This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/aPjK_e6JWAnpVJTimjzF8YUqBy8.roa
File:                     aPjK_e6JWAnpVJTimjzF8YUqBy8.roa (raw, json)
Hash identifier:          CxFxcDSyGy+oCI+MZq7LPshirwWX4b3dsefQvQRFoI4=
Subject key identifier:   68:F8:CA:FD:EE:89:58:09:E9:54:94:E2:9A:3C:C5:F1:85:2A:07:2F
Certificate issuer:       /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial:       019B7A5B6C4DC3F553B0F59AFB64B34C14EA
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/aPjK_e6JWAnpVJTimjzF8YUqBy8.roa
Signing time:             Thu 01 Jan 2026 16:19:30 +0000
ROA not before:           Thu 01 Jan 2026 16:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197133
IP address blocks:        5.183.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:6c:4d:c3:f5:53:b0:f5:9a:fb:64:b3:4c:14:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
        Validity
            Not Before: Jan  1 16:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=68f8cafdee895809e95494e29a3cc5f1852a072f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a7:9d:22:cc:54:f3:5c:04:49:b3:1d:d6:52:
                    fe:ec:ff:fd:73:e3:90:13:36:8f:3b:6b:5e:56:0c:
                    e6:13:db:ed:72:d9:c0:66:5b:73:e6:0a:66:90:5a:
                    0d:e9:a1:15:e9:3f:9e:9f:12:c3:5b:8d:2e:bf:da:
                    46:35:64:ef:f0:99:14:53:90:9c:bb:59:1c:91:b2:
                    01:ca:32:b1:a3:ab:55:f3:67:7a:0e:72:14:6e:df:
                    af:ab:7a:68:1a:47:65:e1:62:24:20:f3:9b:e5:1c:
                    0f:87:b9:44:af:55:9f:c3:ed:77:9a:50:62:d3:59:
                    b8:7d:e9:dd:e1:01:98:2c:78:6b:21:6d:c2:1d:85:
                    43:03:3e:42:c5:f6:91:63:88:ca:e4:22:9e:55:b9:
                    93:7e:d0:c5:68:cb:8e:cb:5e:7e:70:2b:ea:ed:b5:
                    dd:49:3d:c9:fb:02:40:58:ca:9a:85:28:01:2b:dc:
                    91:07:3b:ca:64:7a:ef:48:51:c9:57:15:7d:57:40:
                    07:77:c4:76:aa:92:58:4f:79:bf:82:00:f6:9d:b7:
                    1b:c4:40:2b:a0:8f:f1:bb:67:30:82:b0:04:c5:fe:
                    77:0d:6b:e3:0e:59:e2:dd:99:11:fe:55:be:50:d0:
                    6f:14:b3:48:12:a1:81:61:43:e7:22:83:8c:e9:c6:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F8:CA:FD:EE:89:58:09:E9:54:94:E2:9A:3C:C5:F1:85:2A:07:2F
            X509v3 Authority Key Identifier:
                keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/aPjK_e6JWAnpVJTimjzF8YUqBy8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:94:22:d7:01:67:36:89:7b:66:36:fd:76:44:c7:3c:5b:72:
         59:2b:2b:53:6a:d1:89:a8:20:47:1f:71:35:31:8a:7c:ee:e4:
         26:fa:fa:cb:83:f0:18:4a:95:21:e5:f5:9e:12:7d:7c:0c:c3:
         52:0e:e3:43:89:f2:00:46:2d:bb:81:cc:1f:d0:47:70:c6:69:
         36:5d:12:65:ce:b2:fd:c6:ac:48:55:4a:5e:34:56:53:d2:7c:
         8d:72:5b:2b:66:0f:81:2e:79:d6:16:79:fa:e5:20:5d:68:41:
         f5:ab:a8:cc:65:99:5c:9a:08:21:51:a5:0b:2a:54:c8:aa:b8:
         aa:9b:49:c9:75:dc:71:3c:43:ec:fd:6c:7e:14:2e:7f:58:4d:
         84:d1:c9:77:78:16:45:a4:68:54:37:92:29:08:af:17:a9:59:
         b0:f5:f7:c6:72:46:af:5c:f4:f8:2d:49:7e:62:f3:86:6b:da:
         18:48:47:19:e9:de:a5:7d:fa:2b:7b:3d:64:2d:6b:47:ae:b4:
         85:12:10:a2:00:ad:87:39:34:01:7b:63:c8:0d:22:b8:9d:b6:
         f5:79:d7:72:78:a7:62:14:44:c6:f2:b0:44:57:a8:48:35:d9:
         8e:7e:e0:c4:63:d6:30:e2:f5:e4:32:d0:c5:5b:68:f4:24:bf:
         3c:ce:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:49 2026 by rpki-client