This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa
File:                     5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa (raw, json)
Hash identifier:          vhWvb47xm9ebRAseLYTwnZU0IPiMDqw3uETfxMC4UbA=
Subject key identifier:   E5:88:34:2F:26:0F:D9:C1:B3:EA:DA:A7:1F:6B:12:33:3B:BA:62:B2
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       019B775889286F50DC0641B5701C8CD41F00
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa
Signing time:             Thu 01 Jan 2026 02:17:29 +0000
ROA not before:           Thu 01 Jan 2026 02:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2486
IP address blocks:        2001:660:3005::/48 maxlen: 48
                          2001:660:3006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:89:28:6f:50:dc:06:41:b5:70:1c:8c:d4:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Jan  1 02:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e588342f260fd9c1b3eadaa71f6b12333bba62b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:c5:34:e8:20:53:33:87:24:63:20:66:55:
                    d7:1a:06:e7:e7:1a:f1:9f:10:53:b8:38:5d:bc:c2:
                    2b:81:9c:3a:b5:e9:3e:40:f8:d7:20:f5:52:53:6a:
                    a0:74:8a:2a:13:3c:c0:7f:53:b4:84:fa:bc:fb:7e:
                    8a:74:dd:09:bf:93:83:5f:89:22:70:14:27:68:96:
                    c2:36:30:ea:3a:54:dd:aa:02:8c:a2:db:71:05:32:
                    6e:f3:17:71:ae:19:aa:cb:21:b6:77:6b:53:de:03:
                    78:58:29:25:2f:20:cb:2e:77:09:37:c9:ac:8d:14:
                    8e:1e:fc:19:5d:ab:86:19:d2:50:bd:15:c3:16:05:
                    57:4a:e0:fb:c7:7b:1d:76:95:25:50:0d:4a:4d:f5:
                    9f:43:e0:18:47:ac:bc:3b:e0:4d:d9:95:ba:be:ee:
                    53:31:cd:d8:ff:6e:b5:29:ce:81:07:7b:e3:08:46:
                    06:6f:b8:c9:b0:eb:04:30:82:ba:ef:87:11:c2:dd:
                    df:80:a5:f5:f3:f6:49:f7:d8:a2:be:db:c5:75:a9:
                    69:24:93:b1:56:81:5b:dc:62:88:8f:5b:0d:66:63:
                    1e:20:a3:84:50:be:d6:f9:b1:47:5a:d7:d0:31:2b:
                    38:f8:3e:b8:40:fc:1e:c1:80:9e:f9:ba:20:48:43:
                    38:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:88:34:2F:26:0F:D9:C1:B3:EA:DA:A7:1F:6B:12:33:3B:BA:62:B2
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/5Yg0LyYP2cGz6tqnH2sSMzu6YrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:660:3005::-2001:660:3006:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:78:8d:b4:7a:16:46:7c:a4:ef:b9:ba:71:c4:51:4a:a2:
         36:61:38:df:94:7d:fa:7f:01:53:5d:c2:bb:a9:4b:f7:ea:af:
         a3:c4:97:20:45:19:32:b4:c6:22:4f:c3:0e:fc:d3:c8:52:93:
         eb:82:30:79:ab:2d:30:12:b4:38:64:fd:98:39:a6:97:05:b4:
         27:3a:b3:7d:10:d4:53:de:bc:33:e1:62:74:63:ca:ab:e5:2a:
         25:47:61:c4:b4:76:49:b5:4a:60:6f:a8:a5:6c:3c:cf:22:a3:
         8e:17:53:98:4f:74:c2:75:97:fe:6e:56:b4:9d:02:77:88:3a:
         ea:ed:f7:5a:ce:bf:32:2d:3e:79:05:6d:1f:be:32:e6:42:98:
         74:28:e2:62:23:5d:cf:fe:ff:b6:8d:34:9d:82:81:5c:f7:c7:
         cc:bd:65:82:e3:06:9b:f6:01:b3:da:a0:c7:b1:d9:6c:2a:fd:
         4b:a9:af:da:8a:41:64:46:19:8c:9a:c1:d2:b1:be:b8:0d:85:
         84:de:9b:fd:22:49:4e:6a:47:00:51:15:1e:01:dd:90:b4:73:
         40:86:d0:a7:59:a8:29:7e:86:2f:55:6e:bd:a2:42:54:95:80:
         53:9a:d6:40:b4:02:b6:09:e1:15:80:1f:38:61:83:79:98:76:
         cc:86:76:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:38:57 2026 by rpki-client