This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/WeB5kEbbCBZpop-fX4ON5gv82l8.roa
File:                     WeB5kEbbCBZpop-fX4ON5gv82l8.roa (raw, json)
Hash identifier:          lzVL6PB9mdFbq/OglmNYGRSYPmiN/i9hvgSO4OhUNo0=
Subject key identifier:   59:E0:79:90:46:DB:08:16:69:A2:9F:9F:5F:83:8D:E6:0B:FC:DA:5F
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       019B7B3680711FA5DDEB0CD9B3CE85C47961
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/WeB5kEbbCBZpop-fX4ON5gv82l8.roa
Signing time:             Thu 01 Jan 2026 20:18:47 +0000
ROA not before:           Thu 01 Jan 2026 20:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206431
IP address blocks:        5.83.39.0/24 maxlen: 24
                          5.83.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:80:71:1f:a5:dd:eb:0c:d9:b3:ce:85:c4:79:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Jan  1 20:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=59e0799046db081669a29f9f5f838de60bfcda5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:a8:52:dd:df:d4:69:47:2a:7f:01:87:aa:
                    e4:40:bc:59:51:ad:d0:b0:d2:d9:47:7e:db:42:83:
                    57:a2:b5:9e:50:c0:d7:81:d2:89:a9:06:c4:0f:0d:
                    ae:36:5c:d1:aa:06:1c:08:44:26:00:93:a2:47:0c:
                    92:9a:2c:85:ba:ea:9e:42:fa:a8:67:52:8d:93:c7:
                    6d:36:8f:70:a8:0a:de:91:6b:28:a7:9a:f2:06:2d:
                    74:c2:c1:ad:d2:ef:ca:af:28:7b:2e:c7:e5:af:df:
                    4e:1a:3c:06:9d:19:9b:98:a6:8c:7a:bf:86:13:19:
                    dd:8f:86:ef:3b:bc:30:5f:24:5b:ac:c8:67:46:8e:
                    99:55:2c:c6:23:89:62:46:a0:bb:cb:20:15:ff:c2:
                    80:a5:84:05:85:0f:fa:61:b5:33:2f:35:35:62:20:
                    5b:98:cf:29:06:4f:6a:f4:52:1f:f8:3d:16:35:1d:
                    17:e0:70:a5:dd:bb:38:8f:79:df:10:66:28:82:a8:
                    26:da:9f:ae:3d:97:21:f0:a8:14:59:83:01:00:11:
                    9a:69:ea:5e:51:e8:44:34:cf:ff:88:48:f3:9e:2b:
                    69:57:58:75:08:49:7e:82:26:2d:bd:b6:f7:a7:e5:
                    46:41:72:68:66:af:e7:81:ab:9e:c3:6f:e1:79:e9:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E0:79:90:46:DB:08:16:69:A2:9F:9F:5F:83:8D:E6:0B:FC:DA:5F
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/WeB5kEbbCBZpop-fX4ON5gv82l8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.39.0/24
                  5.83.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:56:85:31:c3:db:0b:d3:26:d1:a2:68:92:75:41:f0:57:be:
         f1:b6:77:a6:30:0e:3d:40:b9:38:19:af:7c:0f:57:40:9f:0f:
         f1:82:ab:a4:b0:2d:aa:ef:53:25:5c:db:30:00:57:83:17:5a:
         26:41:38:65:71:4c:44:ae:6d:97:3b:58:3d:78:6d:2b:5c:97:
         7f:72:8e:bc:d6:60:7c:45:f3:07:4f:ca:06:b7:48:7c:9a:c3:
         8d:7d:b0:d3:e1:14:12:97:d8:f1:21:bd:2b:1a:99:0d:72:5e:
         3a:64:df:ec:d2:10:98:f3:df:51:6f:f9:1f:b3:ee:c1:bc:32:
         de:5b:b5:f4:61:76:d8:b0:07:67:d5:f3:a9:d7:fe:23:a5:88:
         be:af:e1:0c:7a:1e:41:87:70:f5:70:25:41:a2:ba:12:3c:a4:
         dc:bb:06:0a:20:49:46:e1:77:8c:fd:b9:13:d2:3f:cb:77:af:
         24:ae:e5:69:f4:06:e8:1b:ff:f8:6c:9c:ee:3e:e8:70:7c:a8:
         59:e6:5f:81:48:de:26:d4:48:79:e2:09:92:f5:fe:69:dd:a9:
         23:cd:9b:44:ed:92:c0:0b:12:21:2d:cc:90:be:b6:de:5d:44:
         36:97:63:a6:b9:3c:ab:a2:3a:91:c5:74:3e:75:fc:63:33:54:
         59:f9:76:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:43:45 2026 by rpki-client