This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1SEtV4amqGRJRSTfBXz3L1eUaRk.roa
File:                     1SEtV4amqGRJRSTfBXz3L1eUaRk.roa (raw, json)
Hash identifier:          egvtOywlsUKKn+xqDnL0RiupPM0i+tk6WovaRC5Jpqk=
Subject key identifier:   D5:21:2D:57:86:A6:A8:64:49:45:24:DF:05:7C:F7:2F:57:94:69:19
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       019B7E39450073D2ECA19FD74010B900B7CC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1SEtV4amqGRJRSTfBXz3L1eUaRk.roa
Signing time:             Fri 02 Jan 2026 10:20:41 +0000
ROA not before:           Fri 02 Jan 2026 10:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     265919
IP address blocks:        163.5.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:45:00:73:d2:ec:a1:9f:d7:40:10:b9:00:b7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jan  2 10:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d5212d5786a6a864494524df057cf72f57946919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:98:20:be:cf:f7:f0:46:6a:62:87:15:3d:
                    d4:33:f4:9f:05:a1:d5:0c:54:f1:f6:fc:ec:73:3c:
                    52:08:76:4a:5f:5b:a6:0c:bd:0c:7e:12:dc:0f:5d:
                    72:39:e2:34:97:21:d8:90:21:04:36:a3:16:91:20:
                    a2:5e:7b:aa:0d:30:d9:a6:f9:4f:69:80:06:8b:c3:
                    ca:a4:fd:4a:02:e5:16:c7:3f:d2:19:28:59:eb:fc:
                    8d:5b:6d:8d:f0:f8:3d:97:8a:77:b0:c5:42:e4:bb:
                    87:0e:7b:fd:88:69:ea:5a:c3:fb:de:55:b5:6c:33:
                    ec:08:4b:92:ab:2d:e0:48:46:ff:89:5f:b3:12:13:
                    f7:10:c9:cd:fe:e5:20:86:de:05:4b:17:00:87:75:
                    7f:b1:10:28:af:ae:b7:dd:71:25:b2:b0:cc:83:a1:
                    d4:27:b1:48:fc:cd:e3:11:f3:1e:ab:45:ad:07:ed:
                    d3:bb:ed:50:2e:0e:98:7e:9a:e9:d2:8c:b5:c8:45:
                    67:7f:5d:30:37:bb:65:68:13:b3:78:d7:4c:07:48:
                    81:6b:f3:b6:55:0e:84:37:da:47:c7:01:cd:61:c8:
                    55:f2:1c:4c:9b:39:82:76:b0:5b:36:83:c8:c0:c7:
                    f4:39:5e:3d:2c:85:30:92:4b:10:86:4d:34:9f:55:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:21:2D:57:86:A6:A8:64:49:45:24:DF:05:7C:F7:2F:57:94:69:19
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1SEtV4amqGRJRSTfBXz3L1eUaRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:87:12:69:62:ba:5e:cb:e8:95:02:f7:40:05:88:cd:20:6a:
         5a:24:7e:01:16:cf:14:c8:ef:df:ff:cb:39:11:e6:05:30:3f:
         7d:1a:de:1b:3f:c4:06:bf:c8:46:49:c5:74:d0:3a:28:4e:0d:
         8a:a1:b8:bf:b2:79:f4:33:f9:6c:3f:41:52:0b:9e:e8:e9:b1:
         81:d9:d9:af:e9:e4:a2:da:d5:6c:8a:04:b9:2d:23:b4:ae:f2:
         34:db:d1:78:72:32:84:c9:7a:49:e5:38:5a:bf:55:a7:58:2b:
         9f:0f:53:78:86:78:50:6b:02:a0:de:0a:78:07:07:f5:0f:fa:
         c0:e2:92:54:3f:2b:bf:d5:a4:d1:d4:60:87:21:9e:83:a7:cb:
         ae:5e:86:12:5d:55:9c:9f:1a:93:89:2e:18:b3:17:52:d1:18:
         ff:70:ba:28:64:cb:d0:dc:83:8f:c6:4e:26:29:8a:21:e2:f0:
         09:6b:c7:51:43:79:5c:cc:25:5e:17:14:d7:25:b6:5b:45:43:
         3b:d2:57:e0:f0:af:46:6b:f0:71:e5:a2:15:f5:d7:b3:b8:eb:
         57:2e:4d:ce:bc:82:f6:59:fd:d9:67:bf:b1:61:f1:c6:a6:22:
         af:cd:a5:85:33:91:7e:de:85:a8:b4:e6:fd:29:da:cd:1d:fa:
         6e:2c:63:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+OUUAc9LsoZ/XQBC5ALfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjYwMTAyMTAyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTIxMmQ1Nzg2YTZhODY0NDk0NTI0ZGYwNTdjZjcyZjU3OTQ2OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr06YIL7P9/BGamKHFT3UM/SfBaHV
DFTx9vzsczxSCHZKX1umDL0MfhLcD11yOeI0lyHYkCEENqMWkSCiXnuqDTDZpvlP
aYAGi8PKpP1KAuUWxz/SGShZ6/yNW22N8Pg9l4p3sMVC5LuHDnv9iGnqWsP73lW1
bDPsCEuSqy3gSEb/iV+zEhP3EMnN/uUght4FSxcAh3V/sRAor6633XElsrDMg6HU
J7FI/M3jEfMeq0WtB+3Tu+1QLg6Yfprp0oy1yEVnf10wN7tlaBOzeNdMB0iBa/O2
VQ6EN9pHxwHNYchV8hxMmzmCdrBbNoPIwMf0OV49LIUwkksQhk00n1XRmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUhLVeGpqhkSUUk3wV89y9XlGkZMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMVNFdFY0YW1xR1JKUlNUZkJYejNMMWVVYVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowV8MA0G
CSqGSIb3DQEBCwUAA4IBAQAlhxJpYrpey+iVAvdABYjNIGpaJH4BFs8UyO/f/8s5
EeYFMD99Gt4bP8QGv8hGScV00DooTg2Kobi/snn0M/lsP0FSC57o6bGB2dmv6eSi
2tVsigS5LSO0rvI029F4cjKEyXpJ5Thav1WnWCufD1N4hnhQawKg3gp4Bwf1D/rA
4pJUPyu/1aTR1GCHIZ6Dp8uuXoYSXVWcnxqTiS4YsxdS0Rj/cLooZMvQ3IOPxk4m
KYoh4vAJa8dRQ3lczCVeFxTXJbZbRUM70lfg8K9Ga/Bx5aIV9dezuOtXLk3OvIL2
Wf3ZZ7+xYfHGpiKvzaWFM5F+3oWotOb9KdrNHfpuLGNs
-----END CERTIFICATE-----
Generated at Mon Jan 19 19:58:00 2026 by rpki-client