This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/L5RtN4MYgylQB2sxCXbY7rkj9cw.roa
File:                     L5RtN4MYgylQB2sxCXbY7rkj9cw.roa (raw, json)
Hash identifier:          qjznCSz3UWXsKIxhvu2fQzujS0se59sICJHUHPBxLVY=
Subject key identifier:   2F:94:6D:37:83:18:83:29:50:07:6B:31:09:76:D8:EE:B9:23:F5:CC
Certificate issuer:       /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial:       019B7B35ADA9BA3A523E427741C50FE8268B
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/L5RtN4MYgylQB2sxCXbY7rkj9cw.roa
Signing time:             Thu 01 Jan 2026 20:17:53 +0000
ROA not before:           Thu 01 Jan 2026 20:17:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198032
IP address blocks:        91.240.2.0/24 maxlen: 24
                          185.198.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:ad:a9:ba:3a:52:3e:42:77:41:c5:0f:e8:26:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
        Validity
            Not Before: Jan  1 20:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2f946d378318832950076b310976d8eeb923f5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:28:15:6a:0b:fd:4f:56:67:33:c2:bc:3c:ee:
                    18:95:81:44:be:d4:7a:ba:41:f5:8f:75:a3:47:a4:
                    26:b2:15:06:b8:c7:75:eb:52:fc:ba:c4:42:c8:df:
                    18:61:80:a9:72:4d:9d:69:24:91:02:ad:be:4b:38:
                    d9:8a:99:98:d5:f1:59:3f:52:1a:2d:a8:de:e3:ed:
                    56:b7:e2:53:5d:80:6c:47:e1:05:52:47:87:6d:16:
                    ae:1f:c6:9d:90:91:c3:93:c7:04:b7:4f:6b:64:bc:
                    05:c4:94:2d:be:eb:8f:17:85:cf:cc:56:87:49:32:
                    f1:1c:c0:d6:0a:ed:89:78:3a:f9:d5:74:30:55:68:
                    9e:1b:89:b4:37:e0:2a:fb:0f:bd:a6:cd:c7:bb:47:
                    d8:e4:ca:7c:c4:91:fd:7f:d9:ba:75:9d:45:6e:0a:
                    83:80:ad:8d:60:ff:db:11:49:a4:d1:d6:9f:b6:67:
                    25:8f:b8:69:81:1b:5c:d5:f1:59:88:e1:b8:b8:68:
                    58:db:01:41:21:c7:01:7c:02:12:e2:cf:3c:60:b5:
                    68:8b:b5:d4:71:c0:c5:f1:6a:5d:63:89:28:ee:7d:
                    1b:41:db:31:b5:cc:7f:73:bd:50:87:de:2f:e7:48:
                    b7:f3:4e:11:91:6c:56:7e:43:2b:4e:64:14:41:ce:
                    65:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:94:6D:37:83:18:83:29:50:07:6B:31:09:76:D8:EE:B9:23:F5:CC
            X509v3 Authority Key Identifier:
                keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/L5RtN4MYgylQB2sxCXbY7rkj9cw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.2.0/24
                  185.198.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:fe:95:93:1f:a8:48:ca:28:0e:8a:26:43:5d:58:1d:0c:42:
         64:9e:c7:06:f2:0d:fb:4e:51:10:b8:f5:31:6f:a0:0f:82:85:
         c5:a7:f9:57:5a:4c:e8:14:72:c9:3c:0d:e4:16:61:1a:0a:7e:
         14:e0:e8:80:a5:bf:0c:07:aa:22:12:c6:16:96:e5:82:96:c4:
         d6:cc:97:24:b9:ef:51:ba:c0:c3:0a:16:fe:86:af:65:ee:c5:
         02:19:f0:1d:a6:a5:b1:6e:ad:27:fb:f0:14:8b:1a:be:fc:a7:
         00:ab:e0:95:fa:3e:4a:6a:0c:38:9b:30:2e:6b:c4:4a:13:11:
         05:3b:9d:26:1d:63:4b:3a:0e:e6:fe:2e:cd:7d:5e:6f:25:42:
         e1:6a:e4:28:aa:b6:e2:34:cf:2d:70:4d:45:5c:5e:fb:0e:aa:
         c0:d5:e0:d3:78:74:81:57:5b:24:c1:57:1b:f9:04:c4:8a:91:
         18:23:d4:90:6d:9f:27:2f:7c:4d:cc:ca:72:45:2a:c1:bb:49:
         6a:26:e1:0c:11:13:dc:1a:97:94:6d:77:90:38:c0:ac:90:2b:
         61:25:ea:8e:a1:d5:d9:20:cf:19:27:17:62:17:b4:85:0b:74:
         82:02:5e:9d:dd:b2:51:57:2c:93:25:40:84:25:8a:27:0a:73:
         2c:19:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:20:22 2026 by rpki-client