This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/1-Edehd76HTqL1z2XmIbFRLv3gwI.roa
File:                     1-Edehd76HTqL1z2XmIbFRLv3gwI.roa (raw, json)
Hash identifier:          vPHVlxdJex2ZHystAoE2bh1+XpxrI6ory8GF6qFZ49o=
Subject key identifier:   F8:47:5E:85:DE:FA:1D:3A:8B:D7:3D:97:98:86:C5:44:BB:F7:83:02
Certificate issuer:       /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial:       019B76EABB39977C0C4DD84980F1CCF2BED0
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/1-Edehd76HTqL1z2XmIbFRLv3gwI.roa
Signing time:             Thu 01 Jan 2026 00:17:33 +0000
ROA not before:           Thu 01 Jan 2026 00:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        155.131.55.0/24 maxlen: 24
                          155.192.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:bb:39:97:7c:0c:4d:d8:49:80:f1:cc:f2:be:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
        Validity
            Not Before: Jan  1 00:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f8475e85defa1d3a8bd73d979886c544bbf78302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:04:bf:97:da:d0:d1:d6:f9:11:4e:9f:43:
                    cd:e7:69:1f:05:36:dd:64:1c:72:52:fb:2d:00:14:
                    ac:25:a5:58:45:d9:a9:14:e8:d7:b8:70:de:54:b8:
                    88:b8:69:36:77:6b:16:b1:5c:fe:5f:f6:bf:96:6e:
                    b5:22:c4:71:8d:12:2d:4b:1a:3d:65:31:3e:98:da:
                    30:f4:ea:46:f0:4c:cb:b3:04:9a:27:df:2a:32:fd:
                    38:c9:95:77:f5:d5:bb:d6:ae:bd:f3:fa:f4:35:36:
                    35:20:51:d1:3e:27:26:31:90:89:56:22:bc:8f:09:
                    55:56:c2:ab:67:c2:a5:c0:14:b0:a5:e4:c5:cf:01:
                    8d:65:97:9d:36:57:54:0b:70:e0:73:e0:4d:2d:42:
                    97:d5:25:f3:04:7b:d8:a9:68:04:4d:d5:0f:68:83:
                    8e:7a:fe:b9:1b:26:23:2d:37:ac:16:a3:63:ef:d7:
                    fa:56:d3:d6:97:53:e6:85:2b:44:7a:89:62:db:ac:
                    92:28:63:b8:3c:59:7b:f6:e7:23:fa:02:90:e7:a7:
                    f5:fa:d2:dd:8a:6e:a2:fc:ba:3f:de:e7:5d:b3:a3:
                    9d:d4:39:66:43:12:3f:38:81:1d:d7:5d:a5:5a:1b:
                    a3:0a:9f:54:2c:b1:ef:1e:6b:d3:f7:ea:50:dc:05:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:47:5E:85:DE:FA:1D:3A:8B:D7:3D:97:98:86:C5:44:BB:F7:83:02
            X509v3 Authority Key Identifier:
                keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/1-Edehd76HTqL1z2XmIbFRLv3gwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.131.55.0/24
                  155.192.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:18:98:0b:71:2a:fb:1c:65:f9:e8:90:5b:74:6c:2f:e4:
         bd:99:d3:8e:03:43:a9:de:49:59:a1:69:15:a6:66:03:68:f2:
         4d:fc:b1:fa:d6:46:34:eb:ef:ad:7b:7b:a9:68:aa:7e:11:f7:
         9e:ef:a7:02:f1:25:ee:21:d8:75:4c:dd:e0:6e:7a:52:78:26:
         ab:d2:97:4c:c2:a2:85:b9:6f:4e:c3:c7:32:ed:28:fb:12:7d:
         ac:2c:9c:34:01:9b:be:10:92:e6:51:33:8b:88:e0:b0:ac:50:
         03:b3:6a:37:ff:39:b1:2c:d5:7c:c8:e2:6d:8b:89:92:0c:1a:
         67:99:14:94:8b:68:a0:0c:70:fe:55:46:0a:1c:65:cc:90:1c:
         ec:fe:94:9b:26:f9:f2:94:06:38:8f:a4:45:58:fc:7a:99:cd:
         91:51:ff:b4:24:52:d3:a6:e5:1b:46:f3:b2:65:06:e2:79:0e:
         fe:34:b9:b8:29:b8:76:bd:f5:1b:72:ea:c8:bd:f5:51:5d:90:
         93:b5:d1:30:d8:f4:57:1c:42:c2:17:36:16:7b:76:10:f2:21:
         e5:cb:e9:b7:a9:e3:4f:78:52:c7:ab:03:84:97:87:a3:70:92:
         76:a2:59:52:0f:e3:1b:f6:92:41:17:7a:9a:fa:4d:32:cf:b6:
         ee:bd:32:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:00 2026 by rpki-client