This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/R5vWM9LN_UOaMHLLCaxraoVy2gs.roa
File:                     R5vWM9LN_UOaMHLLCaxraoVy2gs.roa (raw, json)
Hash identifier:          sn9tITH/ciLhA1DVGr4IA7RXxpSK4JPBiwPjdPWf1Nk=
Subject key identifier:   47:9B:D6:33:D2:CD:FD:43:9A:30:72:CB:09:AC:6B:6A:85:72:DA:0B
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       019B7AC9563ED95CFC2B46F4AC495464B636
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/R5vWM9LN_UOaMHLLCaxraoVy2gs.roa
Signing time:             Thu 01 Jan 2026 18:19:33 +0000
ROA not before:           Thu 01 Jan 2026 18:19:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59651
IP address blocks:        45.80.104.0/23 maxlen: 23
                          193.202.8.0/23 maxlen: 23
                          193.202.82.0/23 maxlen: 23
                          212.119.42.0/23 maxlen: 23
                          212.119.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:56:3e:d9:5c:fc:2b:46:f4:ac:49:54:64:b6:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Jan  1 18:19:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=479bd633d2cdfd439a3072cb09ac6b6a8572da0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:9e:40:93:df:ac:bc:77:87:50:d7:5c:6f:
                    41:db:fb:e2:35:4b:22:23:3f:48:71:73:5d:3c:05:
                    10:3a:a3:0b:a9:75:0a:1a:7f:47:40:16:f8:7b:76:
                    73:5e:41:a7:55:db:18:8d:c8:2c:ac:59:8f:60:96:
                    ac:90:2a:02:ad:f9:b8:a5:92:f0:b8:7f:c4:14:ff:
                    73:09:e5:48:be:7e:3c:a9:18:3d:72:28:45:6b:14:
                    c8:c4:57:a4:9d:70:67:7a:f9:bc:cb:d8:ae:6a:6a:
                    aa:a9:69:28:92:df:78:1c:25:75:79:16:66:6f:69:
                    ee:1d:8c:8a:3b:b6:2c:de:29:4b:4f:04:00:ac:15:
                    4a:e5:d1:cc:0d:d8:15:4b:3c:1c:33:d4:35:09:f5:
                    67:7c:f5:43:86:f5:36:62:e3:4b:d4:43:80:7c:44:
                    84:49:c1:c6:15:81:72:bb:57:a8:d4:c4:8f:e1:56:
                    5a:e3:4c:df:e3:6a:0f:70:e9:cc:ea:5b:c3:d7:3a:
                    df:6b:89:c8:3b:8a:1f:8f:09:50:6a:f2:86:30:a3:
                    9e:22:2a:39:3d:e9:a3:c2:eb:06:2b:e6:91:c6:43:
                    d2:bc:59:32:de:5f:97:37:cb:1c:d4:6d:3e:75:d1:
                    62:6a:e7:43:80:ed:1d:d4:4d:3a:68:15:8e:66:c6:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9B:D6:33:D2:CD:FD:43:9A:30:72:CB:09:AC:6B:6A:85:72:DA:0B
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/R5vWM9LN_UOaMHLLCaxraoVy2gs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.104.0/23
                  193.202.8.0/23
                  193.202.82.0/23
                  212.119.42.0-212.119.45.255

    Signature Algorithm: sha256WithRSAEncryption
         74:44:71:f6:44:d8:fd:b7:b4:c5:bc:cb:57:67:e2:c7:16:61:
         9b:ed:8e:09:d4:cc:cf:8c:c4:c2:6f:61:28:e3:ea:c0:c2:05:
         75:82:b6:ac:fe:67:88:3b:60:3e:f5:82:97:ac:ab:55:3e:c0:
         41:a3:d3:12:d5:07:9b:09:be:24:da:52:d7:9a:76:be:8a:08:
         23:44:9b:0a:7d:27:51:b9:5f:9e:8e:e4:4d:18:f4:b2:75:48:
         94:19:36:4e:ab:68:02:37:63:f8:58:85:70:1f:16:30:4b:e1:
         91:43:1a:07:19:15:52:49:bd:d6:fb:52:7d:62:e1:04:b2:1d:
         02:8f:c7:9c:74:af:15:84:a8:ed:56:f1:4a:7d:fe:9d:fc:f7:
         d4:a2:2c:ab:fd:5e:1b:61:d1:1b:57:10:ed:2f:b2:fd:2f:ec:
         b6:30:5b:89:73:e5:8d:f0:a2:c1:45:0e:6c:c5:25:ec:94:23:
         fc:d8:e6:43:83:ef:ea:31:9e:53:59:ec:0d:50:c9:1a:78:84:
         82:06:23:2c:d3:bd:21:0a:63:cc:34:32:a9:91:6d:17:a0:f5:
         e4:58:22:f9:4d:2f:79:e9:8e:b7:33:64:dc:a3:93:52:f9:dd:
         48:0d:f6:4f:d5:e9:4f:aa:b5:c3:83:a3:b8:77:8b:f4:14:25:
         84:75:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 00:42:30 2026 by rpki-client