This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/K5-PLIESHQitDY5jUi3PsewROLU.roa
File:                     K5-PLIESHQitDY5jUi3PsewROLU.roa (raw, json)
Hash identifier:          Vk1b9prUpe6tBHx6phSppperAtIKfzAxs0MRfzjT8BY=
Subject key identifier:   2B:9F:8F:2C:81:12:1D:08:AD:0D:8E:63:52:2D:CF:B1:EC:11:38:B5
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       019BFA00BE12F52495F9C524DB375A89E9AD
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/K5-PLIESHQitDY5jUi3PsewROLU.roa
Signing time:             Mon 26 Jan 2026 11:11:50 +0000
ROA not before:           Mon 26 Jan 2026 11:11:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64249
IP address blocks:        45.10.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 09:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:00:be:12:f5:24:95:f9:c5:24:db:37:5a:89:e9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan 26 11:11:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2b9f8f2c81121d08ad0d8e63522dcfb1ec1138b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:bf:f9:0c:15:cd:7c:a4:a6:da:c1:89:99:
                    da:c4:38:ae:9e:8c:43:b4:86:1c:c0:5e:9f:4d:77:
                    e4:a5:37:aa:d7:39:f5:83:66:11:6e:bd:d5:47:84:
                    f7:4b:b4:f2:b6:0e:8f:3d:a8:c1:ca:5c:b6:0e:99:
                    0b:98:0b:71:a7:6e:c7:73:70:3e:6c:0c:4c:a0:32:
                    f5:d2:b5:59:34:e7:ec:67:cd:58:91:ed:89:71:d3:
                    f1:5c:31:23:89:54:ab:32:27:a6:a4:10:3a:8b:46:
                    6a:32:cb:95:26:e1:51:67:b3:04:64:47:59:65:e5:
                    2b:ec:41:24:e6:f9:ba:f7:63:56:59:95:c4:13:54:
                    0c:69:19:69:01:db:c3:eb:45:98:ad:85:14:d2:01:
                    a0:13:d4:44:e2:8d:81:d0:04:02:d9:a9:4c:ee:a0:
                    67:dd:c5:a3:6f:16:d0:d7:c4:29:b8:15:62:59:03:
                    1f:09:00:55:d9:be:26:9d:92:fd:2d:2c:1a:d8:f7:
                    51:da:ac:81:6c:c7:80:1f:e6:eb:f5:72:94:c6:86:
                    5e:1a:6e:2c:09:21:37:00:86:ab:cc:da:af:b0:c8:
                    4c:dc:8b:2b:74:05:59:37:41:19:a0:63:b8:3e:7d:
                    2b:d2:18:52:e5:c2:4f:84:e6:d1:90:65:f6:5b:8d:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9F:8F:2C:81:12:1D:08:AD:0D:8E:63:52:2D:CF:B1:EC:11:38:B5
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/K5-PLIESHQitDY5jUi3PsewROLU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e6:4a:34:60:4f:96:f4:fa:fd:aa:3c:00:9f:3f:2f:39:d5:
         86:28:58:71:88:af:60:ba:2f:78:99:28:9d:63:2b:58:bb:ac:
         90:a6:61:af:4c:6f:6c:33:63:23:f6:f3:bc:0a:9e:fd:d8:8d:
         e3:27:60:63:a9:e0:12:89:34:6c:4b:9c:77:06:af:db:24:1b:
         d9:14:9c:19:42:8c:1a:31:0d:7b:5b:58:b6:95:a3:04:c2:4f:
         d6:48:d5:d0:31:94:ee:62:b3:eb:7a:36:a7:aa:60:7f:a3:62:
         02:4d:ce:1d:5e:67:e5:75:79:e5:a7:b9:84:b5:54:c0:53:91:
         8a:75:9d:0e:b4:5d:34:8c:da:cf:de:93:4d:dd:3a:62:51:4b:
         89:fe:05:94:8b:36:30:28:20:2b:7f:71:9e:cf:0b:e2:ed:9e:
         07:a3:72:c4:70:e4:86:98:c9:80:60:26:08:33:01:36:c5:de:
         aa:57:cf:97:96:f4:f5:6a:57:86:6c:3c:0f:62:27:f5:16:a6:
         c1:a9:1c:cc:b9:78:37:3f:19:95:7e:eb:67:fe:a6:5f:e9:97:
         da:5f:05:c0:f2:ce:b9:13:f7:dc:35:2e:e2:a7:3d:f9:e0:41:
         17:18:1e:ad:63:6e:3c:de:07:56:32:9e:57:93:90:98:4e:06:
         e2:69:a3:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZv6AL4S9SSV+cUk2zdaiemtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjYwMTI2MTExMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjlmOGYyYzgxMTIxZDA4YWQwZDhlNjM1MjJkY2ZiMWVjMTEzOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC6/+QwVzXykptrBiZnaxDiunoxD
tIYcwF6fTXfkpTeq1zn1g2YRbr3VR4T3S7Tytg6PPajByly2DpkLmAtxp27Hc3A+
bAxMoDL10rVZNOfsZ81Yke2JcdPxXDEjiVSrMiempBA6i0ZqMsuVJuFRZ7MEZEdZ
ZeUr7EEk5vm692NWWZXEE1QMaRlpAdvD60WYrYUU0gGgE9RE4o2B0AQC2alM7qBn
3cWjbxbQ18QpuBViWQMfCQBV2b4mnZL9LSwa2PdR2qyBbMeAH+br9XKUxoZeGm4s
CSE3AIarzNqvsMhM3IsrdAVZN0EZoGO4Pn0r0hhS5cJPhObRkGX2W40gwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCufjyyBEh0IrQ2OY1Itz7HsETi1MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvSzUtUExJRVNIUWl0RFk1alVpM1BzZXdST0xVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQoXMA0G
CSqGSIb3DQEBCwUAA4IBAQA+5ko0YE+W9Pr9qjwAnz8vOdWGKFhxiK9gui94mSid
YytYu6yQpmGvTG9sM2Mj9vO8Cp792I3jJ2BjqeASiTRsS5x3Bq/bJBvZFJwZQowa
MQ17W1i2laMEwk/WSNXQMZTuYrPrejanqmB/o2ICTc4dXmfldXnlp7mEtVTAU5GK
dZ0OtF00jNrP3pNN3TpiUUuJ/gWUizYwKCArf3Gezwvi7Z4Ho3LEcOSGmMmAYCYI
MwE2xd6qV8+XlvT1aleGbDwPYif1FqbBqRzMuXg3PxmVfutn/qZf6ZfaXwXA8s65
E/fcNS7ipz354EEXGB6tY2483gdWMp5Xk5CYTgbiaaPt
-----END CERTIFICATE-----
Generated at Sat Feb 7 15:11:13 2026 by rpki-client