This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/5EVB14c1Wp9DUMGncO8dMnhYewQ.roa
File:                     5EVB14c1Wp9DUMGncO8dMnhYewQ.roa (raw, json)
Hash identifier:          1+PPE2vwCT1DcBSpKhNOM70ibVxoJXlF1C7YdpbIQkU=
Subject key identifier:   E4:45:41:D7:87:35:5A:9F:43:50:C1:A7:70:EF:1D:32:78:58:7B:04
Certificate issuer:       /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial:       019B7DC89BF1FD25267527C7F9BCE5DFBD9E
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/5EVB14c1Wp9DUMGncO8dMnhYewQ.roa
Signing time:             Fri 02 Jan 2026 08:17:37 +0000
ROA not before:           Fri 02 Jan 2026 08:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1239
IP address blocks:        92.53.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c8:9b:f1:fd:25:26:75:27:c7:f9:bc:e5:df:bd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
        Validity
            Not Before: Jan  2 08:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e44541d787355a9f4350c1a770ef1d3278587b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:0a:01:13:44:78:41:65:f6:ff:16:3c:57:
                    69:76:0d:83:07:b7:86:47:e4:92:ad:98:3d:99:20:
                    4f:27:9d:3a:cb:c1:8a:26:3f:a2:94:37:5f:ca:dd:
                    e8:23:b0:c8:ac:42:42:59:95:b0:7e:c8:e2:5d:b8:
                    9e:9e:58:0d:31:49:af:ab:00:03:e4:9e:10:f2:54:
                    43:e0:8f:66:d9:8d:22:5d:16:22:89:42:88:7d:bf:
                    d9:6d:f5:b4:6d:95:38:e0:d9:70:dc:ec:ca:61:a4:
                    3e:49:51:7a:5d:f5:f2:14:36:44:52:fa:c9:54:6c:
                    fd:22:73:8c:cc:02:9c:72:b8:00:9b:da:97:af:06:
                    51:d8:f0:9d:2a:b8:59:c1:b8:4a:56:a6:b8:76:e3:
                    65:16:2f:40:2c:dd:9f:53:28:a5:9e:7a:99:cb:96:
                    08:e6:18:48:6a:ce:84:f4:a2:c6:a2:ee:c3:a1:34:
                    2b:91:eb:2d:b6:48:c2:a1:4f:ee:89:fa:88:e2:0d:
                    18:68:1e:6c:16:7f:ca:a2:5b:fd:88:82:6c:da:dd:
                    56:d1:02:48:da:0c:da:1e:61:7f:e9:bc:f6:d8:16:
                    49:26:a6:36:03:ac:5d:b3:fe:0d:50:ba:27:8e:cb:
                    a7:3f:7e:37:b4:7d:ff:20:e4:a3:21:5a:5c:f5:b3:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:45:41:D7:87:35:5A:9F:43:50:C1:A7:70:EF:1D:32:78:58:7B:04
            X509v3 Authority Key Identifier:
                keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/5EVB14c1Wp9DUMGncO8dMnhYewQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.53.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:18:8a:5c:77:6e:61:27:25:d5:99:e9:df:3f:55:01:57:
         26:2d:28:97:18:d8:26:a0:9e:f2:0d:19:2a:56:41:9e:5e:77:
         5a:52:bb:a9:ea:f2:19:ec:93:a9:f4:49:b7:02:ea:09:a9:24:
         07:77:86:9f:68:32:cd:b5:03:b0:62:f5:e7:ab:ff:11:43:ca:
         42:2c:70:55:2d:3b:98:a8:f7:8f:a8:8c:7f:96:45:06:7d:ff:
         31:13:b2:b8:8f:e3:89:92:c3:c4:e2:28:a6:5b:29:62:05:2d:
         c9:5c:ae:0f:7d:e4:57:f3:98:89:1b:1d:1d:97:62:da:a8:94:
         4c:37:f5:c9:94:2d:7a:c0:03:5c:76:29:71:5f:8e:80:59:0f:
         da:fd:25:65:7c:65:f1:65:e3:06:8b:0c:86:cc:af:0c:6b:b5:
         80:9e:54:6b:f9:1a:56:df:0f:67:6d:74:5b:d8:95:36:a2:db:
         7c:d8:26:50:a6:2a:e3:07:ee:38:25:67:84:1e:35:25:6c:89:
         01:be:b8:c6:b8:d4:77:b5:c7:b7:c1:74:2d:58:5d:cd:7d:e3:
         eb:2d:c7:4c:97:9c:8a:3f:67:3b:df:ac:a5:11:b3:db:c9:bc:
         45:09:3e:48:fc:78:21:57:f3:da:6e:1a:8c:58:e7:c2:02:07:
         86:eb:1e:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9yJvx/SUmdSfH+bzl372eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzc5ZTU2MjM4YjZmMmVhMDY4ZWRlNGUyMGFlZjAwYzkw
NDEzMmIwHhcNMjYwMTAyMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDQ1NDFkNzg3MzU1YTlmNDM1MGMxYTc3MGVmMWQzMjc4NTg3YjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj0KARNEeEFl9v8WPFdpdg2DB7eG
R+SSrZg9mSBPJ506y8GKJj+ilDdfyt3oI7DIrEJCWZWwfsjiXbienlgNMUmvqwAD
5J4Q8lRD4I9m2Y0iXRYiiUKIfb/ZbfW0bZU44Nlw3OzKYaQ+SVF6XfXyFDZEUvrJ
VGz9InOMzAKccrgAm9qXrwZR2PCdKrhZwbhKVqa4duNlFi9ALN2fUyilnnqZy5YI
5hhIas6E9KLGou7DoTQrkesttkjCoU/uifqI4g0YaB5sFn/Kolv9iIJs2t1W0QJI
2gzaHmF/6bz22BZJJqY2A6xds/4NULonjsunP343tH3/IOSjIVpc9bP7tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFORFQdeHNVqfQ1DBp3DvHTJ4WHsEMB8GA1UdIwQY
MBaAFP53nlYji28uoGjt5OIK7wDJBBMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQt
MzM4OTQ5MTNkY2I3LzEvNUVWQjE0YzFXcDlEVU1HbmNPOGRNbmhZZXdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80ZGU1OTgtNmIwMy00YmVmLWFiMTQtMzM4OTQ5MTNkY2I3
LzEvX25lZVZpT0xieTZnYU8zazRncnZBTWtFRXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXDWwMA0G
CSqGSIb3DQEBCwUAA4IBAQATtxiKXHduYScl1Znp3z9VAVcmLSiXGNgmoJ7yDRkq
VkGeXndaUrup6vIZ7JOp9Em3AuoJqSQHd4afaDLNtQOwYvXnq/8RQ8pCLHBVLTuY
qPePqIx/lkUGff8xE7K4j+OJksPE4iimWyliBS3JXK4PfeRX85iJGx0dl2LaqJRM
N/XJlC16wANcdilxX46AWQ/a/SVlfGXxZeMGiwyGzK8Ma7WAnlRr+RpW3w9nbXRb
2JU2ott82CZQpirjB+44JWeEHjUlbIkBvrjGuNR3tce3wXQtWF3NfePrLcdMl5yK
P2c736ylEbPbybxFCT5I/HghV/PabhqMWOfCAgeG6x6f
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:29 2026 by rpki-client