This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/mVF_0cgvsEtf4iVeiQ6g8IjAsmA.roa
File:                     mVF_0cgvsEtf4iVeiQ6g8IjAsmA.roa (raw, json)
Hash identifier:          bNhTW0oGynm2yHcv08JZZ9D2dvlwn9a4rlXVwK15lNU=
Subject key identifier:   99:51:7F:D1:C8:2F:B0:4B:5F:E2:25:5E:89:0E:A0:F0:88:C0:B2:60
Certificate issuer:       /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial:       019B7F853161AE2A09668717CE57D2140D6D
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/mVF_0cgvsEtf4iVeiQ6g8IjAsmA.roa
Signing time:             Fri 02 Jan 2026 16:23:13 +0000
ROA not before:           Fri 02 Jan 2026 16:23:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209200
IP address blocks:        2.57.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:31:61:ae:2a:09:66:87:17:ce:57:d2:14:0d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
        Validity
            Not Before: Jan  2 16:23:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=99517fd1c82fb04b5fe2255e890ea0f088c0b260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:4e:46:fa:44:5a:73:82:da:0d:ac:cb:9e:
                    84:d3:f0:e1:39:c6:75:b3:9e:79:80:cf:67:ef:a7:
                    e8:a0:58:69:e2:c8:ef:76:bf:75:1a:bb:55:86:bb:
                    75:e1:e6:70:38:4c:2f:71:3b:c8:4f:ab:90:a1:ed:
                    71:a1:89:fb:6a:cb:7c:94:22:62:77:a0:95:10:c8:
                    68:e1:f7:50:18:ca:32:90:37:39:ce:2c:f1:79:4d:
                    68:09:d2:3c:68:93:ca:83:63:06:44:7b:54:b8:4c:
                    56:23:ed:0a:21:44:78:ba:3c:05:ad:89:bf:03:97:
                    11:ec:7f:5b:61:f4:d9:20:79:c2:2a:37:c6:7b:29:
                    19:a1:59:a4:1e:e9:bd:35:0d:3d:1d:19:2d:f0:21:
                    52:f4:c3:33:70:70:48:3a:1f:f0:71:44:34:5f:34:
                    21:a3:be:ad:bf:10:15:9d:1c:fa:32:25:08:b5:25:
                    7d:da:02:09:18:9d:94:0f:e2:9c:d0:31:d7:e4:2c:
                    6d:24:f2:2f:b3:a3:1f:98:89:af:b9:db:0f:a4:00:
                    09:f3:40:a3:d4:82:40:8a:ec:cd:3c:af:54:4d:af:
                    22:52:66:6e:02:e8:e6:11:96:ea:87:44:c3:0a:77:
                    ec:fb:ad:27:58:6e:61:9f:ca:c5:e4:63:30:12:f4:
                    67:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:51:7F:D1:C8:2F:B0:4B:5F:E2:25:5E:89:0E:A0:F0:88:C0:B2:60
            X509v3 Authority Key Identifier:
                keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/mVF_0cgvsEtf4iVeiQ6g8IjAsmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:ec:d6:4d:c6:52:81:1c:39:04:1b:98:7e:ee:b5:e6:9b:
         6d:89:91:cd:2f:e1:95:08:10:47:f8:e1:3f:8f:9b:75:8e:52:
         bb:c2:5b:43:53:57:12:c4:f0:b4:af:a5:12:b3:28:82:d8:86:
         d9:66:6c:43:31:c4:b0:0d:59:36:4e:73:42:b9:95:76:c6:60:
         fb:ff:87:61:27:20:b5:b7:1c:9a:55:3b:e3:a5:9b:da:11:66:
         30:fb:b8:82:91:5f:07:d8:37:ae:ad:44:88:b1:ac:d8:5e:23:
         fb:c6:1a:a7:5c:68:a2:a6:aa:13:ec:92:e8:30:b9:2f:90:0e:
         12:a4:63:0a:2b:40:1c:b2:e2:37:77:3c:d2:24:1d:ec:73:19:
         8b:6b:5f:f0:8f:12:9c:bb:6a:14:4f:1e:20:77:88:db:9e:07:
         75:8c:57:68:bd:d6:56:00:ca:08:4e:db:4e:8e:f4:96:27:08:
         9c:3d:3d:91:0a:21:23:ab:61:53:9b:1d:37:7b:83:38:01:b3:
         7b:cb:55:32:a8:e4:87:07:e5:7c:99:fd:45:b5:86:3f:d8:fe:
         5f:4f:7c:27:c8:a5:63:b6:6c:ea:8b:51:cd:4f:2e:f7:9a:fb:
         12:56:89:88:79:a3:34:8b:50:a9:94:39:e6:84:03:0a:28:30:
         fa:c3:24:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:15 2026 by rpki-client