This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/5LuGzHTGNXh7ooCOYMthjUDSS6E.roa
File:                     5LuGzHTGNXh7ooCOYMthjUDSS6E.roa (raw, json)
Hash identifier:          ueacTOAGFcsAA9jabTl3i8ESOHojLkJGvrFKPoo+SiA=
Subject key identifier:   E4:BB:86:CC:74:C6:35:78:7B:A2:80:8E:60:CB:61:8D:40:D2:4B:A1
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       019B78352D4EC1B0B27373076DABF24CEB2F
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/5LuGzHTGNXh7ooCOYMthjUDSS6E.roa
Signing time:             Thu 01 Jan 2026 06:18:29 +0000
ROA not before:           Thu 01 Jan 2026 06:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12605
IP address blocks:        83.164.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:2d:4e:c1:b0:b2:73:73:07:6d:ab:f2:4c:eb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Jan  1 06:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e4bb86cc74c635787ba2808e60cb618d40d24ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:c7:97:b5:6e:a4:a7:10:0d:59:ad:18:0c:
                    4c:7b:93:5b:ae:89:4c:bc:99:d4:37:cb:30:4b:64:
                    0b:4d:44:de:4d:0f:cf:03:23:61:6a:a7:4f:0e:5c:
                    81:64:4f:8f:65:af:a5:30:db:7e:e8:89:af:08:45:
                    07:9b:ec:2c:a7:c5:ec:dd:d1:85:d6:61:5f:a8:73:
                    14:3e:74:cc:1b:a8:d3:a6:60:f9:f2:5d:e4:a2:c2:
                    b2:f6:17:05:20:13:64:28:25:e4:8d:71:e9:8a:9a:
                    9d:c3:52:d7:36:81:12:99:f9:84:8f:53:cc:fb:cc:
                    83:33:ee:7c:25:3f:cd:82:1b:bc:17:43:0c:60:db:
                    23:1a:3b:e5:30:b0:b0:f6:9d:46:7a:de:02:65:b3:
                    07:84:3d:98:14:89:68:c8:10:b3:ca:bb:95:ba:65:
                    b1:c4:d8:b3:99:15:4b:27:ec:a3:12:27:18:06:24:
                    1b:27:f2:ce:bd:c7:0f:cb:b2:61:36:06:1a:1f:6a:
                    d4:5f:fe:a9:c8:51:fb:59:7f:01:bb:51:ca:52:04:
                    fd:21:a2:a0:32:53:5e:2a:03:fe:09:e6:1a:fa:6e:
                    dd:f6:d0:b4:7a:15:0f:71:1d:a2:d2:48:c0:5a:0f:
                    ce:78:ba:18:59:c0:99:14:a3:c3:70:93:50:b5:a7:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BB:86:CC:74:C6:35:78:7B:A2:80:8E:60:CB:61:8D:40:D2:4B:A1
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/5LuGzHTGNXh7ooCOYMthjUDSS6E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.164.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:6d:a7:76:b0:3f:42:9f:dd:ca:92:cd:0c:20:64:29:e4:
         d7:25:33:d3:44:37:40:46:e6:2c:25:22:8e:6e:0a:f1:42:db:
         90:f0:7a:54:2d:21:55:d8:d7:9e:41:fc:50:87:d3:04:a1:52:
         6f:e5:87:41:02:8b:15:cc:d1:a7:37:63:b0:1f:be:9b:1d:ce:
         64:be:92:a7:c5:a5:59:8a:bd:01:f2:88:dc:33:7b:f1:9c:a5:
         a7:5e:b6:e5:92:d5:93:96:69:82:4a:88:65:80:e5:70:af:78:
         5b:93:34:c0:b7:6e:eb:8f:11:da:11:e3:fa:0c:d6:ab:68:22:
         4e:fd:10:1f:09:83:5c:77:08:27:1c:8d:11:10:bc:99:69:e3:
         91:4f:4d:29:4d:4c:bc:ae:38:e9:aa:b3:14:a1:6d:cc:9b:f0:
         8e:3d:1f:36:20:e2:96:13:03:80:9c:47:39:a5:ad:59:a7:02:
         c9:44:93:42:e2:59:f2:f9:0d:e9:90:1e:24:ee:c4:a7:02:8f:
         d4:c5:6c:90:0e:92:a1:e5:83:c9:90:ee:e6:88:3e:2e:c5:e7:
         d0:c8:c8:aa:86:cd:01:9d:7b:c5:b5:cb:15:e1:52:bc:98:e0:
         e1:c3:80:27:30:62:b4:6f:47:73:c4:a5:1e:15:42:0d:94:0b:
         d0:27:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:49:41 2026 by rpki-client