This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa
File:                     sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa (raw, json)
Hash identifier:          opJzNV6FEUtzmIuV3nD2tt4j7hDOk/PqNpj2ykTZfgU=
Subject key identifier:   B2:FE:52:07:79:3F:E9:59:BA:06:6D:30:2A:B9:F6:30:1C:A7:86:B3
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       019B7CEDA17DC3E02D09515FF59010C99876
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa
Signing time:             Fri 02 Jan 2026 04:18:26 +0000
ROA not before:           Fri 02 Jan 2026 04:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212361
IP address blocks:        147.234.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:a1:7d:c3:e0:2d:09:51:5f:f5:90:10:c9:98:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Jan  2 04:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b2fe5207793fe959ba066d302ab9f6301ca786b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ab:af:cc:01:9a:14:fb:8a:8d:39:5f:b5:fa:
                    e8:d5:81:39:be:1b:91:44:49:cd:1d:d7:9b:52:f5:
                    57:06:ff:93:64:74:52:1b:50:fa:70:ba:48:cd:34:
                    15:23:05:40:2a:6f:21:ec:af:28:80:2f:b5:87:7c:
                    6b:31:02:b4:30:4e:fb:89:ea:4b:4a:30:28:6d:b6:
                    e9:13:1f:66:22:94:cc:cd:0e:0c:be:a7:11:24:5a:
                    0e:3b:5a:7a:c1:e3:7d:e2:bf:de:44:51:8d:e0:4d:
                    75:ad:e9:f8:35:81:e4:e8:08:fb:6b:6e:70:ef:8d:
                    39:cf:cf:8e:20:20:ea:67:bb:69:91:e4:d2:74:67:
                    9e:6a:64:82:77:8e:52:34:b7:51:a5:6d:1b:4f:34:
                    fa:fc:56:73:be:30:91:36:a4:e4:3a:c1:8d:71:fa:
                    61:14:b2:bb:18:cf:e4:a4:b8:b9:e5:7d:19:68:a8:
                    d8:a6:07:28:72:54:37:b0:45:c9:4c:dd:8c:ba:00:
                    16:47:dd:e2:d9:82:b3:8d:a9:3d:45:7f:b1:9e:fc:
                    6d:c1:67:ce:4e:9a:a4:ff:52:74:f3:58:ad:ef:8c:
                    72:2c:ad:17:83:8a:d1:f3:e7:09:25:f2:cb:db:47:
                    6d:0f:a6:3f:03:be:b9:ad:b0:14:fc:cf:4c:35:22:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FE:52:07:79:3F:E9:59:BA:06:6D:30:2A:B9:F6:30:1C:A7:86:B3
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/sv5SB3k_6Vm6Bm0wKrn2MBynhrM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.234.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ec:5a:7e:78:7a:9c:d4:ee:64:92:3e:65:0d:f8:88:3f:75:
         ae:55:39:bc:1b:2a:d1:3d:ce:08:5e:1b:67:6b:31:61:d5:c7:
         92:26:9c:92:49:12:bc:a9:9a:3c:c2:7f:0f:2e:ee:2f:79:c0:
         55:4e:3e:fa:15:61:19:3f:a9:73:4f:40:01:3e:ee:15:87:7e:
         23:44:2b:c0:81:b2:8f:38:02:70:6a:1d:39:f8:95:da:9a:dd:
         59:cc:47:b4:c1:04:f4:3b:ed:87:6a:af:89:bd:59:e1:7a:9e:
         cf:80:4a:bc:55:f7:93:8d:63:01:ec:3b:03:f3:fe:40:e6:4d:
         7d:0e:dd:3a:14:8d:be:f3:9b:9a:5b:6f:bf:b7:de:39:81:b3:
         ea:7a:dd:aa:83:92:57:c9:e1:bd:96:ef:46:d8:cb:95:05:ea:
         9f:f9:c5:df:3a:de:2e:69:4e:1c:2b:b2:e3:c6:35:b6:15:27:
         c2:62:f2:d7:09:56:54:aa:d3:98:2b:0a:42:54:6a:c6:0f:6f:
         9e:e7:b2:bb:a6:44:51:4d:95:79:45:92:54:4f:81:94:e7:0c:
         78:ec:cb:a0:38:76:74:8d:c8:b2:ee:7d:c4:f9:54:f2:48:a6:
         64:22:3f:70:78:73:d9:a6:3d:a0:10:00:0f:cd:3a:df:38:90:
         c4:74:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:44:57 2026 by rpki-client