This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/eLvozgAuYfxaIGoHirLhqZjYV6A.roa
File:                     eLvozgAuYfxaIGoHirLhqZjYV6A.roa (raw, json)
Hash identifier:          ZUBOvdPe1xW/PCbTW1HvwAv+AhE++2YwPZTLvVDoPjk=
Subject key identifier:   78:BB:E8:CE:00:2E:61:FC:5A:20:6A:07:8A:B2:E1:A9:98:D8:57:A0
Certificate issuer:       /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial:       019B7B3656E74201FF58FACF4D77681DD3AB
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/eLvozgAuYfxaIGoHirLhqZjYV6A.roa
Signing time:             Thu 01 Jan 2026 20:18:37 +0000
ROA not before:           Thu 01 Jan 2026 20:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5511
IP address blocks:        144.56.1.0/24 maxlen: 24
                          144.56.2.0/24 maxlen: 24
                          144.56.3.0/24 maxlen: 24
                          144.56.4.0/24 maxlen: 24
                          144.56.5.0/24 maxlen: 24
                          144.56.6.0/24 maxlen: 24
                          144.56.14.0/24 maxlen: 24
                          144.56.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:56:e7:42:01:ff:58:fa:cf:4d:77:68:1d:d3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
        Validity
            Not Before: Jan  1 20:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78bbe8ce002e61fc5a206a078ab2e1a998d857a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:e8:15:cb:04:fd:a5:0b:89:8a:df:da:98:
                    29:ae:11:a1:cf:6e:5d:ac:6b:50:aa:ad:de:f1:e2:
                    48:8c:f2:dc:69:c3:cd:71:fa:9b:b4:b6:df:22:56:
                    a5:54:bd:af:21:c3:65:7e:47:48:f5:33:61:07:f9:
                    15:0a:68:3f:55:06:b0:36:ce:5a:6d:a1:6e:cd:5d:
                    0a:8f:a8:f9:11:99:18:ef:65:0f:f3:31:71:a2:c2:
                    e1:e8:e4:07:38:1f:de:6d:3a:b9:5d:54:3e:c5:b2:
                    94:ed:e8:2c:a1:03:85:1b:90:a5:6b:98:c0:90:38:
                    c0:f3:f9:66:ff:3e:27:61:58:72:4d:63:88:fb:6d:
                    dd:2a:d6:22:0a:f3:c6:fd:8a:b0:54:e5:dc:16:b4:
                    3e:b4:6f:66:70:9e:08:a8:4f:09:df:31:ad:1b:34:
                    81:ab:a7:98:ce:dd:78:19:61:f0:63:ee:ea:07:ad:
                    9f:9f:7c:b4:2f:ea:f4:ce:ad:b0:1b:39:30:bf:fc:
                    27:2e:32:14:0c:d7:68:d5:39:3c:aa:9d:89:08:3e:
                    57:fe:cb:f5:96:92:ba:d0:ae:4e:01:06:2c:36:31:
                    06:0e:09:9b:11:58:0e:54:1e:ff:a0:37:06:dc:fa:
                    9f:df:5a:2f:16:29:ed:c6:c9:7c:6c:ee:02:d6:53:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:E8:CE:00:2E:61:FC:5A:20:6A:07:8A:B2:E1:A9:98:D8:57:A0
            X509v3 Authority Key Identifier:
                keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/eLvozgAuYfxaIGoHirLhqZjYV6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.56.1.0-144.56.6.255
                  144.56.14.0/24
                  144.56.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:b3:85:50:2f:96:62:1a:a7:49:2c:5c:f2:a7:1c:55:e1:34:
         17:40:d9:99:97:b6:4c:1c:42:eb:5c:8a:1f:3f:a3:c0:59:74:
         43:cc:af:20:d9:ce:56:e1:ba:6f:d0:d1:3b:ec:aa:c6:3e:b3:
         50:99:84:c0:ff:f8:9a:2a:eb:05:5e:fb:72:35:95:50:d6:7a:
         0d:e3:4f:40:b7:97:3a:5e:ba:29:a1:93:e3:1d:33:46:6b:5f:
         5c:75:11:f3:22:25:f7:d4:b7:ee:ac:36:f9:3f:08:35:b9:92:
         bc:74:df:b4:43:e6:96:8a:b3:32:5e:56:3a:fe:ba:66:bc:16:
         7c:68:d0:73:d2:04:4d:77:81:61:3d:29:ae:3d:65:2c:2e:3e:
         bd:11:89:01:a0:a2:e3:6f:e3:93:d8:6b:c1:2f:61:0e:83:98:
         28:70:45:d6:3b:00:58:c2:91:1b:2f:98:de:28:8c:57:c1:06:
         85:dc:de:d7:3f:41:0c:03:a2:be:e3:7d:3e:f4:73:fc:c9:55:
         3c:f3:3e:d2:b4:1e:be:bd:32:98:8e:ad:2c:49:e6:70:ce:3f:
         96:04:f8:2e:3b:ff:26:96:ae:66:fe:07:a0:ae:27:0c:39:4a:
         d3:97:14:21:2e:52:ec:47:40:50:db:2d:d4:4a:53:f2:e6:f4:
         45:78:d2:1a
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZt7NlbnQgH/WPrPTXdoHdOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjYwMTAxMjAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGJiZThjZTAwMmU2MWZjNWEyMDZhMDc4YWIyZTFhOTk4ZDg1N2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54XoFcsE/aULiYrf2pgprhGhz25d
rGtQqq3e8eJIjPLcacPNcfqbtLbfIlalVL2vIcNlfkdI9TNhB/kVCmg/VQawNs5a
baFuzV0Kj6j5EZkY72UP8zFxosLh6OQHOB/ebTq5XVQ+xbKU7egsoQOFG5Cla5jA
kDjA8/lm/z4nYVhyTWOI+23dKtYiCvPG/YqwVOXcFrQ+tG9mcJ4IqE8J3zGtGzSB
q6eYzt14GWHwY+7qB62fn3y0L+r0zq2wGzkwv/wnLjIUDNdo1Tk8qp2JCD5X/sv1
lpK60K5OAQYsNjEGDgmbEVgOVB7/oDcG3Pqf31ovFintxsl8bO4C1lNijwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHi76M4ALmH8WiBqB4qy4amY2FegMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvZUx2b3pnQXVZZnhhSUdvSGlyTGhxWmpZVjZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACQOAED
BACQOAYDBACQOA4DBACQOBAwDQYJKoZIhvcNAQELBQADggEBALizhVAvlmIap0ks
XPKnHFXhNBdA2ZmXtkwcQutcih8/o8BZdEPMryDZzlbhum/Q0TvsqsY+s1CZhMD/
+Joq6wVe+3I1lVDWeg3jT0C3lzpeuimhk+MdM0ZrX1x1EfMiJffUt+6sNvk/CDW5
krx037RD5paKszJeVjr+uma8Fnxo0HPSBE13gWE9Ka49ZSwuPr0RiQGgouNv45PY
a8EvYQ6DmChwRdY7AFjCkRsvmN4ojFfBBoXc3tc/QQwDor7jfT70c/zJVTzzPtK0
Hr69MpiOrSxJ5nDOP5YE+C47/yaWrmb+B6CuJww5StOXFCEuUuxHQFDbLdRKU/Lm
9EV40ho=
-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:22 2026 by rpki-client