This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/txhV4jAB0u0krXb4kFMl_-o4obY.roa
File:                     txhV4jAB0u0krXb4kFMl_-o4obY.roa (raw, json)
Hash identifier:          s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=
Subject key identifier:   B7:18:55:E2:30:01:D2:ED:24:AD:76:F8:90:53:25:FF:EA:38:A1:B6
Certificate issuer:       /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial:       019B7F82F73824B2ADD24CB6412F83FC6AA9
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/txhV4jAB0u0krXb4kFMl_-o4obY.roa
Signing time:             Fri 02 Jan 2026 16:20:48 +0000
ROA not before:           Fri 02 Jan 2026 16:20:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59720
IP address blocks:        213.166.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:f7:38:24:b2:ad:d2:4c:b6:41:2f:83:fc:6a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
        Validity
            Not Before: Jan  2 16:20:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b71855e23001d2ed24ad76f8905325ffea38a1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:29:b0:21:c6:e8:70:06:44:cc:92:14:8d:b8:
                    6c:33:b1:7a:ee:df:49:0f:63:90:13:9a:0f:33:a9:
                    07:ea:f5:32:8b:10:9a:29:9d:5e:8e:67:91:6b:be:
                    b2:66:2c:6a:43:a4:14:7f:4d:4d:70:20:ce:69:8e:
                    fe:e8:47:28:fa:e9:dd:56:de:d3:1d:30:ce:ce:82:
                    96:df:e0:32:5e:12:e6:2d:bc:7f:6a:3d:1f:33:12:
                    6f:3f:10:30:68:1e:92:57:df:5c:b6:80:b6:52:a5:
                    13:5b:36:01:72:30:e1:94:8b:26:6e:91:b9:96:2e:
                    42:60:30:93:9d:f9:b2:40:59:23:05:a5:52:0d:0c:
                    d1:ee:b4:71:b2:56:65:da:26:c6:53:cd:5f:c4:d0:
                    98:55:02:04:67:99:7e:27:85:4e:a5:b1:23:e8:da:
                    4e:df:3f:5f:de:bd:e1:0b:1a:80:71:f1:ae:9a:46:
                    4d:a9:8d:fa:1d:37:a2:08:7c:56:43:8c:f2:59:28:
                    ee:63:10:87:cd:6c:0d:f7:0a:54:48:7c:49:3f:7c:
                    79:31:2c:f1:22:17:a4:d9:bd:42:2d:2a:16:39:fc:
                    d4:55:86:5f:a1:c3:ea:a6:04:53:fc:a2:0a:5e:9a:
                    03:ed:0b:1b:43:52:f2:62:45:62:d5:dc:38:c0:16:
                    aa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:55:E2:30:01:D2:ED:24:AD:76:F8:90:53:25:FF:EA:38:A1:B6
            X509v3 Authority Key Identifier:
                keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/txhV4jAB0u0krXb4kFMl_-o4obY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.166.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:93:2b:41:67:27:13:ca:70:53:5b:fa:06:6c:e0:b0:74:
         eb:2c:68:c3:03:13:e9:a2:1c:be:55:48:0f:29:2b:01:67:6d:
         07:06:88:ab:ae:6a:df:d2:e4:94:0f:91:dd:2e:86:8b:12:99:
         a6:39:a4:3a:ad:d0:7f:af:0b:0e:3f:79:0c:83:23:02:0f:ac:
         65:ac:e3:a6:d9:58:d2:64:70:df:09:a1:27:b8:3b:fc:3d:b6:
         88:d1:b8:bf:8b:5c:6a:66:1b:78:b5:8a:8b:f0:06:b3:15:b4:
         46:6e:bf:cf:80:63:98:9d:36:9a:d2:89:5d:54:46:ce:29:97:
         c8:4e:40:e7:82:40:1e:45:dc:8b:1a:b7:1f:0d:c4:39:01:ea:
         c1:91:5a:6c:8c:7a:aa:64:e6:5d:5b:82:d3:2f:e4:21:cb:75:
         89:df:01:b7:f2:4c:86:36:aa:04:be:9b:58:06:24:3b:95:45:
         dc:58:80:42:01:57:5c:26:51:20:df:43:a4:6c:9a:5e:6f:e2:
         8d:29:cc:69:3c:b9:15:a6:bf:cb:39:94:d6:93:39:ec:a3:fd:
         bf:a5:73:77:62:85:82:d7:9f:c9:27:a9:95:9d:96:b8:ac:12:
         2d:8d:22:13:72:e2:54:2f:4f:b0:ac:0d:ec:a1:2a:31:6c:24:
         4f:6a:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:26:24 2026 by rpki-client