This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/f5NRc42CDlXfYrprC4TWBAU3rsE.roa
File:                     f5NRc42CDlXfYrprC4TWBAU3rsE.roa (raw, json)
Hash identifier:          JYANubKqFba0N/vnv4S0e+FuEYVufe3rNyzCy2U2QgA=
Subject key identifier:   7F:93:51:73:8D:82:0E:55:DF:62:BA:6B:0B:84:D6:04:05:37:AE:C1
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       019B78345139014902CEDD9DFE6B6B81100F
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/f5NRc42CDlXfYrprC4TWBAU3rsE.roa
Signing time:             Thu 01 Jan 2026 06:17:33 +0000
ROA not before:           Thu 01 Jan 2026 06:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57196
IP address blocks:        194.104.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 08:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:51:39:01:49:02:ce:dd:9d:fe:6b:6b:81:10:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  1 06:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f9351738d820e55df62ba6b0b84d6040537aec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:bd:85:0a:b3:cb:89:57:eb:de:09:78:eb:
                    ee:83:e1:89:e3:22:21:6f:87:55:1b:26:e5:72:25:
                    c1:94:19:d6:f6:cd:ea:95:3f:c0:d0:12:81:ee:6c:
                    7b:6a:b5:96:a6:4b:e4:6b:a8:db:98:7d:a1:c0:ec:
                    a0:f0:82:45:ed:38:13:dd:d6:1a:41:af:d0:d7:4b:
                    f9:1b:82:39:6b:d3:53:b9:45:b2:a7:43:73:0d:45:
                    dc:9e:8b:1e:91:87:f3:09:2e:e5:98:aa:08:67:87:
                    63:78:36:c5:a2:b3:8c:64:d3:09:96:58:9a:94:29:
                    70:80:54:8a:fb:d6:e0:f5:5c:17:61:4c:7b:4f:91:
                    72:53:e1:21:13:4e:47:ab:c1:06:14:b5:89:42:36:
                    7a:2e:b4:3a:8e:f8:09:96:c2:3e:d8:00:24:eb:14:
                    5e:49:cf:18:5c:80:03:65:c9:7f:c8:9a:ad:1e:03:
                    22:93:ae:e2:a3:58:32:ed:c3:0e:20:ae:e8:36:8b:
                    4c:c6:41:b8:96:ab:c0:d5:32:d4:c9:38:b5:e4:44:
                    3c:1f:f8:6b:4c:c4:1d:07:68:dc:3b:50:82:d0:b4:
                    bf:8b:d5:2c:68:a6:b7:88:be:91:d7:61:ee:d0:79:
                    14:07:c6:17:46:e2:42:0d:f3:3a:a5:e7:18:8f:08:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:93:51:73:8D:82:0E:55:DF:62:BA:6B:0B:84:D6:04:05:37:AE:C1
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/f5NRc42CDlXfYrprC4TWBAU3rsE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.104.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:96:6c:f9:da:d1:05:c3:66:98:be:fd:8b:69:16:27:99:00:
         14:f0:de:a7:6c:be:58:9b:98:2b:ea:d8:f7:32:5d:ee:a4:3d:
         b5:c8:97:0e:4a:e0:a7:75:08:2c:24:84:f6:e5:3c:25:7e:20:
         d7:b9:22:37:ef:7e:ac:63:2b:02:bb:9b:86:d9:71:64:86:eb:
         71:58:a7:13:22:0b:19:6e:6e:34:ac:b2:eb:41:7a:63:a7:fb:
         13:11:cc:9f:0d:68:87:78:14:5c:3b:9d:eb:e3:4f:ac:f5:3c:
         a5:c7:6f:6b:0e:e1:90:c5:37:c8:9b:45:47:8b:ef:83:44:34:
         48:4a:6f:30:2c:89:29:5b:c2:18:9a:45:f9:22:81:6d:42:7b:
         b9:d7:c3:87:56:c1:60:73:78:3e:8f:7b:68:64:c7:55:d9:b1:
         99:9e:ee:80:71:22:d6:f4:da:f4:08:8d:53:9a:ef:fe:fd:6c:
         00:e9:7e:60:d4:92:b3:01:1a:02:a3:61:ea:3f:4a:cc:15:69:
         d4:07:c5:c9:bc:75:c7:eb:67:81:69:c6:93:5a:76:73:7e:ad:
         91:2a:d1:50:73:93:db:c0:9d:22:a2:ca:91:63:34:98:7b:3c:
         65:2c:63:86:b9:10:dd:aa:fb:4d:cf:63:9a:0d:22:6c:d3:c7:
         f6:6b:02:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 14:51:10 2026 by rpki-client