This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/5rstMAn4BxeJIjhDGUqU8LjDfCA.roa
File:                     5rstMAn4BxeJIjhDGUqU8LjDfCA.roa (raw, json)
Hash identifier:          WrmF7iq2/LiqxwS9yV44gm844E6JlvPaXVciAffOa0Q=
Subject key identifier:   E6:BB:2D:30:09:F8:07:17:89:22:38:43:19:4A:94:F0:B8:C3:7C:20
Certificate issuer:       /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial:       019B797EBDE4E2E62E3AA880A7FFFE14CB00
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/5rstMAn4BxeJIjhDGUqU8LjDfCA.roa
Signing time:             Thu 01 Jan 2026 12:18:27 +0000
ROA not before:           Thu 01 Jan 2026 12:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     52468
IP address blocks:        81.199.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:bd:e4:e2:e6:2e:3a:a8:80:a7:ff:fe:14:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
        Validity
            Not Before: Jan  1 12:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6bb2d3009f8071789223843194a94f0b8c37c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:68:4c:11:31:07:70:ee:5b:c1:47:52:17:e1:
                    2a:69:be:2f:0f:a8:8b:dd:80:0a:0c:6a:20:bc:a0:
                    66:97:41:bb:20:5a:49:92:17:39:93:c3:5d:81:25:
                    bd:8a:4b:76:db:ce:e0:f8:c0:a6:67:34:07:f6:ca:
                    2d:88:36:96:c3:56:c3:f3:de:2c:f0:f7:cb:99:7b:
                    49:a1:f4:fc:f6:49:6b:92:24:81:be:3c:00:d7:5d:
                    f9:85:fc:8d:76:f7:22:1a:00:3e:52:b0:da:3e:5f:
                    89:96:f1:53:a4:3c:cb:d6:dd:3e:07:f4:76:92:c0:
                    df:de:37:31:d1:d4:ef:4a:24:aa:64:1d:9d:93:69:
                    83:d7:95:d7:1d:86:a3:a9:8e:74:b3:f6:32:7d:45:
                    ec:0c:fd:45:3c:fd:35:c8:d0:74:5a:86:71:64:cc:
                    94:8c:a3:04:d0:47:7d:92:63:37:3a:a8:b6:2c:77:
                    09:da:e3:c6:51:91:67:e6:7a:65:8a:8b:d6:de:ec:
                    96:6b:94:d4:7e:93:67:ee:f6:7c:cb:f2:b7:0a:1d:
                    8b:fa:f3:c2:cc:cc:6d:9e:11:79:11:66:7c:cd:ab:
                    34:12:ea:6f:bd:12:f7:6c:b2:66:4b:2a:27:83:51:
                    d9:d2:96:53:3a:78:7b:08:90:d7:26:5c:de:5c:70:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BB:2D:30:09:F8:07:17:89:22:38:43:19:4A:94:F0:B8:C3:7C:20
            X509v3 Authority Key Identifier:
                keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/5rstMAn4BxeJIjhDGUqU8LjDfCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.199.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e5:3a:0b:8b:73:39:b1:73:cc:a6:29:c1:82:27:7f:bf:3c:
         e7:ec:55:01:54:d7:e6:c8:3a:4c:de:b8:94:03:98:59:66:a6:
         be:e7:67:22:68:3e:e8:1c:46:0a:25:be:e9:77:0c:ed:a3:12:
         13:42:dc:e1:39:c2:10:70:2b:a7:95:6f:cd:ce:a4:67:e7:e3:
         23:40:2d:39:8c:f7:22:4c:00:fb:df:39:d7:63:66:ce:70:f9:
         4c:17:a0:57:c4:db:9c:19:7c:2a:01:d8:28:ac:cf:3d:7d:02:
         c1:f2:87:da:92:61:17:bf:3e:bf:ff:18:36:62:8b:b2:45:1d:
         12:26:ed:33:f8:a5:92:1f:d1:a0:4b:bd:03:2c:ea:b5:69:03:
         06:c4:b4:e2:99:8a:67:52:e2:cd:00:e4:7d:9c:5c:1c:05:75:
         4e:37:97:43:fb:e9:7b:b6:6c:19:7c:ce:a3:36:e7:0d:73:6b:
         3e:c2:a5:99:bd:ca:8e:e0:1c:ff:7a:dd:06:8c:86:e4:8f:5e:
         40:3a:33:ad:79:e4:43:53:71:0b:2f:a6:68:68:12:de:b0:12:
         bd:18:38:3e:3e:92:e8:8c:94:09:ff:69:83:dd:06:2f:e5:c7:
         c1:88:f3:37:e6:8b:49:df:37:91:6b:5a:19:94:ce:51:ee:e3:
         1f:a5:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:15 2026 by rpki-client