86:0d:a2:48:b0:71:24:a8:ca:d0:d9:c5:33:55:
         4d:e1:e6:68:21:a8:df:fa:38:b3:f9:02:35:bd:34:c8:bf:75:
         db:94:89:85:f1:18:f2:ea:b7:ba:7e:49:88:5d:31:5a:f0:91:
         ce:42:c9:27:c2:ba:af:f3:f9:d0:67:76:3c:ee:4c:3d:c8:3a:
         d4:de:45:66:cf:42:9c:0a:dc:e5:49:cd:c3:9c:f7:f0:a2:67:
         c6:37:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:17 2026 by rpki-client