This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/5JKLYCytnUKhdyTa14LHQIEKdFE.roa
File:                     5JKLYCytnUKhdyTa14LHQIEKdFE.roa (raw, json)
Hash identifier:          eArX0/lwmj4LvmBl8JgKR0ALNuxr1zRBSWvGWN5uFfI=
Subject key identifier:   E4:92:8B:60:2C:AD:9D:42:A1:77:24:DA:D7:82:C7:40:81:0A:74:51
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       019BE63F0EB5B0782A16AD3C3DE5469C3959
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/5JKLYCytnUKhdyTa14LHQIEKdFE.roa
Signing time:             Thu 22 Jan 2026 15:07:30 +0000
ROA not before:           Thu 22 Jan 2026 15:07:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215305
IP address blocks:        80.66.69.0/24 maxlen: 24
                          87.251.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e6:3f:0e:b5:b0:78:2a:16:ad:3c:3d:e5:46:9c:39:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Jan 22 15:07:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e4928b602cad9d42a17724dad782c740810a7451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:f5:01:13:f7:32:a5:2d:90:93:d4:ce:81:
                    db:26:96:39:9e:84:9c:59:ad:89:73:7d:f3:d0:d3:
                    47:a1:3e:67:eb:92:34:75:98:53:88:16:7c:00:b6:
                    7a:2b:4c:02:0c:ad:4d:76:16:a3:5d:57:64:35:5a:
                    6d:8c:47:35:1f:83:10:b8:02:93:96:2f:a8:6e:94:
                    99:bb:07:eb:9b:07:aa:b5:ba:57:ed:a5:f9:02:05:
                    26:39:a7:07:e7:9d:65:06:26:05:31:d6:77:22:71:
                    b5:fa:96:57:4c:af:32:45:f5:9d:48:e9:2d:d4:20:
                    99:22:03:04:0d:35:4e:f6:77:29:8f:05:6f:64:5b:
                    e7:92:12:94:0f:63:60:d8:26:b8:eb:58:11:1d:3f:
                    3c:68:dc:3b:14:96:25:bf:5d:37:07:51:1d:4d:bc:
                    8a:20:5e:c6:f4:94:b0:2b:15:8e:52:bd:db:2b:ca:
                    b3:b1:fc:39:86:a3:9c:90:cb:31:f3:09:b7:d6:7e:
                    47:e9:c5:2c:d2:93:ad:58:21:04:d1:3b:87:73:22:
                    73:fd:ad:c0:b2:7e:9a:dd:b5:5e:77:45:04:2c:1c:
                    53:9c:54:1a:4f:22:7f:35:87:95:13:c9:8c:47:6b:
                    99:93:32:71:a1:f9:18:ef:eb:37:5f:8d:6f:5a:b9:
                    3d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:92:8B:60:2C:AD:9D:42:A1:77:24:DA:D7:82:C7:40:81:0A:74:51
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/5JKLYCytnUKhdyTa14LHQIEKdFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.69.0/24
                  87.251.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:eb:53:dc:06:75:f9:17:f5:9f:ae:7c:ce:01:8e:7f:00:
         21:9e:77:d6:d1:a2:78:00:91:1f:37:b8:96:da:92:87:05:c4:
         ad:ef:ce:17:8f:48:37:d9:1e:6e:25:45:e8:35:58:3d:cd:c7:
         b8:f9:76:ec:c7:37:bb:f2:5c:68:42:18:cc:a9:60:7e:ee:cb:
         e2:b2:ec:e7:77:de:2e:48:7f:00:66:9d:0e:a0:53:38:2b:43:
         1c:04:7c:04:ea:ed:00:41:70:22:da:f4:81:1f:ef:14:2c:ec:
         e9:a1:ec:c1:ef:08:16:64:c1:0f:a8:ce:eb:9f:a6:69:cf:35:
         04:96:07:82:e0:e8:ba:af:82:08:ac:41:e3:09:c1:11:67:29:
         49:e6:6a:9f:25:85:83:0e:f3:99:88:d5:48:16:8c:96:f7:af:
         13:a1:37:a1:67:ff:4d:57:fe:78:ed:fb:a4:f3:ee:78:d5:4e:
         94:7c:b1:04:69:55:c0:0d:11:5d:e5:0e:33:df:d5:d0:ad:bd:
         de:ae:b4:66:35:c5:35:c2:54:07:31:4e:7e:75:25:67:b7:52:
         05:6d:5a:d0:51:a4:0c:07:04:4a:06:57:61:9e:6b:0d:49:48:
         e9:a3:b1:60:af:c5:50:6d:fe:71:63:07:66:bc:4e:cd:29:84:
         88:fb:74:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:28 2026 by rpki-client