This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/5tyTgc_srf_03kELs6a4U2s2DWk.roa
File:                     5tyTgc_srf_03kELs6a4U2s2DWk.roa (raw, json)
Hash identifier:          wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=
Subject key identifier:   E6:DC:93:81:CF:EC:AD:FF:F4:DE:41:0B:B3:A6:B8:53:6B:36:0D:69
Certificate issuer:       /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial:       019B7758BE1D67F57F7DB9412DDA4BCC19CA
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/5tyTgc_srf_03kELs6a4U2s2DWk.roa
Signing time:             Thu 01 Jan 2026 02:17:43 +0000
ROA not before:           Thu 01 Jan 2026 02:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3303
IP address blocks:        193.8.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:be:1d:67:f5:7f:7d:b9:41:2d:da:4b:cc:19:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
        Validity
            Not Before: Jan  1 02:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6dc9381cfecadfff4de410bb3a6b8536b360d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:70:1a:6e:cb:45:7a:fe:d9:4e:47:0b:de:
                    9d:02:bf:22:ef:19:3a:24:3c:70:4f:50:53:c6:5f:
                    6f:ac:bf:ad:1b:18:b5:aa:d5:38:31:2b:17:8f:5b:
                    12:62:30:43:4e:ea:cf:65:b0:6d:f1:51:a0:35:f9:
                    18:79:46:1d:8f:94:60:fb:d4:45:0a:45:76:8d:09:
                    39:bc:f8:64:15:b2:e4:4d:66:f0:ef:97:90:b5:a0:
                    54:cb:64:45:bc:40:41:a0:83:fb:48:34:d9:91:fc:
                    fc:4e:af:58:28:3a:e6:f1:42:8f:b3:d8:64:8c:d1:
                    4b:8a:3f:13:0b:98:91:96:e3:ec:be:de:22:9e:ad:
                    aa:cc:06:c4:63:db:13:b9:af:45:59:72:85:71:3b:
                    32:49:ad:ba:e3:fb:a8:15:ee:ab:45:d5:53:06:b8:
                    55:b9:61:9d:c8:35:6a:c4:57:ac:a2:c2:c3:64:cc:
                    c4:99:94:a4:a2:77:79:d6:47:68:5f:7e:63:67:6a:
                    f6:27:9a:de:83:2c:a2:96:36:ae:80:96:7d:51:3a:
                    98:51:c1:0b:da:f3:fd:f8:e9:c3:d5:1b:06:ce:4b:
                    77:a1:a8:51:58:d4:59:09:c8:3d:52:90:e9:c2:1a:
                    ad:b3:b8:ac:d7:83:98:53:7c:10:dd:d8:c0:3a:a6:
                    f2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DC:93:81:CF:EC:AD:FF:F4:DE:41:0B:B3:A6:B8:53:6B:36:0D:69
            X509v3 Authority Key Identifier:
                keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/5tyTgc_srf_03kELs6a4U2s2DWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:68:ea:16:3c:b1:ea:7a:a8:95:4a:e6:eb:5b:35:60:6f:b7:
         0d:47:79:27:41:c8:64:9e:a6:74:51:ea:d8:12:36:05:61:da:
         f6:72:c4:4d:97:a0:be:8b:37:68:b2:5b:4e:33:bf:9b:2b:a1:
         8a:ce:0b:10:38:5c:11:99:e2:0d:df:0f:97:eb:7d:f1:21:45:
         28:d3:99:c3:85:30:aa:28:c8:8a:7d:19:67:56:a5:59:7a:3f:
         39:6b:1a:bd:96:ef:40:5f:0b:43:01:20:f1:bb:0b:a3:76:3d:
         81:70:af:c6:ca:b8:af:e1:a0:b3:1f:61:a9:a5:d3:1e:3f:32:
         ad:74:9b:a2:58:c9:2e:33:91:f6:fb:b1:60:37:58:70:bc:cf:
         0f:33:f4:c8:e1:29:0e:42:01:64:6d:7d:f0:f3:3d:99:c1:bf:
         f9:9a:72:76:0d:a0:28:79:4c:c8:d3:32:b5:fc:84:25:f0:a6:
         72:90:02:72:f4:77:c8:f9:4c:f6:18:f2:bd:9e:f8:31:f3:69:
         f1:58:38:cb:a1:47:1f:d9:5e:e4:5f:fc:26:40:13:3b:4d:44:
         8f:3a:10:7c:e5:a2:ac:dd:7b:fc:91:a8:a7:9b:a0:23:d8:2e:
         e8:13:90:fe:d2:1e:8f:4f:70:3b:07:8a:65:ae:67:72:ff:7e:
         7c:ae:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:35 2026 by rpki-client