This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/5p2aHwzMk-WKPqbEYPmTVeyaFz8.roa
File:                     5p2aHwzMk-WKPqbEYPmTVeyaFz8.roa (raw, json)
Hash identifier:          dXwTJ57WUmfvolezC+8tQF/dtDddp7UWvZtKPASf84o=
Subject key identifier:   E6:9D:9A:1F:0C:CC:93:E5:8A:3E:A6:C4:60:F9:93:55:EC:9A:17:3F
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019B7BA3D6739347B9D71629CF935F25C024
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/5p2aHwzMk-WKPqbEYPmTVeyaFz8.roa
Signing time:             Thu 01 Jan 2026 22:18:13 +0000
ROA not before:           Thu 01 Jan 2026 22:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205886
IP address blocks:        212.100.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:d6:73:93:47:b9:d7:16:29:cf:93:5f:25:c0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Jan  1 22:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e69d9a1f0ccc93e58a3ea6c460f99355ec9a173f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:29:99:48:6d:f3:71:3f:4e:38:7a:18:fd:
                    27:f0:18:2e:92:d7:df:85:48:e2:26:db:a1:fd:85:
                    f7:73:8f:09:fa:ab:14:73:df:88:b0:c9:28:02:a1:
                    33:84:b5:92:4d:0f:4f:9d:f6:ce:6e:9b:ac:78:12:
                    05:4f:43:ac:00:36:f4:9a:30:1c:54:c1:28:e3:5f:
                    5b:a2:b4:9c:4c:22:49:13:06:8c:00:0c:d1:72:3e:
                    b1:7e:e2:1e:58:82:54:07:18:96:54:81:3f:41:a1:
                    25:e2:9b:a3:53:0f:84:7b:a6:5b:92:31:50:1a:5e:
                    32:b2:ff:90:e3:9c:2d:77:76:3c:ca:f2:09:cc:9d:
                    32:7b:f8:f2:a5:97:a0:74:94:26:ef:58:3c:74:ec:
                    41:f1:f3:b8:98:cb:1e:18:f2:59:9d:5e:d0:8b:bd:
                    51:d9:f4:dc:c6:0f:30:3f:de:94:cf:3c:a2:41:9a:
                    5e:c5:16:de:7f:25:59:6b:5e:08:7b:38:72:b7:91:
                    7b:ca:c9:4c:34:88:76:76:b1:ef:7c:7c:69:61:bf:
                    b6:9e:d3:39:7a:06:78:b6:9a:96:9f:73:4b:f9:2f:
                    b9:bd:21:da:e8:b4:08:4e:4f:2d:09:f8:2f:fe:ac:
                    d5:92:60:ef:90:d7:ff:59:75:a5:e3:d7:43:70:9c:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9D:9A:1F:0C:CC:93:E5:8A:3E:A6:C4:60:F9:93:55:EC:9A:17:3F
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/5p2aHwzMk-WKPqbEYPmTVeyaFz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:13:5e:3f:8d:e5:8d:a2:56:f9:2e:92:21:e9:77:5b:3e:50:
         c7:c7:eb:83:45:63:e2:aa:24:6a:46:c6:17:02:1b:fd:53:89:
         03:76:d9:ff:8b:fa:e2:ce:e4:30:c9:48:67:32:7c:cb:fa:ed:
         46:c5:29:3c:21:be:3a:4f:26:d0:15:7d:8e:c0:b0:07:f1:0f:
         1e:67:3a:f8:96:f0:03:90:96:3d:c6:62:bf:97:af:73:89:3e:
         ee:08:86:5a:14:98:f5:cc:4f:9f:10:f5:34:d5:b7:8d:b6:02:
         c5:f3:41:a6:77:87:a9:92:4e:a7:ab:fc:9c:6e:a6:e7:eb:a6:
         01:71:ff:60:9d:81:9e:91:74:68:72:90:f7:19:fe:b2:1e:13:
         d8:3c:9e:f0:d6:25:db:b2:59:94:a1:ff:68:9f:d9:08:ad:49:
         d3:20:9f:9c:5d:33:65:99:ad:de:37:fb:98:46:a0:3a:b1:8b:
         35:c4:36:25:50:fb:4b:a4:cd:43:67:dc:0d:bb:7b:83:52:76:
         e6:77:15:67:60:31:2a:6c:5b:42:46:e9:a5:13:f7:cf:f1:43:
         ae:9e:ba:2a:54:3a:df:ed:01:79:a4:74:f6:61:bc:2b:dd:18:
         eb:97:07:0d:79:72:0e:a4:bf:1e:14:7c:5a:fb:dd:d5:57:74:
         7c:95:6d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:16:16 2026 by rpki-client