This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa
File:                     5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa (raw, json)
Hash identifier:          jonWwn1zIDBZ/vrTcGpWTsw/eo5gVMGyObXA0g7CkyA=
Subject key identifier:   E5:CF:B2:25:38:79:A9:5F:EE:99:A2:D1:F2:00:CE:F1:0C:02:CB:D6
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       019B79ED1DE63EBDAC15506C80A4C3754A5C
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa
Signing time:             Thu 01 Jan 2026 14:19:01 +0000
ROA not before:           Thu 01 Jan 2026 14:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59422
IP address blocks:        194.39.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:1d:e6:3e:bd:ac:15:50:6c:80:a4:c3:75:4a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: Jan  1 14:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e5cfb2253879a95fee99a2d1f200cef10c02cbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:6c:49:dd:d4:f5:85:dc:4e:ec:ca:23:a3:
                    b1:19:75:af:2b:b9:62:c7:c1:87:d9:a0:ed:a3:b2:
                    25:e2:0c:9a:ee:21:11:d4:32:1a:a4:d6:f3:9e:ba:
                    56:26:0a:3c:bb:c7:cb:a7:df:de:9a:1d:ba:e2:b9:
                    ad:37:58:45:10:a5:c4:78:69:f1:20:66:d9:4a:96:
                    d9:21:2a:7b:ac:2b:a9:58:7f:02:99:5e:7f:c8:30:
                    aa:9b:98:a0:ec:97:7c:3c:1a:a6:f5:8a:3b:4d:79:
                    09:bf:17:57:b0:f8:3b:40:59:11:04:72:91:45:e3:
                    52:b8:f6:64:7f:bb:2d:92:37:06:dc:30:93:8f:3b:
                    d3:a2:e6:1d:2a:1e:95:d0:74:7a:f9:43:09:41:1e:
                    06:55:73:5d:e1:64:f6:cb:be:4a:c3:14:d7:c3:3f:
                    37:63:8b:bd:1d:c2:15:2c:5d:1f:c4:8d:43:77:d9:
                    28:07:c9:9b:d1:b7:03:72:99:c9:3a:ef:ae:68:eb:
                    14:b3:25:00:f8:2c:ec:a2:b6:b4:20:21:6d:2c:6d:
                    45:97:72:0d:69:a1:87:12:fe:76:9e:ba:64:0e:e6:
                    65:6e:48:ac:4b:59:ba:0a:11:4f:b9:e9:0e:45:0f:
                    b5:59:78:a5:e8:cd:c3:f6:15:75:27:13:5b:4a:88:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:B2:25:38:79:A9:5F:EE:99:A2:D1:F2:00:CE:F1:0C:02:CB:D6
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/5c-yJTh5qV_umaLR8gDO8QwCy9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.39.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:96:b0:ae:3f:81:29:1b:23:44:0b:9c:6a:b1:35:10:7b:ab:
         b9:b6:b2:fe:1e:f3:72:72:0d:bc:d9:1b:a6:00:ba:7b:a3:7c:
         7c:15:d3:b1:ba:a3:53:c4:a5:7b:6f:ed:01:79:67:7b:15:81:
         db:e4:d7:7c:ed:fd:0e:e0:a7:c6:c0:72:57:be:20:d2:5f:50:
         be:24:31:9d:87:4c:b8:51:95:36:82:4a:fc:44:a6:87:85:dc:
         39:7b:0b:f2:ac:f5:9d:54:9b:a5:f5:41:4e:7a:ca:81:7c:c7:
         cb:77:25:fd:81:e8:e1:a9:04:3c:a9:03:11:f2:66:d3:3b:6d:
         84:88:b9:31:fa:42:98:4a:b8:74:38:e4:55:9f:3d:82:1a:07:
         65:77:42:b6:db:46:b8:ab:d3:11:43:99:57:99:db:fe:8c:49:
         8e:21:0d:f2:f0:98:d1:03:8b:46:8f:43:82:a0:9b:d0:13:d4:
         df:df:ef:a3:47:23:6e:04:36:8e:2d:eb:ad:db:27:21:a1:b7:
         de:57:ab:0b:8d:8f:86:2f:c7:ad:31:43:49:86:03:4b:d4:58:
         be:ec:d6:cc:a1:a0:28:a5:c1:ec:64:cc:30:55:13:95:e1:d3:
         55:15:85:2c:e4:bf:d2:e1:6c:9a:a6:f1:c9:61:df:ac:d3:f6:
         e8:4d:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:47:58 2026 by rpki-client