This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/4p5MDgx80WrNV4qWtYD29zqy-Vk.roa
File:                     4p5MDgx80WrNV4qWtYD29zqy-Vk.roa (raw, json)
Hash identifier:          1uvtk+0FlzJu9XJBd0te2sWPClZtr04c0PqiVDd+kic=
Subject key identifier:   E2:9E:4C:0E:0C:7C:D1:6A:CD:57:8A:96:B5:80:F6:F7:3A:B2:F9:59
Certificate issuer:       /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial:       019B79102CA95858DA3FBA5F159576891903
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/4p5MDgx80WrNV4qWtYD29zqy-Vk.roa
Signing time:             Thu 01 Jan 2026 10:17:41 +0000
ROA not before:           Thu 01 Jan 2026 10:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     52092
IP address blocks:        91.227.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:2c:a9:58:58:da:3f:ba:5f:15:95:76:89:19:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
        Validity
            Not Before: Jan  1 10:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e29e4c0e0c7cd16acd578a96b580f6f73ab2f959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:19:96:c0:8c:ac:73:bc:c6:10:1e:41:c2:
                    c6:d9:1b:9d:4a:5f:e0:bc:9e:1d:94:6f:77:b9:27:
                    53:b8:69:a6:e3:7b:e2:da:e6:58:91:b0:e8:5a:81:
                    cc:86:18:f4:a3:9e:1d:a1:0d:fe:b4:5b:29:cd:01:
                    1a:64:2d:7f:05:3b:04:c6:f5:8d:b7:e6:49:d4:27:
                    fe:07:05:23:14:ca:02:37:31:5f:5f:3e:83:37:02:
                    1b:51:3a:72:32:a7:ae:da:e6:5f:87:44:7b:d0:05:
                    38:10:e9:da:3f:42:2a:82:2c:20:75:80:30:00:91:
                    03:8d:4e:12:fc:7a:fa:b4:b6:77:c1:13:28:fb:37:
                    95:08:a0:64:1b:54:f0:96:64:ba:5d:c3:09:b6:24:
                    7a:01:80:b0:8e:cd:b7:bd:e5:4b:bd:49:4a:c7:11:
                    e1:1a:f7:12:6b:86:04:50:29:89:58:04:73:2a:88:
                    68:ab:bb:a0:7e:24:c7:62:b2:7d:2e:e1:11:92:b4:
                    d1:bd:69:7e:cf:f6:1c:e1:63:92:a9:11:44:a8:36:
                    7e:7b:64:89:80:7c:05:27:79:eb:b6:01:de:3b:79:
                    25:b0:ea:12:4b:ec:61:20:71:5a:78:0e:2d:f7:c0:
                    32:8e:45:c9:3c:d9:08:5a:fb:c1:6b:39:6e:16:e6:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9E:4C:0E:0C:7C:D1:6A:CD:57:8A:96:B5:80:F6:F7:3A:B2:F9:59
            X509v3 Authority Key Identifier:
                keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/4p5MDgx80WrNV4qWtYD29zqy-Vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:ef:c9:c1:6f:9b:26:61:7c:f8:16:e2:90:50:cc:a4:ea:31:
         ec:52:99:85:18:13:ea:36:c9:cf:f2:37:30:e4:29:e2:da:ef:
         d2:cc:01:40:ff:0b:37:16:11:4e:90:80:a0:cb:10:e4:1f:e0:
         1d:96:1c:c1:db:48:9a:4b:8e:b6:20:b2:33:a5:ff:a2:ae:f3:
         28:4c:1d:00:e7:65:4a:c3:e0:30:11:a8:4e:6a:fb:16:cc:b8:
         a0:4d:c1:91:f0:3d:ac:d2:92:10:58:3e:b8:24:67:58:67:bd:
         58:84:7c:2a:e0:bb:05:21:1d:21:3d:80:0e:69:17:58:1e:54:
         a2:c3:38:6c:14:ae:17:1a:78:5a:11:f6:5a:60:cb:a7:6a:67:
         f8:59:88:8f:cd:54:da:0a:3f:78:81:48:92:55:75:80:22:bf:
         9c:04:50:8a:15:90:7e:ab:1e:d0:f7:79:9f:6e:d0:7a:4e:ff:
         a8:eb:e2:2d:3a:8d:3f:de:47:35:99:b9:0e:ab:3c:89:5c:51:
         9b:bf:87:f2:34:73:7c:9a:90:ce:1e:ed:ef:5b:b5:d2:aa:8d:
         0b:ec:e9:25:8f:58:5c:27:d2:8d:95:87:9c:e0:01:95:a2:cc:
         20:f5:51:50:e1:df:d2:a6:19:87:ec:48:e0:68:54:b4:54:a2:
         71:13:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:21 2026 by rpki-client