This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/1-XgzExb87B342Vy7rI92swro5Ko.roa
File:                     1-XgzExb87B342Vy7rI92swro5Ko.roa (raw, json)
Hash identifier:          QjIobcr5W/51qEI0M/xq1gTl7eaLdwnyA/ijNSdgtjc=
Subject key identifier:   F9:78:33:13:16:FC:EC:1D:F8:D9:5C:BB:AC:8F:76:B3:0A:E8:E4:AA
Certificate issuer:       /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial:       019BC0BCD3A78F84CEAEF40C3679135A44DC
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/1-XgzExb87B342Vy7rI92swro5Ko.roa
Signing time:             Thu 15 Jan 2026 08:19:18 +0000
ROA not before:           Thu 15 Jan 2026 08:19:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38325
IP address blocks:        153.55.176.0/21 maxlen: 21
                          153.55.176.0/22 maxlen: 22
                          153.55.176.0/23 maxlen: 23
                          153.55.176.0/24 maxlen: 24
                          153.55.177.0/24 maxlen: 24
                          153.55.178.0/23 maxlen: 23
                          153.55.178.0/24 maxlen: 24
                          153.55.179.0/24 maxlen: 24
                          153.55.180.0/22 maxlen: 22
                          153.55.180.0/23 maxlen: 23
                          153.55.180.0/24 maxlen: 24
                          153.55.181.0/24 maxlen: 24
                          153.55.182.0/23 maxlen: 23
                          153.55.182.0/24 maxlen: 24
                          153.55.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c0:bc:d3:a7:8f:84:ce:ae:f4:0c:36:79:13:5a:44:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
        Validity
            Not Before: Jan 15 08:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f978331316fcec1df8d95cbbac8f76b30ae8e4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:aa:81:1e:62:80:a5:7d:ad:26:f5:2e:cd:
                    5c:32:e9:c7:5b:59:12:18:07:b6:b4:70:b6:f7:88:
                    5b:fd:17:48:48:32:f6:c1:b9:32:49:7d:55:8e:eb:
                    4b:de:60:67:7c:ff:fd:ad:44:57:5b:2f:99:95:f6:
                    3d:57:62:46:88:c1:72:c1:71:db:fe:d5:a0:e1:e8:
                    03:d8:a2:09:f7:97:e9:89:23:ba:37:5a:32:24:41:
                    05:a5:9b:2b:ee:36:6e:ea:ce:8c:c5:f0:1c:9a:53:
                    8d:74:74:9f:fc:dd:f2:7c:96:76:ec:ff:a5:15:26:
                    66:34:6e:45:e7:ee:8f:04:cb:ac:94:ea:26:3c:d3:
                    28:0f:43:7a:28:7f:8e:d1:4d:ac:51:13:7a:bb:2a:
                    18:dc:c2:51:d1:e7:e0:65:8c:65:b8:f3:27:da:fe:
                    66:19:9e:18:65:11:d5:1d:0b:9f:16:ce:63:77:aa:
                    0f:35:75:b2:ea:d4:54:32:d3:b6:c0:ce:1d:80:83:
                    25:3d:57:e9:6c:02:70:b5:22:e7:1d:1e:ed:cf:5b:
                    d7:08:4c:27:52:9e:80:80:cf:e8:6e:22:51:5d:8e:
                    d8:08:ac:02:ae:99:4e:e5:8b:f3:66:36:b7:49:d9:
                    e0:41:63:c7:e8:96:61:00:f3:e1:c4:f5:69:53:c4:
