This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/R5AfwkRm4Nt3-y7iXLZxIWPxUVs.roa
File:                     R5AfwkRm4Nt3-y7iXLZxIWPxUVs.roa (raw, json)
Hash identifier:          2IAldMVEUiQOTUe/+PUo2tmbOBg1PSzsSfervohq2jg=
Subject key identifier:   47:90:1F:C2:44:66:E0:DB:77:FB:2E:E2:5C:B6:71:21:63:F1:51:5B
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       019B7AC7DD0E00C280F31C80DBD6D45D6903
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/R5AfwkRm4Nt3-y7iXLZxIWPxUVs.roa
Signing time:             Thu 01 Jan 2026 18:17:57 +0000
ROA not before:           Thu 01 Jan 2026 18:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205625
IP address blocks:        159.148.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:dd:0e:00:c2:80:f3:1c:80:db:d6:d4:5d:69:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jan  1 18:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47901fc24466e0db77fb2ee25cb6712163f1515b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:52:ad:cf:5f:67:ec:52:7d:53:ad:0a:99:88:
                    47:16:32:75:af:0c:e9:d1:69:bd:cc:02:16:65:55:
                    bc:93:a0:de:b8:b3:ea:11:93:c7:e3:99:11:47:a6:
                    3c:db:9b:dc:f9:7a:35:bc:b0:29:7d:fc:1f:da:e4:
                    f1:ca:7f:3d:e0:8b:5d:59:7f:e2:98:c4:81:4b:1c:
                    d7:61:e1:42:19:23:4e:1b:1b:d9:88:2b:d7:f4:5e:
                    c4:e3:51:de:14:f4:b5:1b:2b:5e:99:73:3f:df:bd:
                    d1:62:58:d9:ee:43:b9:83:e7:15:55:d5:b7:76:cf:
                    c0:21:ee:7e:62:3e:09:3e:e0:52:7b:ca:4b:19:f5:
                    0f:b8:a0:70:66:9c:4a:4b:51:74:ba:de:fc:83:ea:
                    6c:92:cf:94:bf:23:0b:d7:5b:fa:25:79:7d:0c:13:
                    22:3f:87:79:6d:dd:64:92:64:ab:6e:7f:32:9f:c1:
                    41:80:bc:fb:e0:5b:d5:22:24:c8:e7:81:61:49:4d:
                    f7:00:a4:de:f7:04:f2:0d:d5:89:19:d8:d8:1f:5b:
                    73:26:ff:07:60:9c:13:19:21:ff:95:8e:0c:87:bf:
                    58:09:08:e9:4e:b0:3b:93:fb:b9:01:d4:a9:3a:20:
                    49:3b:94:24:5d:53:3e:b1:41:e9:0b:44:be:de:14:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:90:1F:C2:44:66:E0:DB:77:FB:2E:E2:5C:B6:71:21:63:F1:51:5B
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/R5AfwkRm4Nt3-y7iXLZxIWPxUVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.148.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e7:14:e2:8c:08:cf:0a:7a:33:a2:10:a9:c1:82:2a:c8:7c:
         25:5c:c2:26:6d:6d:0a:1e:ae:4b:56:a3:be:36:55:9d:28:5a:
         51:29:e5:c6:47:54:63:88:f3:36:e0:c5:77:04:d0:79:37:dc:
         e4:3a:ba:6f:93:a6:70:05:29:3f:fe:9a:f3:1d:ab:6a:4d:7c:
         ac:c4:41:91:59:f1:bc:d5:47:c4:7b:25:3f:f7:ff:23:15:d5:
         bc:61:c3:19:be:56:bc:25:fd:61:70:a2:45:6a:2d:1a:f8:a7:
         a3:18:fb:34:37:3f:97:0f:c3:77:cf:07:42:80:36:ee:11:10:
         d6:20:96:70:9c:97:7c:7d:ae:53:50:af:c2:f4:44:3c:12:d3:
         7b:8b:8e:7b:55:ee:fc:f5:c5:25:0b:02:02:33:8e:45:bf:4e:
         3c:a2:d4:b4:f4:1d:bd:e4:88:7f:7e:19:1d:3a:b1:b3:f7:e4:
         5a:a9:13:20:49:5f:e0:bf:53:88:c0:64:69:03:ef:61:7e:d8:
         37:38:85:1d:02:2d:8f:32:72:ac:d9:e0:be:9c:c2:d9:e5:9d:
         fd:c6:4f:68:69:12:6b:c3:d0:7b:29:e8:00:94:d3:ce:ae:36:
         63:15:db:1c:1b:df:ae:54:3e:5c:07:63:90:7e:ea:c7:e0:57:
         96:6f:d1:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x90OAMKA8xyA29bUXWkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzkwMWZjMjQ0NjZlMGRiNzdmYjJlZTI1Y2I2NzEyMTYzZjE1MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VKtz19n7FJ9U60KmYhHFjJ1rwzp
0Wm9zAIWZVW8k6DeuLPqEZPH45kRR6Y825vc+Xo1vLApffwf2uTxyn894ItdWX/i
mMSBSxzXYeFCGSNOGxvZiCvX9F7E41HeFPS1GytemXM/373RYljZ7kO5g+cVVdW3
ds/AIe5+Yj4JPuBSe8pLGfUPuKBwZpxKS1F0ut78g+psks+UvyML11v6JXl9DBMi
P4d5bd1kkmSrbn8yn8FBgLz74FvVIiTI54FhSU33AKTe9wTyDdWJGdjYH1tzJv8H
YJwTGSH/lY4Mh79YCQjpTrA7k/u5AdSpOiBJO5QkXVM+sUHpC0S+3hQpIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEeQH8JEZuDbd/su4ly2cSFj8VFbMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvUjVBZndrUm00TnQzLXk3aVhMWnhJV1B4VVZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5QsMA0G
CSqGSIb3DQEBCwUAA4IBAQB15xTijAjPCnozohCpwYIqyHwlXMImbW0KHq5LVqO+
NlWdKFpRKeXGR1RjiPM24MV3BNB5N9zkOrpvk6ZwBSk//przHatqTXysxEGRWfG8
1UfEeyU/9/8jFdW8YcMZvla8Jf1hcKJFai0a+KejGPs0Nz+XD8N3zwdCgDbuERDW
IJZwnJd8fa5TUK/C9EQ8EtN7i457Ve789cUlCwICM45Fv048otS09B295Ih/fhkd
OrGz9+RaqRMgSV/gv1OIwGRpA+9hftg3OIUdAi2PMnKs2eC+nMLZ5Z39xk9oaRJr
w9B7KegAlNPOrjZjFdscG9+uVD5cB2OQfurH4FeWb9FI
-----END CERTIFICATE-----
Generated at Mon Jan 19 20:01:39 2026 by rpki-client