This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/amJeDHvWP-ETK0yoiLHExz0KUe8.roa
File:                     amJeDHvWP-ETK0yoiLHExz0KUe8.roa (raw, json)
Hash identifier:          IcQUFfwFSyhIeatkmu2G3INzW+CZRcCSClFDDAMk4m4=
Subject key identifier:   6A:62:5E:0C:7B:D6:3F:E1:13:2B:4C:A8:88:B1:C4:C7:3D:0A:51:EF
Certificate issuer:       /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial:       019B7C12DAF5E9BF3C5B39B811F8308050E1
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/amJeDHvWP-ETK0yoiLHExz0KUe8.roa
Signing time:             Fri 02 Jan 2026 00:19:29 +0000
ROA not before:           Fri 02 Jan 2026 00:19:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57325
IP address blocks:        185.239.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:da:f5:e9:bf:3c:5b:39:b8:11:f8:30:80:50:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
        Validity
            Not Before: Jan  2 00:19:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a625e0c7bd63fe1132b4ca888b1c4c73d0a51ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:01:79:ad:61:b2:6b:92:e2:9e:f5:e3:4f:
                    2c:89:ff:ec:6a:db:a8:93:fc:c5:c1:f5:af:b7:08:
                    27:92:3a:6f:f5:3f:31:db:2e:00:fd:b7:5b:32:65:
                    ee:12:24:7a:f2:d1:63:12:e6:f9:20:e6:b2:fb:74:
                    8c:b5:a7:a2:6f:da:7f:40:ae:36:7e:50:38:78:33:
                    04:3e:74:1a:ed:c4:71:e4:66:df:0e:f4:92:23:25:
                    5f:8f:92:a7:ee:c9:b8:e4:91:45:ae:6c:f9:d1:6e:
                    40:d3:61:ab:db:5f:7c:4a:75:76:ca:6d:4e:20:d5:
                    4d:7b:27:0c:da:97:5c:a1:53:6c:53:9e:fc:fc:9f:
                    19:37:e8:d4:56:a4:78:03:00:23:48:5a:39:08:d6:
                    30:8e:95:a8:00:d2:e6:3f:d4:dd:26:88:05:db:5d:
                    b0:8d:4a:ae:4c:a9:09:fe:7c:80:fe:2b:55:36:86:
                    80:bc:42:9e:1b:27:ee:9d:d4:55:83:2e:68:83:9e:
                    3e:43:75:40:d1:ad:57:f7:4e:8f:14:9a:e3:8c:42:
                    17:2b:7a:91:ba:0e:44:e9:9b:16:b4:72:7c:8f:97:
                    11:8d:da:db:dc:31:e5:e4:74:a8:2e:b9:96:05:ab:
                    f8:0f:66:9a:2b:bf:7a:ca:97:2a:e4:ed:32:6b:14:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:62:5E:0C:7B:D6:3F:E1:13:2B:4C:A8:88:B1:C4:C7:3D:0A:51:EF
            X509v3 Authority Key Identifier:
                keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/amJeDHvWP-ETK0yoiLHExz0KUe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:df:a1:7a:08:7f:74:16:a3:c4:fe:40:99:0d:cd:57:f0:35:
         63:72:4f:d9:f2:a3:3b:d7:80:16:a9:65:8d:82:bc:05:2c:e8:
         86:2a:23:41:1c:75:66:bd:f2:17:35:15:2d:8b:a7:db:28:b3:
         8e:8e:e4:22:2b:c9:e9:4a:da:c5:fc:1c:41:95:52:b7:89:1b:
         9a:05:73:2d:30:df:59:cf:fa:b9:50:53:83:80:e5:ca:93:49:
         d6:b2:9a:2d:30:9a:12:6b:e4:0b:32:ca:eb:e8:40:09:f3:32:
         04:ac:da:f5:16:6a:a2:bc:c5:1f:79:90:0a:07:df:c7:37:32:
         69:c8:6e:67:f1:8b:11:07:86:3e:bd:32:8a:01:a0:d3:14:a4:
         23:1a:63:a7:41:7b:b0:9b:47:39:7b:60:68:06:59:c5:c5:5c:
         5b:e2:9b:25:89:81:b2:09:fb:82:f8:3e:4d:f2:33:60:00:45:
         a1:f5:61:0b:e7:87:72:9c:c3:c8:74:fd:1b:35:ee:5d:aa:8d:
         b4:62:83:54:58:6d:47:ec:fd:f6:9c:9a:cd:b0:cc:cf:cd:f5:
         eb:1b:23:06:bf:90:12:13:52:c6:d2:42:67:f6:22:4a:ed:f0:
         71:82:8e:57:df:62:41:47:22:ca:df:18:19:b1:87:c0:66:30:
         96:70:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:22 2026 by rpki-client