This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1es75LXX8EZ01C80XE67R3PQMtU.roa
File:                     1es75LXX8EZ01C80XE67R3PQMtU.roa (raw, json)
Hash identifier:          UJ4bcXqfnb31k16ESQyvCulDeQy/+beKenH/t1j9EJM=
Subject key identifier:   D5:EB:3B:E4:B5:D7:F0:46:74:D4:2F:34:5C:4E:BB:47:73:D0:32:D5
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       019B7FF25A59DE5050983EEF9C0BF733DEF6
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1es75LXX8EZ01C80XE67R3PQMtU.roa
Signing time:             Fri 02 Jan 2026 18:22:27 +0000
ROA not before:           Fri 02 Jan 2026 18:22:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     680
IP address blocks:        141.63.0.0/16 maxlen: 16
                          2a02:11f8:60::/48 maxlen: 48
                          2a02:11f8:61::/48 maxlen: 48
                          2a02:11f8:62::/48 maxlen: 48
                          2a02:11f8:63::/48 maxlen: 48
                          2a02:11f8:64::/48 maxlen: 48
                          2a02:11f8:65::/48 maxlen: 48
                          2a02:11f8:81::/48 maxlen: 48
                          2a02:11f8:100::/48 maxlen: 48
                          2a02:11f8:101::/48 maxlen: 48
                          2a02:11f8:102::/48 maxlen: 48
                          2a02:11f8:190::/48 maxlen: 48
                          2a02:11f8:191::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:5a:59:de:50:50:98:3e:ef:9c:0b:f7:33:de:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Jan  2 18:22:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d5eb3be4b5d7f04674d42f345c4ebb4773d032d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:db:1a:2c:bc:60:ff:f2:b5:c4:da:fe:a0:
                    9b:85:e1:0b:f2:e2:22:9b:cf:23:63:5a:4f:0a:40:
                    14:76:13:f1:01:16:2a:cf:38:bb:7e:62:06:24:2d:
                    11:c2:3e:2f:8c:b0:67:08:5c:fa:5a:1f:ed:66:a7:
                    16:2d:12:3e:6f:b8:9a:6c:17:1a:3a:9e:b5:ff:a6:
                    0e:83:f5:c2:29:ab:fc:99:1c:dc:2d:3b:84:e7:b2:
                    1e:3c:0c:cd:f9:b3:9d:f2:c9:87:b2:cc:eb:62:b8:
                    9c:d1:06:62:d3:6a:2f:98:19:f1:bd:6e:65:22:d2:
                    39:96:07:2c:8c:88:22:e9:bd:79:19:77:17:20:9e:
                    f0:4f:a3:81:0e:5b:df:92:7a:fc:24:a8:79:79:5f:
                    c5:2e:ac:3e:c6:6d:3c:a2:52:4e:ab:97:8e:16:1e:
                    b2:93:b4:3a:05:fb:bb:11:7f:b6:3e:71:9d:20:bb:
                    96:70:84:e2:37:44:1c:fc:c2:36:71:ff:f4:0d:33:
                    0f:f0:d0:7d:22:1d:3a:96:90:0b:f7:29:ca:d8:dc:
                    41:24:87:8f:13:ed:35:70:b7:53:e2:3d:01:0a:0b:
                    96:54:da:ac:df:3c:42:3e:4d:56:78:97:05:bf:31:
                    c5:17:f9:74:70:62:5f:e9:a8:9c:2a:a0:9f:d2:09:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EB:3B:E4:B5:D7:F0:46:74:D4:2F:34:5C:4E:BB:47:73:D0:32:D5
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1es75LXX8EZ01C80XE67R3PQMtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.63.0.0/16
                IPv6:
                  2a02:11f8:60::-2a02:11f8:65:ffff:ffff:ffff:ffff:ffff
                  2a02:11f8:81::/48
                  2a02:11f8:100::-2a02:11f8:102:ffff:ffff:ffff:ffff:ffff
                  2a02:11f8:190::/47

    Signature Algorithm: sha256WithRSAEncryption
         a3:94:84:cb:54:37:10:e3:f4:27:15:f8:76:58:8f:1a:77:2d:
         47:7b:53:cc:31:89:9b:45:1a:62:2e:a6:cf:03:6e:72:77:1e:
         e0:be:96:81:54:5c:b1:fa:67:4c:7d:ef:ac:b2:ad:dc:dc:91:
         1f:1d:d0:52:36:db:18:1e:26:15:49:4e:e4:20:57:45:4c:f0:
         9c:b9:0a:a2:dd:e7:27:08:b3:f9:9c:10:3b:7f:a7:06:9a:f6:
         ba:a4:63:34:1a:f4:d1:f2:be:5b:b2:e1:9c:96:50:ce:74:cc:
         ab:b6:e2:cd:53:5c:98:dd:72:67:b3:41:e3:54:6a:89:4a:bc:
         e0:e2:10:53:38:26:42:cf:df:fd:66:55:d4:88:01:4c:6c:09:
         fd:0f:8c:1b:71:ad:f4:82:6b:d7:2a:86:ac:8a:4e:c9:ac:99:
         c6:0f:68:eb:97:64:51:5c:14:05:c4:75:c4:5c:9a:da:fd:fa:
         1c:3c:9a:2c:d1:c9:72:e4:4a:57:88:d8:42:c8:d7:ff:44:0d:
         f3:de:bb:05:52:a5:5d:8c:bc:e4:af:1d:62:d0:cb:57:3d:1e:
         6d:09:06:96:88:7b:65:b0:83:34:62:01:5b:2c:d2:51:c9:0f:
         d3:66:91:c1:15:c9:b5:ee:9c:3c:3e:24:6b:37:c3:95:96:3e:
         97:7a:a2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:06:13 2026 by rpki-client