This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/RGc5fLjcJNmYdApzBeBRT1sTX8U.roa
File:                     RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (raw, json)
Hash identifier:          uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=
Subject key identifier:   44:67:39:7C:B8:DC:24:D9:98:74:0A:73:05:E0:51:4F:5B:13:5F:C5
Certificate issuer:       /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial:       019B7834CC02D60F2C3F70B5BD0800329340
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/RGc5fLjcJNmYdApzBeBRT1sTX8U.roa
Signing time:             Thu 01 Jan 2026 06:18:04 +0000
ROA not before:           Thu 01 Jan 2026 06:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35407
IP address blocks:        185.159.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:cc:02:d6:0f:2c:3f:70:b5:bd:08:00:32:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
        Validity
            Not Before: Jan  1 06:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4467397cb8dc24d998740a7305e0514f5b135fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:d9:42:83:f6:e8:84:5d:21:5c:e0:17:55:
                    91:33:54:df:dd:63:dd:c1:50:5e:27:a1:0b:f0:15:
                    a2:f1:f4:28:b2:8e:74:63:ee:2e:e6:53:d8:3a:8d:
                    44:1b:67:ac:b9:e3:97:d6:dd:59:0c:f0:93:13:12:
                    74:1a:e6:b5:fd:89:fc:dc:10:f9:90:4c:03:23:a6:
                    13:9d:82:85:d4:d2:74:52:d1:e5:8d:35:e8:81:2d:
                    24:9b:9b:a7:81:c0:13:8d:7d:71:d9:4b:40:f2:8f:
                    52:18:e4:01:16:ef:61:5a:72:6f:b9:cd:e2:b3:a9:
                    0f:9f:90:83:8a:1b:4f:c8:da:0a:73:cb:98:01:1b:
                    09:de:d9:e6:cb:b3:9f:d3:bd:05:0c:1d:20:82:dc:
                    03:b6:c3:e6:73:16:54:c5:9e:c6:08:53:5f:a0:54:
                    60:01:b9:76:b5:e5:82:4f:e8:02:9a:d8:c2:1c:20:
                    2e:8a:e6:1d:15:ff:87:2f:2c:3c:aa:42:ac:48:f5:
                    6d:df:11:00:60:a1:7b:22:59:d2:0c:01:50:7f:e1:
                    46:26:6f:5f:c9:dc:50:21:5d:61:08:1d:30:d5:e0:
                    25:bc:06:73:79:fe:30:a3:5e:cf:94:e4:85:b0:12:
                    72:9e:5f:57:15:39:94:54:de:48:79:14:83:4f:32:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:67:39:7C:B8:DC:24:D9:98:74:0A:73:05:E0:51:4F:5B:13:5F:C5
            X509v3 Authority Key Identifier:
                keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/RGc5fLjcJNmYdApzBeBRT1sTX8U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.159.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a0:c7:e8:6a:fe:f2:04:8f:98:dc:b0:92:b0:61:18:59:3f:
         af:d0:90:9e:9b:29:9d:35:d3:22:d4:f5:cc:d2:a5:a4:2f:d7:
         df:43:46:22:4d:12:b2:bf:f7:34:dd:b8:fc:c3:43:4d:15:d5:
         cb:33:f1:04:ad:43:97:e5:9c:9c:4f:34:ca:fc:ca:63:fe:63:
         1c:db:76:81:1c:ab:21:b8:c3:f1:ff:09:98:6e:34:4a:20:d4:
         14:4a:ae:fd:7b:01:c4:54:30:da:8f:2b:8b:fb:15:ac:e2:4f:
         32:9d:26:14:e3:a3:03:a8:d1:96:00:a1:28:de:dc:3f:f8:70:
         c8:4a:c5:c7:97:b4:29:0b:2b:42:38:f5:3a:f8:3d:b9:de:80:
         73:69:6c:81:36:90:ff:20:77:d0:28:0c:d0:ab:4c:2b:75:4f:
         ac:33:51:05:cc:6e:25:53:ae:8a:10:29:5f:55:9f:92:c7:b9:
         78:d2:a0:9f:90:73:bd:88:af:ea:8a:2b:48:81:b0:81:e9:16:
         fc:22:e3:b2:e7:07:ca:f8:56:d1:6f:d1:ea:5d:b7:7e:fc:35:
         27:23:c2:a7:e5:b9:9c:51:81:37:4a:b1:c4:db:63:a0:17:8b:
         57:17:b7:4d:98:56:f4:fd:5f:97:db:04:65:37:40:67:f5:c0:
         05:cb:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:43:39 2026 by rpki-client