This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eVNUuPOgerk-wqxs4XRQctPto90.roa
File:                     eVNUuPOgerk-wqxs4XRQctPto90.roa (raw, json)
Hash identifier:          zlSl0Aq4uCn6Jxo7Fzo9C2vSahlQMwQhNsSHQD6wzeI=
Subject key identifier:   79:53:54:B8:F3:A0:7A:B9:3E:C2:AC:6C:E1:74:50:72:D3:ED:A3:DD
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       019B9E3E31D78D23BD2D8DB6D16F2FA2F9F4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eVNUuPOgerk-wqxs4XRQctPto90.roa
Signing time:             Thu 08 Jan 2026 15:33:54 +0000
ROA not before:           Thu 08 Jan 2026 15:33:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202485
IP address blocks:        5.83.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9e:3e:31:d7:8d:23:bd:2d:8d:b6:d1:6f:2f:a2:f9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jan  8 15:33:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=795354b8f3a07ab93ec2ac6ce1745072d3eda3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:16:4a:eb:c5:70:94:0a:a2:67:78:b9:cc:
                    a0:85:f6:e4:39:21:0f:ef:5f:f0:af:18:36:42:44:
                    cd:aa:10:d5:af:86:65:13:48:21:e4:af:49:cf:43:
                    fe:bd:11:48:1a:ca:aa:b3:1c:57:9c:05:6a:f2:e5:
                    2e:ab:16:1f:ef:17:96:be:f1:ed:87:c9:75:e9:80:
                    dc:f0:a2:a8:63:d4:d8:c9:ea:09:68:32:64:26:01:
                    d4:c4:75:b9:a7:65:2d:53:b7:b4:74:be:f1:ed:6f:
                    d7:87:13:08:10:e3:31:cd:1a:3c:89:35:5c:57:20:
                    6b:a9:63:b7:5c:bf:58:49:17:fd:84:6e:54:7c:57:
                    2a:74:98:54:54:cb:0f:eb:73:eb:13:ec:94:0c:a8:
                    ee:16:49:1b:bb:5a:16:6d:46:cf:6b:af:64:b7:3f:
                    e0:3f:e4:3b:3b:4f:6a:0b:81:59:c0:92:ff:f6:84:
                    b9:a1:f6:2a:40:1a:8f:cf:00:e5:82:af:9b:36:df:
                    87:6d:af:af:fa:e3:d5:fd:d8:40:41:c6:df:13:f7:
                    2f:27:3d:69:3a:be:fb:b7:37:80:c7:1e:b8:4f:a5:
                    48:bf:b1:4c:81:3b:08:5b:c4:5d:88:e7:8e:24:b9:
                    3a:b8:d4:db:37:06:65:35:de:63:4d:14:ef:4d:1f:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:53:54:B8:F3:A0:7A:B9:3E:C2:AC:6C:E1:74:50:72:D3:ED:A3:DD
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eVNUuPOgerk-wqxs4XRQctPto90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:02:b5:6c:a6:64:8e:55:1c:d8:35:92:9a:7a:7e:7b:ba:1f:
         f8:b7:47:40:97:a5:31:31:35:6e:cd:60:c0:d5:89:5f:91:84:
         c6:60:ed:d5:68:7e:3a:95:34:41:e5:50:2c:9f:59:72:3b:bf:
         45:ce:79:da:b6:e4:df:46:da:95:0a:86:2c:18:c7:47:10:e9:
         c2:62:a7:b7:b8:8a:0f:9a:03:51:a8:91:c6:5e:54:92:c0:9e:
         21:59:48:35:7e:34:ec:e3:6f:0b:47:08:74:39:6f:2b:46:94:
         60:f6:b4:2c:a1:91:11:c5:ed:86:06:f3:b2:64:b7:4f:7c:47:
         0c:ee:54:e4:27:70:45:90:ac:72:ce:02:92:35:bb:ab:e0:15:
         73:f3:3e:42:ee:27:a5:19:9b:fe:dc:01:31:a5:55:59:a0:05:
         72:01:32:2d:0b:4f:37:6a:e0:15:a8:7b:96:fb:80:70:23:d5:
         ef:fe:7d:1c:e8:80:65:89:97:0c:c3:cd:1f:ea:e7:2a:85:29:
         24:c7:5d:1a:49:c8:e7:d8:7f:57:4c:c1:2a:07:05:bf:f0:a7:
         e9:4d:7a:18:f2:3d:74:2c:cb:a1:c4:0f:e0:93:1d:18:3b:38:
         b6:b2:33:99:86:aa:82:bd:92:e6:df:19:4a:74:81:cd:cd:c9:
         b8:c7:4c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:59:14 2026 by rpki-client