This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa
File:                     5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa (raw, json)
Hash identifier:          esrOMmA+0Y4Owzn/Tp8QtyowPBDFA761U7pC1R7xerw=
Subject key identifier:   E5:C8:AE:40:C6:95:27:EE:52:A0:58:2C:6C:AA:50:0E:50:9E:5E:94
Certificate issuer:       /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial:       019B77C6C97CADB358E5E2FA4C94F9EA118B
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa
Signing time:             Thu 01 Jan 2026 04:17:54 +0000
ROA not before:           Thu 01 Jan 2026 04:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200276
IP address blocks:        81.28.248.0/24 maxlen: 24
                          81.28.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:c9:7c:ad:b3:58:e5:e2:fa:4c:94:f9:ea:11:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
        Validity
            Not Before: Jan  1 04:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e5c8ae40c69527ee52a0582c6caa500e509e5e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:9c:3b:2f:e5:67:54:34:42:99:3d:ab:35:
                    6e:4b:e5:81:4c:5f:28:fc:34:55:c2:a1:75:33:c0:
                    ca:ba:4c:26:8e:73:7b:78:64:9f:ad:b5:d1:a4:b9:
                    09:c0:16:21:07:37:41:8f:3a:90:30:cf:f2:7a:f4:
                    18:d3:bf:27:cc:da:ab:a4:1e:23:8e:9b:95:c3:26:
                    cf:b0:a9:aa:de:af:d3:70:5f:bd:a1:2d:f9:d7:19:
                    f5:7e:0b:4c:96:e5:fd:51:d6:ef:ce:96:8a:da:ba:
                    b7:e8:a8:67:cb:7f:e3:45:6e:97:cb:43:19:9c:7d:
                    91:11:52:e7:3a:00:b4:84:b1:09:0e:7b:66:98:c3:
                    a6:e3:d5:05:62:41:ec:35:f9:18:6b:d9:a9:ba:5b:
                    a9:2d:bc:9c:be:08:42:e1:a7:04:c2:89:a7:22:7e:
                    cf:76:54:27:d1:5f:69:c5:a3:30:c5:50:78:bd:c7:
                    ac:4b:f1:22:1d:14:52:eb:cc:58:db:5d:e0:f8:bc:
                    51:a5:18:d8:10:cb:60:0f:5c:39:09:e8:87:50:23:
                    8b:14:24:40:a2:e3:94:78:be:f5:9a:87:8d:4b:bc:
                    b9:09:48:98:24:a3:87:bf:ca:f0:84:75:64:51:58:
                    f3:d7:61:b7:b6:ca:e2:bf:c9:79:1a:f5:d0:8c:97:
                    a7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C8:AE:40:C6:95:27:EE:52:A0:58:2C:6C:AA:50:0E:50:9E:5E:94
            X509v3 Authority Key Identifier:
                keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/5ciuQMaVJ-5SoFgsbKpQDlCeXpQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.28.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:96:5f:7f:fe:63:25:d3:cd:5f:65:48:a4:2e:c4:bb:5f:f3:
         8d:33:d6:1e:c8:3e:eb:cb:bb:19:d2:3f:6a:bb:89:1b:35:2c:
         a9:c1:35:23:01:06:97:05:97:5f:14:7b:81:bb:79:42:0e:45:
         7e:07:85:cc:9d:17:c1:54:a4:16:47:86:48:32:c1:f8:0e:25:
         40:44:4a:fa:cc:fd:09:19:fd:ba:fd:a5:0f:bb:09:a5:1c:cf:
         f3:0e:ad:5b:70:34:31:a1:5d:77:81:f2:38:f8:0e:48:20:cb:
         95:9f:0d:71:53:a5:fb:17:e7:55:ec:5e:48:64:21:98:b4:7f:
         0a:65:12:63:fe:b4:5f:23:8e:a0:8a:b9:d0:10:2e:7e:71:78:
         35:1f:1c:5d:da:f5:34:9c:31:78:3c:b5:6b:e7:37:29:54:d3:
         53:f5:70:c5:0f:b5:cd:3e:41:06:70:66:07:6c:77:94:88:2f:
         29:89:c0:cd:86:88:0a:48:e0:97:1e:d8:91:db:cc:1e:0e:b7:
         ea:6e:e6:2a:43:1d:5c:6c:c1:05:20:74:f4:81:2e:7c:41:e0:
         71:3a:a1:c3:ae:48:f6:77:03:13:15:7f:0e:e8:06:eb:dd:86:
         da:6d:8f:c4:d4:d1:90:39:a9:f8:98:a3:a7:f8:a4:14:c5:b1:
         20:5f:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:10 2026 by rpki-client