This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/l5a1NvfZd3mVlolVo0ReI8VUwgM.roa
File:                     l5a1NvfZd3mVlolVo0ReI8VUwgM.roa (raw, json)
Hash identifier:          5T5U7gNINclFNBnm2PkS916RSAyiy1JNtbwQLqRr5Cg=
Subject key identifier:   97:96:B5:36:F7:D9:77:79:95:96:89:55:A3:44:5E:23:C5:54:C2:03
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       019B7AC79F2DBD34AF8C2A11F14617928713
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/l5a1NvfZd3mVlolVo0ReI8VUwgM.roa
Signing time:             Thu 01 Jan 2026 18:17:41 +0000
ROA not before:           Thu 01 Jan 2026 18:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202999
IP address blocks:        92.246.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:9f:2d:bd:34:af:8c:2a:11:f1:46:17:92:87:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jan  1 18:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9796b536f7d9777995968955a3445e23c554c203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:9b:18:bc:dd:9b:e9:2d:f4:6c:29:6d:a0:
                    d2:aa:66:c6:29:3a:ab:b2:9b:35:34:1e:5f:57:db:
                    1a:43:76:e5:98:12:5e:f1:c1:9a:17:cd:2f:6f:bd:
                    5b:1e:14:3b:1a:6e:29:69:2b:e6:1b:3f:36:55:07:
                    a5:dc:61:4d:29:87:b1:50:df:61:71:65:33:5d:ea:
                    5b:07:5f:f2:b0:cc:35:b8:29:08:02:85:2c:12:8e:
                    87:40:a7:b7:42:30:48:91:4e:12:52:f8:a8:b3:95:
                    0c:a7:66:be:ea:73:3d:f1:d4:8c:a2:f0:a4:5a:cf:
                    40:d1:d6:f2:eb:11:a3:02:5a:8c:67:ca:79:aa:e9:
                    e8:aa:85:b9:49:4e:2a:d2:40:57:ed:d9:3e:cd:60:
                    a1:cf:d4:8a:81:f1:99:cc:f0:bf:3f:a0:9d:0b:44:
                    50:48:45:fa:0e:f5:12:83:ab:fa:16:44:a0:d1:61:
                    8a:6a:7f:f7:5e:f4:80:c1:95:a2:64:49:ec:fe:ed:
                    c6:8f:02:6b:45:6a:b0:e7:71:37:b3:33:ab:8e:67:
                    7b:b7:f0:6c:1b:8f:12:71:d3:e1:7b:e5:b3:13:8e:
                    ff:b9:cb:1a:3f:3a:31:03:86:b0:ae:23:0d:61:20:
                    da:90:ed:c8:ae:f5:c4:7f:91:19:a9:4c:f1:65:2d:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:B5:36:F7:D9:77:79:95:96:89:55:A3:44:5E:23:C5:54:C2:03
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/l5a1NvfZd3mVlolVo0ReI8VUwgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.246.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:d0:66:35:0d:df:2a:eb:d0:62:5e:12:ed:dd:bb:20:f8:
         98:10:88:47:7f:f2:ca:a6:a2:44:10:8e:d5:04:a1:e3:8f:a9:
         45:d9:00:c8:43:7e:67:e8:0e:86:0a:06:7a:42:29:4c:c0:f3:
         0c:2f:a2:bb:d3:43:d9:c5:74:8e:1a:50:59:df:4f:0d:d5:d0:
         3f:64:8d:92:a6:0a:b6:2a:21:26:c8:8b:e9:72:ea:cb:59:82:
         68:bd:c5:0e:54:a5:cd:56:6a:f2:8a:14:25:b1:6b:82:ef:e3:
         a2:7f:6a:5c:7a:cf:31:b2:77:bd:c0:d4:3a:a2:1f:2b:83:ec:
         e4:01:a2:f9:2f:04:2c:36:6a:0d:df:e1:92:8e:a6:12:bd:70:
         7b:37:82:7f:7b:2e:af:7f:ea:ea:ea:84:52:0a:dc:03:4d:d4:
         ba:25:ed:26:cf:0b:9b:29:d6:c5:8e:11:60:56:3e:eb:12:f9:
         6d:0e:2d:f4:8c:14:a6:fc:bb:bc:60:97:75:7f:08:d6:5e:93:
         61:1d:f3:82:bf:d5:e5:bf:75:7f:c5:df:10:38:8b:39:15:9f:
         66:31:b6:e5:15:3f:c1:b6:33:6a:ec:0d:09:23:0f:ef:6f:3d:
         90:ee:ad:35:38:db:eb:32:0c:39:53:0d:d8:29:4a:58:5d:b3:
         8e:0b:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:36:29 2026 by rpki-client