This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa
File:                     R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa (raw, json)
Hash identifier:          4BhY6rNGdaN8G7ZNz8xS2aBWkhA6dXSAvcpryese42E=
Subject key identifier:   47:93:29:BF:E4:E9:2A:30:C1:14:E9:EE:D9:5B:E9:4F:8F:2A:7E:46
Certificate issuer:       /CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
Certificate serial:       019B7834B36639D6932E5DB84D00777879CD
Authority key identifier: D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa
Signing time:             Thu 01 Jan 2026 06:17:58 +0000
ROA not before:           Thu 01 Jan 2026 06:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51873
IP address blocks:        185.202.80.0/22 maxlen: 22
                          2a0c:cd00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:b3:66:39:d6:93:2e:5d:b8:4d:00:77:78:79:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8eb739c6d3dc71a6206c8f3712426ff532a0afe
        Validity
            Not Before: Jan  1 06:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=479329bfe4e92a30c114e9eed95be94f8f2a7e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:0a:87:54:2e:07:7d:3d:50:ea:be:6f:63:
                    0e:1b:04:c0:12:14:f2:a5:b7:8a:09:9c:eb:74:1d:
                    d0:36:ff:63:62:fa:ba:86:b9:7c:9b:7a:ca:26:e5:
                    d6:fd:bc:cb:25:10:60:f6:61:de:9a:82:8f:15:66:
                    95:41:b9:9a:63:bf:8c:cf:29:1b:c1:e9:ca:2f:de:
                    84:fe:ff:e5:13:d1:d5:a0:b2:9b:f5:49:06:ed:85:
                    4a:dd:3b:38:86:f3:30:a8:80:cf:7b:f0:9f:9a:6c:
                    7d:30:fa:44:f6:db:7f:e1:9e:02:24:49:f3:dd:87:
                    fd:12:41:22:4f:58:52:93:f4:60:5d:65:35:09:ba:
                    64:26:de:f6:b7:5d:47:ea:ad:d2:79:89:e2:ab:c0:
                    cc:eb:f7:fb:94:f7:40:df:c0:8e:bc:dd:c5:a0:91:
                    5f:dc:c6:74:0a:16:bb:19:66:91:54:0a:de:fb:3c:
                    75:e1:46:f0:71:42:0a:98:58:2a:b3:c1:c1:29:02:
                    91:ad:d7:a5:59:32:c2:71:3e:78:32:0b:fe:33:ed:
                    72:f6:53:01:c8:74:5c:9a:b4:96:dd:c9:e3:69:4a:
                    c1:05:62:d3:48:13:82:97:9c:2b:c2:f3:5d:93:33:
                    26:b8:ad:e6:06:66:d2:61:53:8f:1c:5e:f7:8a:6d:
                    75:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:93:29:BF:E4:E9:2A:30:C1:14:E9:EE:D9:5B:E9:4F:8F:2A:7E:46
            X509v3 Authority Key Identifier:
                keyid:D8:EB:73:9C:6D:3D:C7:1A:62:06:C8:F3:71:24:26:FF:53:2A:0A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2OtznG09xxpiBsjzcSQm_1MqCv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/R5Mpv-TpKjDBFOnu2VvpT48qfkY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0181f8-4fa4-4697-a272-333b6d4ea45b/1/2OtznG09xxpiBsjzcSQm_1MqCv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.80.0/22
                IPv6:
                  2a0c:cd00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:81:77:f2:85:6d:48:29:5b:06:95:34:6c:33:19:08:a3:58:
         52:32:ea:26:f9:b0:bf:be:37:97:74:c8:79:f4:04:3a:10:6e:
         55:13:91:26:2a:ae:77:03:da:99:ad:2f:46:d9:9f:c3:5b:08:
         f0:e7:b3:18:09:a0:00:fe:60:09:e9:cb:25:05:e9:e9:c9:70:
         f6:5c:b8:ba:4b:bc:77:de:cb:92:a7:6c:21:b8:85:bf:f7:0d:
         b4:2e:11:70:c5:50:5d:53:14:b4:63:9e:b7:02:9e:87:75:73:
         ee:35:ad:d3:a5:5e:9d:b3:2a:c3:84:19:57:a6:3a:9e:39:f9:
         d1:70:58:c3:8e:b7:71:00:3c:b4:28:14:1f:1d:32:eb:86:8e:
         2f:95:13:0e:7e:6c:73:d2:a0:5d:4c:f5:d7:f5:97:12:0c:58:
         8d:26:9f:d3:cf:96:c5:35:8d:3d:06:70:c5:ca:f9:0e:4a:cb:
         78:c7:7e:8a:b7:cf:ac:02:62:44:28:41:ff:bc:c5:13:ba:c3:
         8a:57:ba:50:12:b7:af:c5:a5:4f:49:27:26:96:5f:2b:b9:ea:
         6d:c8:8d:f0:30:59:76:a2:00:9b:98:87:64:86:28:40:9f:e7:
         04:66:aa:31:01:30:4d:37:38:bb:51:d5:3b:ea:9b:1c:4f:02:
         d1:58:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:57:12 2026 by rpki-client