This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa
File:                     e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa (raw, json)
Hash identifier:          hOVgr+6lYpOL/o328s3O436QYBTqR+tWUhnoy8x9gK8=
Subject key identifier:   7B:91:A5:E4:9A:32:FD:37:D3:B6:02:03:6B:E6:F8:91:BA:4C:6C:89
Certificate issuer:       /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial:       019B7F15AE87F5313F40FC9D84B3BDCD40C2
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa
Signing time:             Fri 02 Jan 2026 14:21:25 +0000
ROA not before:           Fri 02 Jan 2026 14:21:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49207
IP address blocks:        92.249.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:ae:87:f5:31:3f:40:fc:9d:84:b3:bd:cd:40:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
        Validity
            Not Before: Jan  2 14:21:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b91a5e49a32fd37d3b602036be6f891ba4c6c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:fa:44:b8:b2:65:95:9b:d3:01:65:21:b0:
                    6d:27:10:a0:a8:71:80:50:9d:af:57:5c:27:ce:3c:
                    a5:e3:19:8f:39:8c:d1:ba:31:97:73:86:0c:9e:c1:
                    5d:f3:05:97:c8:ea:9f:a5:41:6e:e1:89:ce:b9:fe:
                    a2:32:90:f4:e2:a9:6b:fc:f1:85:a5:72:eb:95:fc:
                    f5:31:64:49:c8:b8:2e:c4:36:e9:14:27:f7:35:70:
                    0e:63:02:b0:06:44:47:b1:ce:d2:a3:b1:7a:3f:87:
                    e3:0e:1f:d5:2d:c7:6b:46:e1:27:2b:e7:e9:ab:57:
                    38:a4:0b:21:e9:fd:cc:e3:01:16:70:be:9b:99:f7:
                    f1:7a:be:05:13:31:93:7f:bb:09:f4:bb:d5:da:27:
                    47:30:a6:eb:f8:ec:e4:08:41:b7:f2:87:88:ca:df:
                    01:b2:c7:bb:a8:c0:5f:88:22:3d:a8:f9:27:83:f1:
                    71:93:c5:27:b5:8e:c1:38:e5:5f:de:b0:2c:e5:b6:
                    8e:dd:39:7d:91:ba:3e:df:0e:7d:36:3a:13:d4:8a:
                    62:97:a3:44:d3:8a:9f:59:ee:93:28:d9:62:8c:06:
                    63:fd:8a:38:11:61:e4:51:50:fc:30:2f:c5:29:20:
                    9e:7a:70:fa:f1:aa:86:23:53:58:5e:6f:70:1f:27:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:91:A5:E4:9A:32:FD:37:D3:B6:02:03:6B:E6:F8:91:BA:4C:6C:89
            X509v3 Authority Key Identifier:
                keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.249.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:32:94:37:0b:4c:3f:12:9d:c1:be:28:5a:8d:d5:10:96:d7:
         cf:70:11:36:8c:8a:9b:99:87:49:a1:39:67:96:a3:a2:5e:0a:
         f6:e3:6b:f4:53:94:ba:79:0a:0e:e6:80:63:6a:4d:85:b3:a6:
         8f:7f:b1:66:8f:9b:4b:e5:88:3c:12:66:81:07:78:b8:1b:04:
         20:8d:56:fb:4e:4b:48:f0:09:c7:4e:75:84:ae:bc:b4:fd:0c:
         ee:0e:e3:58:eb:67:0a:0e:cb:d8:55:20:ab:0c:07:f5:dd:49:
         39:4f:03:06:5d:99:c3:b6:6f:7a:9c:98:65:8b:24:45:0a:b5:
         69:e6:17:60:f1:dc:18:fb:f9:b0:cc:27:bc:02:68:74:18:01:
         29:ec:08:8c:1a:c1:97:47:e7:f8:ca:eb:ed:6a:6d:3f:c7:34:
         4a:8e:54:a7:f2:6b:5e:ca:8d:18:46:3a:83:f7:16:6d:f9:87:
         00:81:eb:f1:d2:1b:9f:0f:c1:b8:96:0c:6e:4b:48:2e:dc:1f:
         63:0a:52:a2:b2:44:d3:a4:43:ba:71:58:2a:76:c5:0d:50:b3:
         dd:11:8a:a8:dd:fb:2f:1c:82:39:5a:ac:19:9f:16:60:f0:3b:
         4e:8a:5e:5f:8a:32:f1:f2:70:ab:1e:9c:0d:0e:6c:b2:2d:e0:
         f1:8d:ec:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/Fa6H9TE/QPydhLO9zUDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx
N2Q2MDUwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjkxYTVlNDlhMzJmZDM3ZDNiNjAyMDM2YmU2Zjg5MWJhNGM2Yzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+H6RLiyZZWb0wFlIbBtJxCgqHGA
UJ2vV1wnzjyl4xmPOYzRujGXc4YMnsFd8wWXyOqfpUFu4YnOuf6iMpD04qlr/PGF
pXLrlfz1MWRJyLguxDbpFCf3NXAOYwKwBkRHsc7So7F6P4fjDh/VLcdrRuEnK+fp
q1c4pAsh6f3M4wEWcL6bmffxer4FEzGTf7sJ9LvV2idHMKbr+OzkCEG38oeIyt8B
sse7qMBfiCI9qPkng/Fxk8UntY7BOOVf3rAs5baO3Tl9kbo+3w59NjoT1Ipil6NE
04qfWe6TKNlijAZj/Yo4EWHkUVD8MC/FKSCeenD68aqGI1NYXm9wHydXwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHuRpeSaMv0307YCA2vm+JG6TGyJMB8GA1UdIwQY
MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct
NWQzYTQyMWEwZjEwLzEvZTVHbDVKb3lfVGZUdGdJRGEtYjRrYnBNYklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw
LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPk4MA0G
CSqGSIb3DQEBCwUAA4IBAQAUMpQ3C0w/Ep3BvihajdUQltfPcBE2jIqbmYdJoTln
lqOiXgr242v0U5S6eQoO5oBjak2Fs6aPf7Fmj5tL5Yg8EmaBB3i4GwQgjVb7TktI
8AnHTnWErry0/QzuDuNY62cKDsvYVSCrDAf13Uk5TwMGXZnDtm96nJhliyRFCrVp
5hdg8dwY+/mwzCe8Amh0GAEp7AiMGsGXR+f4yuvtam0/xzRKjlSn8mteyo0YRjqD
9xZt+YcAgevx0hufD8G4lgxuS0gu3B9jClKiskTTpEO6cVgqdsUNULPdEYqo3fsv
HII5WqwZnxZg8DtOil5fijLx8nCrHpwNDmyyLeDxjeyi
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:20:14 2026 by rpki-client