This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/v5j62T31CGbyesihQ2ZxZfpouT0.roa
File:                     v5j62T31CGbyesihQ2ZxZfpouT0.roa (raw, json)
Hash identifier:          /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=
Subject key identifier:   BF:98:FA:D9:3D:F5:08:66:F2:7A:C8:A1:43:66:71:65:FA:68:B9:3D
Certificate issuer:       /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial:       019B77C6DE8B185A649B3C29C7F41349930E
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/v5j62T31CGbyesihQ2ZxZfpouT0.roa
Signing time:             Thu 01 Jan 2026 04:18:00 +0000
ROA not before:           Thu 01 Jan 2026 04:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31027
IP address blocks:        91.233.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:de:8b:18:5a:64:9b:3c:29:c7:f4:13:49:93:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
        Validity
            Not Before: Jan  1 04:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf98fad93df50866f27ac8a143667165fa68b93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:00:15:97:64:73:1a:3f:83:24:11:1a:ff:
                    21:e4:17:59:c2:ca:62:b7:c2:f9:75:cd:53:dc:21:
                    1c:18:7d:2b:89:36:8a:18:83:76:84:10:60:77:82:
                    cd:2a:6a:2b:b6:df:c6:cb:22:e9:dc:be:f6:cd:9e:
                    10:42:74:74:a9:82:ba:7f:26:94:35:57:06:a5:df:
                    63:1d:0a:f5:1c:12:dd:19:e5:be:12:75:98:48:dc:
                    c0:9d:0d:6a:50:d5:4a:cd:0a:55:27:41:75:a5:6c:
                    6b:46:79:b4:83:c5:bb:ff:d0:e6:e6:56:72:0a:1c:
                    83:cf:de:87:37:97:60:43:e9:78:14:ab:7e:04:35:
                    60:44:f1:65:ba:16:6e:87:40:19:59:fb:8d:f4:b3:
                    09:4c:a7:cb:d8:53:ba:1c:f1:91:44:bc:80:c6:b9:
                    e6:00:1e:84:7c:62:8a:74:fc:12:1a:c3:58:e8:4c:
                    03:b8:87:b7:93:8b:12:ef:5e:d3:e4:c1:ac:a2:d2:
                    5d:95:80:96:02:e9:04:b9:94:cf:3b:3e:ce:7f:1c:
                    8a:0b:bb:84:8b:f6:19:76:94:a0:11:4f:51:e0:d7:
                    e2:54:7f:9c:83:0a:f8:63:2c:e4:d7:58:6a:a7:e0:
                    34:37:91:13:ca:4d:cc:eb:0e:b9:a1:98:8e:4c:ef:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:98:FA:D9:3D:F5:08:66:F2:7A:C8:A1:43:66:71:65:FA:68:B9:3D
            X509v3 Authority Key Identifier:
                keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/v5j62T31CGbyesihQ2ZxZfpouT0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:ce:d0:cb:9b:b7:5c:55:74:5d:69:f9:9b:13:2c:6d:cd:56:
         c5:e4:5c:c7:d4:73:37:c8:0f:a3:73:b8:67:1e:28:a2:75:06:
         03:b5:88:fc:81:97:29:65:05:dc:ad:20:87:4e:76:b4:7d:ea:
         f4:24:1c:43:1d:31:5c:90:b8:ea:53:bd:c2:03:27:96:d1:dd:
         95:81:1b:ca:39:b2:07:62:31:02:29:2c:6a:c2:3b:1d:76:3d:
         bf:22:f3:e8:d3:47:04:1f:9d:94:10:1e:f6:62:14:0f:4f:64:
         94:f6:44:a9:ec:ca:b8:86:15:31:2b:49:de:d8:b0:b4:45:6f:
         d5:f4:b5:57:4d:08:8c:79:bb:11:21:75:c0:1e:7c:02:77:2b:
         47:37:da:86:d9:c5:95:72:de:ed:66:38:24:5a:5b:e5:58:86:
         63:43:23:cd:6c:1c:e4:63:b0:df:9e:ec:1b:02:cb:5f:1a:24:
         56:1a:de:fc:6f:4f:d4:59:d0:2b:20:b0:15:cf:d9:24:ee:e8:
         14:9a:7d:fd:4b:49:1d:7e:2f:69:67:0b:9a:91:ed:50:b1:52:
         eb:48:c4:84:02:cd:41:27:1c:4b:9a:ce:ac:55:aa:ea:89:1b:
         98:01:58:aa:12:b7:9e:77:cc:d8:67:59:dd:ce:8d:2e:f1:55:
         49:36:d8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:24:20 2026 by rpki-client