This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/emO2nonrGTBV6dWmgfFKxf2S-4Q.roa
File:                     emO2nonrGTBV6dWmgfFKxf2S-4Q.roa (raw, json)
Hash identifier:          J/NmygUcPvRFH9fgrU6o+RxXyKYU/ZMkRyNKy/UmGBA=
Subject key identifier:   7A:63:B6:9E:89:EB:19:30:55:E9:D5:A6:81:F1:4A:C5:FD:92:FB:84
Certificate issuer:       /CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
Certificate serial:       019B7758F980C20EE80D0D02FB8D63331C6D
Authority key identifier: C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/emO2nonrGTBV6dWmgfFKxf2S-4Q.roa
Signing time:             Thu 01 Jan 2026 02:17:58 +0000
ROA not before:           Thu 01 Jan 2026 02:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34239
IP address blocks:        195.95.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:f9:80:c2:0e:e8:0d:0d:02:fb:8d:63:33:1c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ebb8b79422fb2d6d8a82db7f1ac0b6aa59b37f
        Validity
            Not Before: Jan  1 02:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a63b69e89eb193055e9d5a681f14ac5fd92fb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:32:f8:bd:86:63:fc:74:c4:72:91:a2:ce:
                    c3:3a:0e:08:98:9b:22:26:57:64:60:3c:87:d3:13:
                    50:e0:f9:96:52:22:3f:e9:bb:54:82:8f:72:6d:c2:
                    35:b1:e6:a1:1b:3e:23:9a:d7:5b:d4:5c:5d:1d:5d:
                    69:a9:bf:c8:f9:b0:4a:4a:59:d2:03:87:ef:7e:0d:
                    ff:d7:a8:f0:80:c5:5f:a9:de:9d:92:26:22:74:70:
                    c2:8d:ea:15:2a:17:99:9c:19:5b:21:93:68:b0:69:
                    aa:84:bb:5f:ee:30:89:97:ca:e7:06:81:ed:f6:8d:
                    55:c9:74:39:cc:a1:f8:85:af:60:52:eb:6b:5a:50:
                    9a:92:d5:5f:ae:36:12:89:5b:55:e9:f4:f6:02:62:
                    80:b0:ba:04:1e:4d:9d:a0:64:93:de:a2:16:a8:e6:
                    2f:7c:a8:33:af:b1:f8:18:a2:cb:cd:37:11:db:f2:
                    08:2e:63:4e:27:c2:b8:23:79:79:aa:a4:80:93:0d:
                    74:1a:e4:f3:d8:b7:b5:42:07:23:bd:c6:91:9d:91:
                    7b:c9:b2:ad:02:35:dd:90:08:2f:af:25:0b:75:5a:
                    d9:24:41:b8:46:7d:05:8a:a7:c9:da:26:fc:25:7c:
                    61:fc:70:15:4c:b1:df:5a:35:85:a5:58:0e:b9:1d:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:63:B6:9E:89:EB:19:30:55:E9:D5:A6:81:F1:4A:C5:FD:92:FB:84
            X509v3 Authority Key Identifier:
                keyid:C5:EB:B8:B7:94:22:FB:2D:6D:8A:82:DB:7F:1A:C0:B6:AA:59:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeu4t5Qi-y1tioLbfxrAtqpZs38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/emO2nonrGTBV6dWmgfFKxf2S-4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f50ecd-1c16-4bd3-bd0e-c84bfd4ee878/1/xeu4t5Qi-y1tioLbfxrAtqpZs38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:6e:42:a9:fc:57:75:71:65:7c:cf:5a:93:e1:9f:f8:44:
         e0:09:6c:9f:cd:72:d3:90:88:13:ef:37:c4:2f:4d:ad:f7:88:
         3a:16:03:2e:6d:7e:19:34:a4:16:12:3e:1d:4e:58:47:29:91:
         0f:dd:f8:07:59:3f:0e:92:5c:87:85:dc:3b:96:e0:58:0e:a4:
         7c:19:1f:80:7a:5e:a6:a3:ad:49:ff:cb:1d:de:93:d9:3a:d1:
         f8:af:1a:4c:50:36:70:90:81:f2:36:6d:6e:d4:a7:52:80:07:
         d4:cd:15:50:80:83:25:3b:ce:2c:b3:8d:49:eb:58:1a:0b:b4:
         dc:11:4c:83:d4:7a:ec:9e:87:ac:87:9c:98:f8:61:87:cb:06:
         d0:ad:fc:cf:de:94:84:88:39:87:6f:67:aa:86:b6:af:98:4a:
         f5:54:ad:42:94:dc:99:6d:c9:fa:33:05:37:2e:12:a5:4d:79:
         13:5e:b5:15:c3:d3:4d:f4:1b:23:c1:84:1a:83:b2:eb:e2:72:
         a1:dd:3e:2f:d9:f0:6c:48:b8:91:53:64:35:92:fb:04:23:7b:
         ea:fb:24:90:dc:60:58:3c:4c:42:05:67:09:43:d1:cf:75:cf:
         f7:84:78:f4:11:a5:0e:fe:34:c8:30:b2:c4:99:e9:93:cc:e9:
         36:89:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:58 2026 by rpki-client