This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/5o1v4mXIeJs6p12mBd_dW7BRrug.roa
File:                     5o1v4mXIeJs6p12mBd_dW7BRrug.roa (raw, json)
Hash identifier:          KVqjHuPGGd6CpyGaEFavV+jOYptcK1CSG4YGFLsZKxE=
Subject key identifier:   E6:8D:6F:E2:65:C8:78:9B:3A:A7:5D:A6:05:DF:DD:5B:B0:51:AE:E8
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       019B7AC7EB620A1B0C05D671F9B386D3FB9E
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/5o1v4mXIeJs6p12mBd_dW7BRrug.roa
Signing time:             Thu 01 Jan 2026 18:18:00 +0000
ROA not before:           Thu 01 Jan 2026 18:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2386
IP address blocks:        145.139.13.0/24 maxlen: 24
                          145.139.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:eb:62:0a:1b:0c:05:d6:71:f9:b3:86:d3:fb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 18:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e68d6fe265c8789b3aa75da605dfdd5bb051aee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:f8:9e:0f:73:0e:61:e9:8f:90:b7:e2:1e:
                    2d:8e:6f:28:c1:c1:59:a5:0c:79:db:96:cb:35:36:
                    a2:47:ed:fb:19:ef:d3:97:d7:61:1f:9b:d8:51:06:
                    7c:53:30:2b:c4:bf:f0:6a:87:cf:ab:6b:ec:2e:60:
                    34:65:f6:99:b7:88:7b:82:b6:af:5a:c9:3c:06:51:
                    bf:7f:88:9c:ec:dd:29:93:85:7c:b0:df:eb:ea:1a:
                    75:f8:78:f8:7f:56:c0:68:f9:b9:5a:54:df:6e:de:
                    58:d1:1e:a3:fd:ba:5b:30:9a:40:90:5e:39:c0:05:
                    0f:37:12:66:85:99:9d:5d:ac:61:09:08:77:86:bd:
                    a4:cf:1a:06:81:57:b0:a8:0b:20:b4:a4:e4:f8:de:
                    e3:28:30:4e:0f:3a:a9:e5:c2:14:a0:8d:45:c1:40:
                    5b:10:42:3f:b0:1b:f4:a9:69:f0:ec:0a:a9:2c:75:
                    03:b4:8d:50:b0:4c:0f:c0:70:fc:25:73:0a:6e:65:
                    69:03:e3:a1:8e:48:d8:5d:6c:b8:d1:97:e9:f9:41:
                    a1:8b:29:01:f5:63:40:6a:c0:50:fd:73:06:64:5f:
                    b4:3c:66:fd:5e:32:ea:03:69:63:78:b8:a7:6a:57:
                    46:f9:c5:cb:13:d7:2e:65:a1:70:07:1c:d9:f9:36:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8D:6F:E2:65:C8:78:9B:3A:A7:5D:A6:05:DF:DD:5B:B0:51:AE:E8
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/5o1v4mXIeJs6p12mBd_dW7BRrug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.139.13.0-145.139.14.255

    Signature Algorithm: sha256WithRSAEncryption
         b1:1a:5b:1d:01:f4:01:b6:2a:70:0e:49:9e:af:07:9c:ac:92:
         e9:ec:bc:55:52:c9:b8:26:7f:41:e5:d4:9c:a6:b3:6d:31:a2:
         53:30:09:4e:34:b3:b2:8f:db:b0:05:df:f3:cb:d5:5e:d1:d7:
         a1:14:12:22:31:64:d8:69:58:cd:3f:da:6e:a9:36:cc:d6:ee:
         e9:da:20:b7:5f:9a:2c:ed:ed:4d:19:33:b8:b4:6c:73:b8:f9:
         86:b3:4c:94:49:db:c9:67:04:93:3c:ed:3e:27:a6:16:4c:31:
         78:c0:9c:9c:5f:6e:c5:a1:a7:9a:13:c6:48:e1:84:9d:77:35:
         e5:20:18:83:45:5e:45:50:14:2f:7f:ba:28:1d:bb:ae:d9:e4:
         58:c9:81:e5:46:f5:fa:39:a7:41:f6:a0:0c:61:51:1c:90:f9:
         76:a0:c8:9a:92:97:99:3d:71:78:5d:8a:8d:07:6e:7e:08:a8:
         13:dd:69:d9:69:b0:c9:a4:cd:c5:f7:ee:6b:1e:a7:ae:13:3e:
         da:66:ac:aa:4c:e6:29:71:7e:4d:e8:a4:82:0a:17:92:d9:5f:
         3e:87:4e:c8:43:3e:6d:05:9e:e3:62:ba:53:5a:87:31:44:df:
         a5:5d:a3:0c:04:bd:fa:56:1c:82:de:c2:72:b0:52:84:12:1e:
         d6:9a:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:31 2026 by rpki-client