This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/5rrj-m_hEB0TpNnz9CK4K7DwWl8.roa
File:                     5rrj-m_hEB0TpNnz9CK4K7DwWl8.roa (raw, json)
Hash identifier:          9owh74vfAaCJ/1OVELmifFfpJ8uxpYLTHNGPMitNfLE=
Subject key identifier:   E6:BA:E3:FA:6F:E1:10:1D:13:A4:D9:F3:F4:22:B8:2B:B0:F0:5A:5F
Certificate issuer:       /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial:       019B7C1325AFC0D3646C7FAF86F3BC157525
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/5rrj-m_hEB0TpNnz9CK4K7DwWl8.roa
Signing time:             Fri 02 Jan 2026 00:19:48 +0000
ROA not before:           Fri 02 Jan 2026 00:19:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41098
IP address blocks:        178.212.8.0/22 maxlen: 22
                          195.114.2.0/23 maxlen: 23
                          195.114.2.0/24 maxlen: 24
                          195.114.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:25:af:c0:d3:64:6c:7f:af:86:f3:bc:15:75:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
        Validity
            Not Before: Jan  2 00:19:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6bae3fa6fe1101d13a4d9f3f422b82bb0f05a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:d1:74:e8:de:82:04:dd:f4:89:e2:9b:58:
                    e0:1f:63:9e:b6:ef:b6:e7:c5:c7:88:2a:74:ef:c1:
                    ad:c6:13:14:00:46:49:4f:9d:fe:0e:d9:57:fb:8f:
                    c0:6a:76:f1:99:11:7c:dd:7d:7d:f9:3b:65:f3:35:
                    76:4b:2e:94:af:1a:3d:d6:84:c8:be:6d:e3:e3:f2:
                    c1:5b:34:3c:d5:1c:22:53:06:46:ac:2a:e8:98:1c:
                    09:5f:b9:ff:da:ce:55:33:be:51:bd:41:25:52:dd:
                    fd:66:4e:39:63:7f:27:36:35:86:ea:ba:c6:2c:b3:
                    bb:a5:6c:1c:0a:1b:4f:62:13:11:61:e3:ce:1c:97:
                    8d:6d:9d:1a:4c:38:59:87:2e:36:e1:3c:3b:34:cd:
                    19:c2:87:80:6a:bb:83:17:81:a8:a5:aa:0f:73:29:
                    b4:77:16:01:26:94:57:cb:0e:43:53:ce:15:14:e2:
                    0c:fd:0e:ab:54:37:5c:61:2d:7d:4a:d0:9b:db:56:
                    0b:49:ad:a8:c1:b3:e8:7e:fa:3e:3d:a6:0b:48:6f:
                    36:bc:0a:e6:86:17:60:70:a9:a8:73:8f:a8:28:ef:
                    b3:b9:17:02:3f:83:14:82:3c:77:60:af:5b:dd:39:
                    b1:51:0d:a0:a0:67:0c:47:b2:1c:54:01:7b:d5:6f:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BA:E3:FA:6F:E1:10:1D:13:A4:D9:F3:F4:22:B8:2B:B0:F0:5A:5F
            X509v3 Authority Key Identifier:
                keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/5rrj-m_hEB0TpNnz9CK4K7DwWl8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.8.0/22
                  195.114.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:6f:e3:3d:53:2e:12:1e:5c:f8:61:02:69:3c:dd:18:dd:
         54:d5:76:f7:56:cf:7f:0c:b2:ec:35:c6:0d:47:4b:8c:4d:ff:
         5f:aa:92:b8:38:d3:48:5a:87:9c:8f:72:13:78:af:0a:78:a0:
         8a:4f:04:b8:75:71:1e:fd:10:29:41:e0:78:47:c6:62:40:62:
         ad:42:a6:2e:a6:8a:a1:c7:40:e9:03:bc:68:6d:97:b8:c0:9b:
         2d:08:62:00:c4:20:af:ae:23:35:df:94:fe:1a:e8:df:69:f5:
         c2:cd:47:8e:eb:21:d2:42:d0:38:bd:b2:60:84:da:31:a8:e6:
         d6:5e:69:e8:00:6e:bb:bc:8b:ae:92:46:31:a4:3e:f0:2a:2a:
         b4:3e:47:ec:8a:93:84:53:49:01:47:05:f6:ef:e5:6a:b4:6b:
         82:74:86:17:b5:65:4b:bf:6c:9b:73:1f:63:1f:ce:e6:6d:c0:
         ea:bd:39:67:b0:02:5f:4a:42:04:90:ee:c2:4e:4b:0f:d3:44:
         47:ef:fa:6d:46:e7:7e:a5:8e:b0:39:1f:e1:1e:da:6d:88:fd:
         4d:ba:e7:d6:86:4d:71:8a:f3:04:e5:c2:c4:90:c7:3a:93:53:
         2a:ad:c5:4b:77:81:a1:1a:df:a0:7e:ce:89:75:33:e6:21:4a:
         77:9f:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:03 2026 by rpki-client