This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5gTi9XdSKCT0fr_NfM3Dy4vYLcg.roa
File:                     5gTi9XdSKCT0fr_NfM3Dy4vYLcg.roa (raw, json)
Hash identifier:          ZWbYQ0WZxt/mjlZ0RUGpKhmkyx3XrvrLX+jwfQweuvI=
Subject key identifier:   E6:04:E2:F5:77:52:28:24:F4:7E:BF:CD:7C:CD:C3:CB:8B:D8:2D:C8
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C134B6BDCDA21A95362CAEE8C286CCD
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5gTi9XdSKCT0fr_NfM3Dy4vYLcg.roa
Signing time:             Fri 02 Jan 2026 00:19:57 +0000
ROA not before:           Fri 02 Jan 2026 00:19:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     273888
IP address blocks:        201.77.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 18:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:4b:6b:dc:da:21:a9:53:62:ca:ee:8c:28:6c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e604e2f577522824f47ebfcd7ccdc3cb8bd82dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:f6:7a:53:64:19:65:4d:09:31:5e:80:26:
                    73:18:39:d8:0c:4e:87:ab:0f:2e:3d:0d:92:48:f3:
                    b8:f3:9e:16:37:e0:12:f2:8a:a0:e3:a0:f8:32:2d:
                    57:0e:49:74:c8:be:4e:ca:73:9f:ea:f0:43:25:d5:
                    43:bc:d8:84:40:42:25:e4:92:18:4e:b0:73:80:04:
                    8a:6a:0e:75:c8:95:92:aa:57:e9:0d:84:f7:3c:f0:
                    b2:cc:a5:73:96:9e:3c:8b:6f:4b:95:f8:d4:01:5b:
                    de:bb:5b:8e:80:09:9c:62:6f:9f:af:f8:0f:1d:17:
                    c0:a9:cd:aa:8d:70:96:4c:8c:78:3d:75:2e:e3:6e:
                    da:56:18:d2:d1:80:c1:cc:4e:85:57:6d:d5:fe:bd:
                    5f:73:ea:d1:7f:02:18:b2:c3:4e:94:af:b0:99:5d:
                    9c:3d:7e:4d:88:9e:e6:89:14:ea:91:a0:f0:a1:10:
                    41:3e:ee:8f:30:c9:1c:b2:79:0d:1b:73:a7:52:ab:
                    f7:c0:9d:35:b2:61:4e:9e:55:46:87:e7:6f:39:0b:
                    61:29:e6:d2:b9:56:3b:00:83:88:b9:4f:a7:45:07:
                    61:64:9c:e5:14:1c:9e:40:0f:b9:72:74:bc:9c:81:
                    d4:4b:de:3c:73:72:94:a5:28:f2:3f:e8:a9:ba:d5:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:04:E2:F5:77:52:28:24:F4:7E:BF:CD:7C:CD:C3:CB:8B:D8:2D:C8
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/5gTi9XdSKCT0fr_NfM3Dy4vYLcg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:3a:45:19:4c:13:16:a2:94:af:8e:ec:38:b5:60:33:e9:83:
         95:24:a8:c7:69:85:01:82:f9:7f:24:5a:d2:0e:6b:02:56:a4:
         d4:5e:5c:f1:56:70:a3:5e:05:dc:a5:66:fc:91:bd:08:91:48:
         96:96:77:1a:88:92:83:7d:93:80:96:86:7d:37:15:68:76:cf:
         42:58:82:ca:3d:10:24:09:fc:fc:d1:07:e8:8f:3c:2a:12:2e:
         33:6a:11:38:f5:79:0d:f9:58:b2:ce:32:22:60:56:16:58:e8:
         15:ae:41:20:3d:80:ca:6a:ef:cc:3c:9d:bd:e0:70:5c:e9:95:
         b8:50:da:e4:9b:6d:8c:35:7c:6a:2a:71:6f:7d:09:85:29:bc:
         ae:29:92:5b:ec:d8:22:85:73:9f:de:27:14:4d:ed:a4:10:78:
         7b:38:16:ef:23:07:27:92:40:33:a3:45:ad:56:ba:27:d8:c8:
         fc:ff:f1:69:c5:74:57:32:86:7f:b4:61:8e:6b:b7:50:35:56:
         9e:78:2f:64:15:55:6c:4f:4e:2c:6e:44:9a:5c:bd:5f:d6:b2:
         8f:fe:69:55:52:c3:61:d3:fd:61:6e:60:52:e7:89:52:d2:16:
         ba:5e:21:ad:f5:1a:d7:af:9b:f8:b4:f2:0e:7b:7a:ee:68:7c:
         a2:af:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:37:06 2026 by rpki-client