This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/00wZvtvNZQs4uAA915GadjEGBvg.roa
File:                     00wZvtvNZQs4uAA915GadjEGBvg.roa (raw, json)
Hash identifier:          5K/ug2ekLcwiuUDWDLSSG2UzC7SzInoAiv/KlObpbv8=
Subject key identifier:   D3:4C:19:BE:DB:CD:65:0B:38:B8:00:3D:D7:91:9A:76:31:06:06:F8
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       019B7B367FB5A180CC42467E468B5AE984CE
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/00wZvtvNZQs4uAA915GadjEGBvg.roa
Signing time:             Thu 01 Jan 2026 20:18:47 +0000
ROA not before:           Thu 01 Jan 2026 20:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64398
IP address blocks:        5.83.45.0/24 maxlen: 24
                          5.83.47.0/24 maxlen: 24
                          2a02:13f0:8200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:7f:b5:a1:80:cc:42:46:7e:46:8b:5a:e9:84:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Jan  1 20:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d34c19bedbcd650b38b8003dd7919a76310606f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:3d:8b:de:ac:4f:ab:e0:62:9b:c4:a6:64:
                    da:90:92:99:c7:ff:6e:83:7e:a8:29:ba:09:5b:d3:
                    f5:e2:e5:c3:4c:fe:54:e3:5e:c2:de:ed:11:a0:4b:
                    29:3e:fb:4b:1a:da:40:fa:a7:6c:b7:b1:6c:29:ad:
                    ca:cc:8c:0f:7f:03:0e:1c:01:21:c2:9a:d0:70:02:
                    b1:c2:dd:52:e8:3c:ad:01:80:89:ae:87:d9:1d:33:
                    c1:d5:7c:89:d6:3d:3b:8d:c1:d5:35:ec:cd:0a:cb:
                    9b:4a:cd:e4:4f:3f:e7:f3:9a:52:c7:2f:c5:f8:ba:
                    db:4f:80:d6:10:2d:dd:20:75:26:52:96:89:70:7f:
                    2a:bf:87:ad:ef:c5:03:8e:e9:15:90:75:5d:85:17:
                    2b:41:5a:d5:1d:e7:63:d3:3c:87:e4:4a:e1:c6:a6:
                    aa:79:fd:45:b3:dc:a3:4f:f5:ff:23:68:9f:3d:4e:
                    cf:03:6c:42:fb:6c:ab:aa:d3:f6:c5:9c:76:9a:ca:
                    61:7d:1a:76:3f:20:7c:0a:24:31:d3:62:69:ee:af:
                    f3:5b:dd:d2:a4:51:c3:b4:c3:96:99:81:1f:51:8e:
                    f2:fd:c9:75:be:83:e1:59:6a:84:43:eb:c0:79:71:
                    eb:0b:fe:95:d2:05:96:9d:d7:fa:c1:22:9f:fd:dc:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4C:19:BE:DB:CD:65:0B:38:B8:00:3D:D7:91:9A:76:31:06:06:F8
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/00wZvtvNZQs4uAA915GadjEGBvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.45.0/24
                  5.83.47.0/24
                IPv6:
                  2a02:13f0:8200::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:27:fe:f0:6b:b8:11:27:2d:86:49:17:dd:0e:51:af:e6:
         bc:4d:29:5f:65:36:a8:ed:f8:51:09:4e:0f:94:56:1f:7a:69:
         88:85:7a:7b:57:95:d5:7f:a1:3b:bd:55:46:65:4a:10:44:48:
         f8:62:5a:68:f1:6b:48:b5:8e:1f:db:fc:fa:aa:78:9b:53:90:
         d7:19:9f:d6:ad:42:b1:37:93:ac:c1:ed:d8:f6:d6:f3:d7:35:
         60:e5:0d:3b:21:f6:90:f0:18:e2:77:2e:f5:e5:f5:77:92:40:
         2f:ea:07:d6:cd:0d:64:3b:ba:af:1c:78:b7:31:2e:9f:c8:cb:
         cb:f6:7a:f8:c1:b0:38:91:29:2d:cd:d0:13:cb:e4:5c:98:5f:
         9f:48:8c:82:40:78:3b:a3:2d:a9:08:ae:b3:f4:f1:bc:ad:60:
         de:ed:9c:b3:bd:52:64:b8:27:a0:c4:78:3e:fa:ed:07:07:bd:
         24:a4:b9:b7:76:1a:b4:7f:de:70:5f:20:9b:fe:5d:28:3f:42:
         d7:88:85:36:8e:b6:16:9d:6b:13:59:60:58:a5:ce:85:5d:20:
         50:5b:4c:0f:ba:98:49:83:30:a0:99:1d:af:85:b9:e0:df:51:
         c7:34:04:f1:9d:62:2e:7f:39:2d:ac:a8:39:d4:2a:85:dc:6f:
         c7:50:35:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:22:07 2026 by rpki-client