This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/_f5RIellOsao5KCw2i7vFeQR7rM.roa
File:                     _f5RIellOsao5KCw2i7vFeQR7rM.roa (raw, json)
Hash identifier:          qXGAOHQOuYNk1rdKz+v+OM93px2cELNi7NieboxK/CA=
Subject key identifier:   FD:FE:51:21:E9:65:3A:C6:A8:E4:A0:B0:DA:2E:EF:15:E4:11:EE:B3
Certificate issuer:       /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial:       019B7AC953BCEBE5F1FADC2DAD841E0EBE4E
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/_f5RIellOsao5KCw2i7vFeQR7rM.roa
Signing time:             Thu 01 Jan 2026 18:19:33 +0000
ROA not before:           Thu 01 Jan 2026 18:19:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208149
IP address blocks:        5.59.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:53:bc:eb:e5:f1:fa:dc:2d:ad:84:1e:0e:be:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
        Validity
            Not Before: Jan  1 18:19:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fdfe5121e9653ac6a8e4a0b0da2eef15e411eeb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:1a:c7:be:17:e4:a0:91:95:2b:42:99:16:
                    42:aa:e8:53:f5:08:95:16:d1:ff:9e:89:fe:96:88:
                    b7:3d:ab:67:65:ce:eb:22:4a:d6:77:e8:c7:92:d4:
                    b7:7c:4a:ee:49:12:a0:31:63:1e:33:88:36:50:61:
                    ac:72:f1:13:f8:9a:82:27:3e:73:0f:e4:6b:ea:5b:
                    02:f8:a5:8a:99:eb:72:4a:36:80:eb:25:6c:32:4d:
                    60:a5:37:df:e0:dc:bc:a8:38:b2:b4:6e:47:1a:c3:
                    ca:fc:b5:67:29:91:3b:c2:ae:91:6e:f0:e8:57:c7:
                    c6:6e:88:c1:39:08:da:0f:06:cb:0d:fb:73:e8:5f:
                    67:34:6b:1a:0b:c0:a8:23:b7:48:03:30:80:ec:e6:
                    63:f9:af:b9:2e:c1:85:52:a8:33:b7:dc:0b:6b:71:
                    78:ec:14:05:fd:87:9d:8e:fe:41:9a:ad:38:3d:a4:
                    0f:59:64:ec:bd:67:77:81:dd:29:ad:8c:83:43:7e:
                    3f:55:d1:2f:00:ce:87:30:43:01:3c:e7:8a:02:eb:
                    50:f8:ca:25:e8:13:f0:6c:92:e4:ea:ad:4b:72:03:
                    8c:71:76:98:01:db:34:32:d7:56:eb:e8:96:78:03:
                    fd:12:08:a1:31:a7:84:9d:5b:00:db:4b:98:80:24:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FE:51:21:E9:65:3A:C6:A8:E4:A0:B0:DA:2E:EF:15:E4:11:EE:B3
            X509v3 Authority Key Identifier:
                keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/_f5RIellOsao5KCw2i7vFeQR7rM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.59.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:cf:b5:59:4b:73:cc:7e:71:da:08:7f:8a:e8:d1:0a:43:3c:
         eb:5f:8f:10:85:5d:0e:49:2f:9f:b1:38:26:78:2f:87:72:12:
         2b:2f:6a:2b:1d:14:c4:0c:d3:df:3e:8b:bf:ef:da:d6:34:9b:
         fe:6b:c9:42:98:2b:23:74:50:a4:e8:9d:3c:b0:7c:05:8c:26:
         88:f2:9f:01:50:2f:89:74:03:5e:ac:c0:c6:c7:74:6a:da:c9:
         c8:ea:8b:32:de:34:f7:42:77:d6:b8:1c:9f:c7:b3:03:ce:23:
         af:a5:4b:56:55:94:e6:ae:df:5a:9a:2f:60:4a:f5:4c:37:ea:
         26:09:6f:b3:01:3b:3b:b9:65:6d:cc:0f:22:86:2b:c7:18:fb:
         aa:68:f4:bf:cb:54:87:bd:d9:8d:3a:f8:e9:fd:48:a4:e7:be:
         16:c3:8a:01:be:b0:08:97:0f:94:65:66:3f:f6:58:b9:81:1b:
         70:f2:40:56:8f:c6:ba:05:31:9f:28:cc:76:21:9b:f3:7b:81:
         33:17:70:ac:78:a9:59:07:7d:a5:4c:90:35:6c:f6:f3:81:e2:
         a7:33:9d:a1:cc:33:12:76:08:e1:c1:89:1c:4a:68:7a:eb:2a:
         88:6d:43:a9:37:b9:f9:18:0d:1f:cf:26:bb:b5:84:ed:f2:fa:
         e5:fd:6c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:17:31 2026 by rpki-client