This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4-qUdyAf6HfoxMWxrY81_f0381A.roa
File:                     4-qUdyAf6HfoxMWxrY81_f0381A.roa (raw, json)
Hash identifier:          EMrlBdvxVNqHD0fA7rlq4eSO8wvmCNhno7MFzdjg2pY=
Subject key identifier:   E3:EA:94:77:20:1F:E8:77:E8:C4:C5:B1:AD:8F:35:FD:FD:37:F3:50
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       019B7E3927615A6952E84C153D1B4A80C2D2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4-qUdyAf6HfoxMWxrY81_f0381A.roa
Signing time:             Fri 02 Jan 2026 10:20:33 +0000
ROA not before:           Fri 02 Jan 2026 10:20:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60781
IP address blocks:        163.5.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:27:61:5a:69:52:e8:4c:15:3d:1b:4a:80:c2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jan  2 10:20:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3ea9477201fe877e8c4c5b1ad8f35fdfd37f350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:b1:eb:e4:50:ec:6d:1b:23:da:bf:6b:6f:
                    d4:ba:cf:40:cc:ee:d5:ff:01:48:4d:96:77:35:cb:
                    94:d1:f8:55:9a:b6:6e:67:2a:f8:fd:21:5d:1f:c3:
                    72:d1:2c:e9:4c:5e:3f:46:cd:83:1b:f4:13:24:e6:
                    1f:3e:8c:36:f6:86:4d:e6:cb:73:2e:7f:98:09:a9:
                    58:9f:ab:8f:d3:64:46:7e:74:a2:1d:49:eb:87:41:
                    32:74:7c:37:28:60:e5:b6:87:ec:b5:77:45:38:16:
                    63:e7:a0:31:4f:f5:f0:29:f0:5a:00:48:95:9e:f3:
                    cc:9f:c9:ff:c1:77:3c:e3:5f:3e:b8:ff:9a:e7:5c:
                    ff:88:09:fe:86:95:a7:1c:96:86:fe:f7:24:7e:37:
                    7d:a1:86:e5:48:87:e7:ba:64:d8:33:71:cc:83:72:
                    34:53:92:ee:ad:10:8e:5a:7e:21:59:1d:29:e9:83:
                    f8:18:bf:7c:57:e6:31:c0:a0:52:7d:22:fc:95:71:
                    ab:6a:3c:d5:2e:07:3d:35:2a:57:a7:71:13:30:d3:
                    21:5e:d0:e1:57:63:59:62:d3:bb:79:96:84:c8:41:
                    f6:c9:20:64:b5:c1:d4:6c:4b:97:4c:e8:13:83:71:
                    20:0e:b0:a3:99:eb:1b:03:42:bf:6a:96:51:ae:bf:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EA:94:77:20:1F:E8:77:E8:C4:C5:B1:AD:8F:35:FD:FD:37:F3:50
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4-qUdyAf6HfoxMWxrY81_f0381A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:25:b0:25:3f:25:e9:ec:4e:91:f2:23:74:ef:70:04:63:9a:
         12:08:de:12:95:cd:a4:c1:58:e3:1b:f4:fd:e2:8f:ff:09:40:
         c2:ec:18:e3:18:ff:91:5a:9c:cb:19:f2:ae:e4:f8:45:8b:63:
         ac:46:a4:35:4d:5b:db:8d:6d:22:c8:b6:0e:7c:af:f0:50:da:
         89:83:a7:69:85:0e:d9:b6:46:74:cb:48:85:0c:62:d1:db:91:
         1e:8f:c5:ac:ff:a0:62:a1:ba:62:e1:53:ff:ab:66:64:79:67:
         ab:0f:ec:56:f7:94:d3:9f:72:a8:dd:14:3b:14:71:73:96:f6:
         91:ea:c5:7a:aa:3a:53:a2:22:b0:d5:bd:31:f9:d3:05:fc:00:
         f8:8d:25:da:2a:90:d5:d1:88:1d:a6:a4:e2:4d:ac:16:5b:e0:
         c9:66:4b:e4:5f:04:47:69:51:cd:a9:ed:ff:76:47:ac:74:2c:
         90:b9:88:61:1d:f7:48:17:dd:93:ba:6f:23:50:14:89:d9:e8:
         a5:6d:50:00:94:8d:54:05:71:5f:e4:63:ed:1e:e0:27:f0:b1:
         a8:43:96:52:6d:99:2f:fb:42:d3:3f:cd:95:50:57:7f:f0:9b:
         a2:9e:ff:8c:f6:15:1f:27:c4:a7:f7:2a:b6:41:f7:17:ac:69:
         c6:6b:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:53:15 2026 by rpki-client