This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/fIACLuWd2jewktBlpXCJABXEMc8.roa
File:                     fIACLuWd2jewktBlpXCJABXEMc8.roa (raw, json)
Hash identifier:          Mwyuy8cEipm8N81d8QDxoLU5fwxQmRil4rQ7sh4HFAI=
Subject key identifier:   7C:80:02:2E:E5:9D:DA:37:B0:92:D0:65:A5:70:89:00:15:C4:31:CF
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       019B79107E54D0395262CDB0BCC65968BC53
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/fIACLuWd2jewktBlpXCJABXEMc8.roa
Signing time:             Thu 01 Jan 2026 10:18:02 +0000
ROA not before:           Thu 01 Jan 2026 10:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     275
IP address blocks:        5.158.213.64/31 maxlen: 31
                          185.84.19.224/27 maxlen: 27
                          213.130.47.16/28 maxlen: 28
                          2001:728:0:5000::1532/127 maxlen: 127
                          2001:728:0:7000::/64 maxlen: 64
                          2001:728:401:21::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:7e:54:d0:39:52:62:cd:b0:bc:c6:59:68:bc:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Jan  1 10:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c80022ee59dda37b092d065a570890015c431cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:11:75:e3:53:79:f8:6e:33:f3:ee:07:d8:5d:
                    79:1e:36:76:29:5a:38:c3:a8:65:ce:87:79:0c:2d:
                    5b:54:af:f4:a6:1a:07:82:ad:8e:9f:49:47:71:9b:
                    9b:af:8c:36:fc:7e:00:c3:ee:7f:e5:99:3d:5d:d6:
                    4c:28:f0:57:ca:13:be:46:92:c4:7e:bc:3b:0b:33:
                    9c:87:78:55:dc:ec:04:81:85:e1:75:1c:21:35:a4:
                    06:3a:9a:f5:35:e2:14:60:aa:b0:77:59:89:ed:e2:
                    0b:a6:84:50:70:c1:11:44:60:d9:43:84:cf:a0:d7:
                    48:21:0b:bc:5e:5a:12:fb:b6:1f:5d:9f:49:53:38:
                    c3:9d:ad:f9:8e:20:06:07:f7:80:96:0c:88:68:08:
                    0d:89:63:2b:3d:2a:6e:8d:e3:70:79:83:3a:ce:61:
                    9d:ce:48:79:b6:bc:3c:d6:bd:2e:66:1b:82:13:b4:
                    35:ee:3c:6e:bd:93:05:c5:da:01:a6:99:b8:c1:aa:
                    07:de:a0:c6:d0:5d:74:92:b4:6d:2e:b6:6b:6a:da:
                    07:b9:90:d4:ac:e4:00:ef:86:5e:2b:8f:c6:6b:e8:
                    01:76:d2:51:01:44:bf:9f:33:b8:ca:0e:21:b0:56:
                    bc:e0:78:06:96:bc:f2:27:cf:26:3f:ac:fe:33:8f:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:80:02:2E:E5:9D:DA:37:B0:92:D0:65:A5:70:89:00:15:C4:31:CF
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/fIACLuWd2jewktBlpXCJABXEMc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.158.213.64/31
                  185.84.19.224/27
                  213.130.47.16/28
                IPv6:
                  2001:728:0:5000:0:0:0:1532/127
                  2001:728:0:7000::/64
                  2001:728:401:21::/64

    Signature Algorithm: sha256WithRSAEncryption
         8b:d5:d9:4e:99:de:d8:04:fd:2b:d4:9e:ac:7d:ad:df:b7:21:
         48:4b:4c:05:e6:ce:0e:c2:44:0e:e7:e4:81:33:89:6b:b9:5f:
         72:80:93:a0:b4:d6:a2:2c:02:31:51:38:f9:d8:a5:b2:71:b3:
         b7:03:76:00:7b:f3:ef:14:be:57:0f:37:65:f8:fa:a4:e8:21:
         c8:f7:6b:b9:15:e4:e7:7d:5c:c2:97:6f:db:f1:99:db:a3:68:
         27:80:1f:0c:f2:4e:38:b6:f9:25:45:ed:f0:2b:b3:6f:ad:9b:
         f3:d1:ee:64:ff:59:e6:c4:0c:cb:d1:48:77:b6:96:fb:d2:eb:
         6c:61:c9:39:c0:b4:53:88:d7:32:e0:a5:05:eb:22:e6:50:41:
         9f:45:23:b6:69:8f:ca:fd:b8:7d:e1:9e:9b:92:92:c4:ec:93:
         6c:11:d5:e5:68:55:fd:d8:ea:25:c7:93:3a:b2:26:94:71:da:
         f4:b8:02:fc:57:53:f1:50:b4:53:0c:9f:5d:58:a5:1d:ec:4f:
         f9:7c:60:05:2e:24:8e:1a:ac:38:2a:3d:ab:b1:2f:0f:b6:e2:
         b2:03:91:3a:0f:6e:0c:d4:bb:5f:30:35:31:76:9e:d4:d9:57:
         1c:24:50:88:7d:91:3d:01:f6:41:d1:e6:e0:9d:80:c6:90:ff:
         a2:3e:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 09:33:22 2026 by rpki-client