This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/T13_FpAETOo3zpDz-m5p4Yo43tU.roa
File:                     T13_FpAETOo3zpDz-m5p4Yo43tU.roa (raw, json)
Hash identifier:          qg17lmbhvQRAnJl5UzZbEihU9vs9JAWpSUDuAPfFKjI=
Subject key identifier:   4F:5D:FF:16:90:04:4C:EA:37:CE:90:F3:FA:6E:69:E1:8A:38:DE:D5
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       019B7C7FDBE693D2D73F425D15DCE7A0523C
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/T13_FpAETOo3zpDz-m5p4Yo43tU.roa
Signing time:             Fri 02 Jan 2026 02:18:32 +0000
ROA not before:           Fri 02 Jan 2026 02:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56382
IP address blocks:        141.98.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:db:e6:93:d2:d7:3f:42:5d:15:dc:e7:a0:52:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Jan  2 02:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4f5dff1690044cea37ce90f3fa6e69e18a38ded5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:8e:fb:08:18:92:23:74:0b:e6:e9:f8:36:
                    bd:4f:3a:f4:b0:54:86:6b:d1:87:75:57:b1:ab:30:
                    95:28:85:8d:18:a8:9b:f4:2f:9e:22:49:c4:f9:28:
                    65:a5:c3:4e:fe:d0:21:ec:fe:47:d3:a9:53:37:ff:
                    d5:eb:8b:b4:7b:ad:1d:57:c4:bc:38:08:2f:cf:a5:
                    6f:47:c8:e5:18:a2:29:79:66:15:00:45:75:e4:a6:
                    dc:84:c4:58:bf:92:9d:98:ae:ad:a8:e0:1b:76:9f:
                    55:13:8b:98:94:53:10:47:85:6a:a3:7c:26:56:32:
                    ec:2b:d4:c6:63:ab:25:f8:df:d1:fc:09:08:a8:06:
                    a2:24:de:f2:ad:64:58:50:81:0d:e0:ff:9d:ef:22:
                    de:6b:06:3e:b8:62:68:22:e2:1d:3f:a3:d4:e6:ce:
                    ad:e0:92:12:5c:e0:d1:4a:50:2f:54:90:01:ce:dd:
                    60:7a:94:e6:f5:9c:66:6d:f9:e6:98:c0:f7:18:a1:
                    30:ec:30:49:30:87:c1:45:d4:29:40:11:43:e6:94:
                    4d:4e:f0:7d:ef:7e:f9:5c:a7:e1:2a:52:a8:88:14:
                    b8:36:ec:22:a6:f0:b5:a2:f8:80:3f:3e:62:61:6f:
                    41:ce:0a:e1:fb:d8:e2:5f:1d:98:e7:9d:70:e8:7d:
                    f8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:FF:16:90:04:4C:EA:37:CE:90:F3:FA:6E:69:E1:8A:38:DE:D5
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/T13_FpAETOo3zpDz-m5p4Yo43tU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ea:c1:09:72:6e:46:18:55:b7:31:81:29:10:06:55:9a:97:
         2d:96:07:55:80:18:11:58:36:60:46:d7:3c:6a:fd:3b:cb:73:
         c6:f7:87:13:c7:9d:ce:ca:88:aa:a6:e6:1a:57:15:03:cb:7b:
         5c:2e:15:d9:ea:79:95:02:0f:d5:e8:61:9c:cd:c2:17:39:80:
         06:b9:f1:0c:ae:72:4a:42:ba:bd:82:12:1f:05:76:51:30:74:
         68:9c:3e:95:2d:38:1f:58:8c:0b:ef:b8:eb:d7:97:f1:cb:a8:
         a0:40:12:af:8c:d3:7c:54:b4:fc:43:ed:da:74:5f:41:1c:0a:
         21:33:be:ef:fa:b5:90:c2:ab:2c:42:d5:9d:64:3f:e5:31:e0:
         95:3f:50:e0:df:d8:de:36:8f:00:e7:c3:e3:6e:f1:98:58:fd:
         54:17:6e:84:e5:b1:9f:ab:63:c4:42:7f:e2:12:b4:f0:e7:56:
         80:d8:a2:e8:cb:db:9e:c3:0b:db:be:44:0f:b6:76:ac:65:8b:
         cd:42:cd:ce:a2:fb:de:ec:0a:cf:96:fa:84:e7:fc:2a:1f:51:
         90:85:53:dc:56:4d:71:2e:69:60:83:e7:0c:22:fc:37:77:b9:
         9b:07:1b:3e:dc:d6:d4:0c:ba:76:f7:fb:19:5f:fc:00:ea:ff:
         db:27:bf:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8f9vmk9LXP0JdFdznoFI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjVkZmYxNjkwMDQ0Y2VhMzdjZTkwZjNmYTZlNjllMThhMzhkZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0CO+wgYkiN0C+bp+Da9Tzr0sFSG
a9GHdVexqzCVKIWNGKib9C+eIknE+ShlpcNO/tAh7P5H06lTN//V64u0e60dV8S8
OAgvz6VvR8jlGKIpeWYVAEV15KbchMRYv5KdmK6tqOAbdp9VE4uYlFMQR4Vqo3wm
VjLsK9TGY6sl+N/R/AkIqAaiJN7yrWRYUIEN4P+d7yLeawY+uGJoIuIdP6PU5s6t
4JISXODRSlAvVJABzt1gepTm9ZxmbfnmmMD3GKEw7DBJMIfBRdQpQBFD5pRNTvB9
7375XKfhKlKoiBS4NuwipvC1oviAPz5iYW9Bzgrh+9jiXx2Y551w6H34twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE9d/xaQBEzqN86Q8/puaeGKON7VMB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvVDEzX0ZwQUVUT28zenBEei1tNXA0WW80M3RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKLMA0G
CSqGSIb3DQEBCwUAA4IBAQBe6sEJcm5GGFW3MYEpEAZVmpctlgdVgBgRWDZgRtc8
av07y3PG94cTx53OyoiqpuYaVxUDy3tcLhXZ6nmVAg/V6GGczcIXOYAGufEMrnJK
Qrq9ghIfBXZRMHRonD6VLTgfWIwL77jr15fxy6igQBKvjNN8VLT8Q+3adF9BHAoh
M77v+rWQwqssQtWdZD/lMeCVP1Dg39jeNo8A58PjbvGYWP1UF26E5bGfq2PEQn/i
ErTw51aA2KLoy9uewwvbvkQPtnasZYvNQs3Oovve7ArPlvqE5/wqH1GQhVPcVk1x
Lmlgg+cMIvw3d7mbBxs+3NbUDLp29/sZX/wA6v/bJ79m
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:42:25 2026 by rpki-client