                    9b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:78:33:13:16:FC:EC:1D:F8:D9:5C:BB:AC:8F:76:B3:0A:E8:E4:AA
            X509v3 Authority Key Identifier:
                keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/1-XgzExb87B342Vy7rI92swro5Ko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.55.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:2e:31:67:e3:a4:39:29:82:55:04:5b:f1:99:6f:bd:7a:65:
         15:75:46:31:8c:4e:46:fd:18:7a:30:f1:58:ee:74:75:fe:60:
         2d:29:a6:e0:05:34:8b:2c:ca:65:f9:0d:42:36:c7:dd:9b:2c:
         95:67:59:6b:a2:9b:ec:ff:dc:91:fd:9c:cd:0e:c2:bb:b3:12:
         19:e5:e2:36:30:c8:17:a6:d0:92:36:8f:a8:38:0f:8d:8e:bc:
         47:f9:d6:5c:25:8b:df:82:73:ab:bf:71:82:f8:8b:54:b8:5b:
         cc:dc:67:39:00:e0:d6:10:79:15:8a:60:1e:54:49:93:f0:39:
         af:8b:b2:eb:d3:e2:3c:0b:70:87:85:c7:aa:d7:44:ef:61:ec:
         09:db:52:8f:17:65:fa:08:a8:e6:4a:2f:32:50:fd:09:fe:16:
         ee:d8:1d:1c:22:1f:ba:36:da:16:13:13:d9:aa:90:22:d3:7b:
         13:48:03:e2:e2:75:77:36:3b:0f:d9:44:50:66:f5:45:40:e5:
         d2:b0:6f:9d:37:6a:c1:f3:12:ec:85:71:86:b4:e5:5e:ad:d9:
         d0:ff:84:7d:29:ed:ce:ed:e1:ae:91:c5:e2:a9:44:c8:fd:8f:
         34:27:c2:b2:2c:92:ed:94:e5:4c:ad:2f:f5:10:37:98:be:82:
         78:b5:82:ad
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZvAvNOnj4TOrvQMNnkTWkTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMmEyMmJjY2QzZGU4MjY1YWZkNTVmOTgzMGZmYzAxYzgz
YWY3MjYwHhcNMjYwMTE1MDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTc4MzMxMzE2ZmNlYzFkZjhkOTVjYmJhYzhmNzZiMzBhZThlNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArueqgR5igKV9rSb1Ls1cMunHW1kS
GAe2tHC294hb/RdISDL2wbkySX1VjutL3mBnfP/9rURXWy+ZlfY9V2JGiMFywXHb
/tWg4egD2KIJ95fpiSO6N1oyJEEFpZsr7jZu6s6MxfAcmlONdHSf/N3yfJZ27P+l
FSZmNG5F5+6PBMuslOomPNMoD0N6KH+O0U2sURN6uyoY3MJR0efgZYxluPMn2v5m
GZ4YZRHVHQufFs5jd6oPNXWy6tRUMtO2wM4dgIMlPVfpbAJwtSLnHR7tz1vXCEwn
Up6AgM/obiJRXY7YCKwCrplO5YvzZja3SdngQWPH6JZhAPPhxPVpU8SbIwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPl4MxMW/Owd+Nlcu6yPdrMK6OSqMB8GA1UdIwQY
MBaAFFIqIrzNPegmWv1V+YMP/AHIOvcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlvaXZNMDk2Q1phX1ZYNWd3XzhBY2c2OXlZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZTQ3NjAtYzU0Ni00YmVjLWE2MzUt
ZmYzNzIzZTc4YmQzLzEvMS1YZ3pFeGI4N0IzNDJWeTdySTkyc3dybzVLby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWQvMWU0NzYwLWM1NDYtNGJlYy1hNjM1LWZmMzcyM2U3OGJk
My8xL1Vpb2l2TTA5NkNaYV9WWDVnd184QWNnNjl5WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5k3sDAN
BgkqhkiG9w0BAQsFAAOCAQEAui4xZ+OkOSmCVQRb8ZlvvXplFXVGMYxORv0YejDx
WO50df5gLSmm4AU0iyzKZfkNQjbH3ZsslWdZa6Kb7P/ckf2czQ7Cu7MSGeXiNjDI
F6bQkjaPqDgPjY68R/nWXCWL34Jzq79xgviLVLhbzNxnOQDg1hB5FYpgHlRJk/A5
r4uy69PiPAtwh4XHqtdE72HsCdtSjxdl+gio5kovMlD9Cf4W7tgdHCIfujbaFhMT
2aqQItN7E0gD4uJ1dzY7D9lEUGb1RUDl0rBvnTdqwfMS7IVxhrTlXq3Z0P+EfSnt
zu3hrpHF4qlEyP2PNCfCsiyS7ZTlTK0v9RA3mL6CeLWCrQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:01:37 2026 by rpki-client