This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa
File:                     v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa (raw, json)
Hash identifier:          +Ugur4Zx8N+utcUH4v+QIfdsbIfqtrKkMiSiyk7i/CI=
Subject key identifier:   BF:92:4E:72:BD:54:4D:92:F3:10:C5:26:E1:AE:AF:4D:6F:71:DD:AA
Certificate issuer:       /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial:       019B7C7F943D16D8C72CA55574BAD1F016C5
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa
Signing time:             Fri 02 Jan 2026 02:18:14 +0000
ROA not before:           Fri 02 Jan 2026 02:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8758
IP address blocks:        193.247.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:94:3d:16:d8:c7:2c:a5:55:74:ba:d1:f0:16:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
        Validity
            Not Before: Jan  2 02:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf924e72bd544d92f310c526e1aeaf4d6f71ddaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:1f:78:44:69:2f:9c:2f:c8:bf:72:f8:c9:
                    c3:69:9c:f2:72:11:bb:f3:1e:30:4b:be:ea:aa:96:
                    75:a1:c3:f3:49:17:3b:8d:bf:85:d5:85:36:b3:5c:
                    d9:20:7c:b2:17:69:45:38:de:02:aa:8b:84:7e:b1:
                    eb:da:81:c1:24:79:07:55:5d:47:e7:77:32:99:07:
                    e2:e7:d7:d1:9c:60:81:77:2f:f1:f0:b5:53:13:23:
                    ee:b2:64:50:e5:fc:80:02:ee:96:ca:f7:53:e6:f7:
                    f5:bd:72:b6:1a:8d:9e:a1:74:6b:04:c9:f8:e3:a8:
                    78:04:c8:1f:58:6e:3b:9e:cd:0b:09:d0:6a:de:f6:
                    64:43:6e:da:00:ad:16:a8:e7:7c:00:13:d0:e3:46:
                    99:58:54:2a:8e:6e:71:08:76:99:c7:10:e2:1a:f1:
                    39:88:cf:68:07:fb:87:d9:b6:03:c7:ed:dd:23:17:
                    b1:9d:9a:2d:96:63:92:2e:3b:f1:80:a4:c8:fd:cb:
                    5b:0b:15:ac:59:13:27:40:85:65:5a:9d:90:88:7e:
                    89:80:26:45:35:7e:96:cb:b6:8b:89:80:90:5c:29:
                    b0:66:01:d5:d4:63:2f:c2:69:a7:f1:ba:09:08:3c:
                    8b:98:8a:4f:a5:a2:5c:71:ea:3b:52:3a:89:f1:81:
                    f1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:92:4E:72:BD:54:4D:92:F3:10:C5:26:E1:AE:AF:4D:6F:71:DD:AA
            X509v3 Authority Key Identifier:
                keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/v5JOcr1UTZLzEMUm4a6vTW9x3ao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:a6:39:db:91:7d:0e:e2:5b:6d:71:e5:89:ca:e2:19:44:e3:
         b5:e3:e4:92:32:e6:7f:f7:4c:e4:b3:e0:28:7e:a9:43:9c:73:
         21:15:a5:e5:69:45:f4:cf:8e:58:ce:c5:11:3a:18:0d:e8:af:
         24:b7:4e:94:33:19:dd:d8:bd:1d:c7:7e:d9:d2:fd:35:de:f3:
         03:24:0b:95:fa:1e:d5:70:29:42:6f:63:61:ee:f9:bb:b1:20:
         4c:e9:f6:98:fb:6a:43:5f:ba:21:96:55:1f:2e:ea:a0:fe:7d:
         2c:68:2c:15:73:25:0c:6a:13:c1:a3:ac:1e:21:f6:89:c3:46:
         75:c5:77:4e:8e:32:e1:fc:bf:1f:8f:5a:71:26:c2:24:bf:5e:
         0a:a6:b8:a0:31:64:16:fb:ef:b9:25:81:82:a4:71:94:b8:83:
         d8:c6:b2:c2:b8:ea:5e:62:50:83:64:42:8c:70:f8:2c:bb:9a:
         dd:8d:83:da:07:ca:20:ea:d0:d7:be:fd:85:bf:77:0a:72:8d:
         02:d9:0d:a7:4a:c1:6f:0c:83:90:a0:07:90:09:5a:22:0b:de:
         af:8f:72:fd:8d:89:29:b6:cb:12:24:f9:db:71:ff:6d:68:02:
         55:88:74:70:41:59:8d:40:3b:e8:e6:54:5e:b7:b8:84:ca:10:
         29:49:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:53:33 2026 by rpki-client