This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/5ow6qAfdIyUIjgv62pKBPZeWCeA.roa
File:                     5ow6qAfdIyUIjgv62pKBPZeWCeA.roa (raw, json)
Hash identifier:          buZoT9dHH/43I485y8cS0zE5tLfJ0nrDRYjLGeE36Js=
Subject key identifier:   E6:8C:3A:A8:07:DD:23:25:08:8E:0B:FA:DA:92:81:3D:97:96:09:E0
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       019B77596588F6E13DCDD1B0A2974C76F7F7
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/5ow6qAfdIyUIjgv62pKBPZeWCeA.roa
Signing time:             Thu 01 Jan 2026 02:18:25 +0000
ROA not before:           Thu 01 Jan 2026 02:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61278
IP address blocks:        93.115.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:65:88:f6:e1:3d:cd:d1:b0:a2:97:4c:76:f7:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  1 02:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e68c3aa807dd2325088e0bfada92813d979609e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:10:ca:f0:8f:4d:62:b1:21:a8:f9:fa:99:
                    a1:02:92:7d:05:d8:c1:0a:04:14:6b:81:5e:d0:f9:
                    da:f7:50:73:4f:5d:74:d1:1a:6f:15:a9:c3:62:de:
                    f4:a2:23:3b:3b:e6:0c:ee:eb:22:a3:9f:5d:06:11:
                    ff:ba:36:cc:9a:06:63:7e:38:72:17:75:bc:97:3e:
                    8b:e4:44:7e:74:4e:98:fb:a1:c3:dd:a7:f3:a5:00:
                    9c:31:a6:e7:09:c1:75:a0:c3:ee:95:30:60:4c:b9:
                    14:21:d3:61:a1:80:c0:e8:72:f4:b7:1d:61:e9:93:
                    56:4b:bb:1c:7c:cc:c7:50:d3:de:b9:f1:a5:05:48:
                    d2:9b:c2:cb:32:48:71:24:94:66:50:b4:ab:e0:6d:
                    2c:50:c3:40:f6:1b:e4:9f:90:0a:f6:82:70:10:4f:
                    a7:ac:36:7f:6d:03:36:18:f4:35:44:c6:81:89:27:
                    9d:10:1c:98:f0:7c:41:c6:a6:dc:82:b2:86:a6:07:
                    27:e9:3e:26:f2:1b:29:12:4b:02:f1:9e:e7:73:12:
                    f0:29:78:8f:3d:86:82:a3:f9:a3:6b:fd:73:b6:55:
                    1f:21:3c:d6:1a:3d:0e:8f:35:95:c0:86:75:5e:f6:
                    6c:f0:97:d3:0d:64:87:c9:10:75:45:92:21:22:50:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8C:3A:A8:07:DD:23:25:08:8E:0B:FA:DA:92:81:3D:97:96:09:E0
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/5ow6qAfdIyUIjgv62pKBPZeWCeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:2e:55:0e:4b:21:40:85:8b:b1:89:d5:ba:99:0a:b2:81:bd:
         46:64:72:aa:54:75:84:50:df:db:2a:98:ac:f7:60:2f:b6:69:
         8f:92:a3:da:7a:ef:18:9c:ec:4e:82:6f:77:bc:96:b6:8b:35:
         3d:ba:74:d3:2f:75:61:ce:87:2a:45:d1:bb:0c:63:3e:d6:d2:
         bc:19:bd:f4:d8:98:97:52:27:31:08:0c:6b:10:63:d9:de:e7:
         ba:f5:40:67:65:fe:32:73:a1:db:3b:32:18:34:41:d8:5f:e1:
         cc:a3:4e:93:ba:23:38:1b:4c:5d:7f:f7:62:d3:8f:b7:f7:01:
         fc:00:fc:4d:6c:17:7e:06:de:47:f3:a0:2d:e1:27:87:31:3e:
         61:a6:2a:ef:d2:9d:39:19:32:63:55:4c:87:a8:94:3d:e1:74:
         2d:c7:8f:6c:89:86:aa:63:a6:cb:e1:77:f7:70:d4:e4:64:85:
         94:a9:78:78:bd:09:1a:12:46:fd:1b:fb:ec:80:6f:44:8e:97:
         7c:89:99:03:cc:e0:be:c3:84:bf:d0:da:be:13:97:8c:f7:d0:
         a0:2c:ce:b4:c6:d3:1e:d8:2b:65:73:24:b8:ba:69:e4:d3:42:
         05:15:de:11:eb:16:9d:3d:58:2b:6a:7d:8f:9c:c3:53:d8:a0:
         b4:6e:b0:51
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt3WWWI9uE9zdGwopdMdvf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjhjM2FhODA3ZGQyMzI1MDg4ZTBiZmFkYTkyODEzZDk3OTYwOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviwQyvCPTWKxIaj5+pmhApJ9BdjB
CgQUa4Fe0Pna91BzT1100RpvFanDYt70oiM7O+YM7usio59dBhH/ujbMmgZjfjhy
F3W8lz6L5ER+dE6Y+6HD3afzpQCcMabnCcF1oMPulTBgTLkUIdNhoYDA6HL0tx1h
6ZNWS7scfMzHUNPeufGlBUjSm8LLMkhxJJRmULSr4G0sUMNA9hvkn5AK9oJwEE+n
rDZ/bQM2GPQ1RMaBiSedEByY8HxBxqbcgrKGpgcn6T4m8hspEksC8Z7ncxLwKXiP
PYaCo/mja/1ztlUfITzWGj0OjzWVwIZ1XvZs8JfTDWSHyRB1RZIhIlCXkQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOaMOqgH3SMlCI4L+tqSgT2XlgngMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xLzVvdzZxQWZkSXlVSWpndjYycEtCUFplV0NlQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABdczQw
DQYJKoZIhvcNAQELBQADggEBAAouVQ5LIUCFi7GJ1bqZCrKBvUZkcqpUdYRQ39sq
mKz3YC+2aY+So9p67xic7E6Cb3e8lraLNT26dNMvdWHOhypF0bsMYz7W0rwZvfTY
mJdSJzEIDGsQY9ne57r1QGdl/jJzods7Mhg0Qdhf4cyjTpO6IzgbTF1/92LTj7f3
AfwA/E1sF34G3kfzoC3hJ4cxPmGmKu/SnTkZMmNVTIeolD3hdC3Hj2yJhqpjpsvh
d/dw1ORkhZSpeHi9CRoSRv0b++yAb0SOl3yJmQPM4L7DhL/Q2r4Tl4z30KAszrTG
0x7YK2VzJLi6aeTTQgUV3hHrFp09WCtqfY+cw1PYoLRusFE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:36:30 2026 by rpki-client