This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ja5gRenugiO3OLtJaWTTX4AqnJM.roa
File:                     ja5gRenugiO3OLtJaWTTX4AqnJM.roa (raw, json)
Hash identifier:          ZVYMWByGgZfUXqr3UlVrsSrWXUeNNJpHA55Lw1rhlbg=
Subject key identifier:   8D:AE:60:45:E9:EE:82:23:B7:38:BB:49:69:64:D3:5F:80:2A:9C:93
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DF2643AEA3B493C3DC04EE6BC6158
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ja5gRenugiO3OLtJaWTTX4AqnJM.roa
Signing time:             Thu 01 Jan 2026 12:17:35 +0000
ROA not before:           Thu 01 Jan 2026 12:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61424
IP address blocks:        89.46.42.0/24 maxlen: 24
                          185.112.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:f2:64:3a:ea:3b:49:3c:3d:c0:4e:e6:bc:61:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8dae6045e9ee8223b738bb496964d35f802a9c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:81:5c:28:dd:c9:46:6f:a3:ef:af:71:7c:06:
                    34:03:0f:aa:9c:68:e4:48:f2:c3:2d:0a:cc:2d:a4:
                    c0:4a:63:6c:78:e2:33:21:eb:91:f2:59:ab:ee:56:
                    f3:14:80:60:69:b8:62:ca:8c:53:f3:e6:1d:cf:e5:
                    04:5d:16:8d:46:b8:fa:2d:41:52:92:db:3b:58:f5:
                    4e:19:88:e4:da:10:92:fa:32:c3:33:8d:79:60:58:
                    56:e9:91:6a:76:33:4d:a3:f1:4a:52:ee:c8:4f:28:
                    5e:d0:83:b9:6a:ed:c0:16:9a:5c:8c:73:b7:b4:4f:
                    67:68:11:df:d3:97:1a:e4:b0:80:2a:9e:37:1b:f2:
                    48:47:29:fe:3b:65:53:3c:3d:15:1a:f2:7b:aa:72:
                    77:e3:dc:cd:49:6a:75:b1:fa:ca:93:68:5a:8c:65:
                    86:26:90:16:2d:6b:95:fc:3d:8f:89:45:51:61:6b:
                    96:fe:68:1b:87:83:83:a8:70:d8:6d:c9:1c:33:99:
                    86:34:59:29:1c:68:8d:b3:72:f7:00:c2:6e:b1:0b:
                    4e:1c:1d:4d:71:be:dc:d0:1d:5b:10:84:b7:9c:ae:
                    72:2a:e9:19:ee:a0:bd:57:09:15:48:31:c5:cc:0b:
                    0e:5f:22:f3:06:cb:86:e1:62:11:16:19:12:00:fe:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AE:60:45:E9:EE:82:23:B7:38:BB:49:69:64:D3:5F:80:2A:9C:93
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ja5gRenugiO3OLtJaWTTX4AqnJM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.46.42.0/24
                  185.112.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:45:ce:c7:d9:ff:fd:43:c8:7b:13:6a:fa:a4:49:f7:44:
         19:33:f4:7c:50:04:33:72:7d:02:ad:01:ae:35:ca:b0:d8:b9:
         1b:9b:1d:2d:fc:e7:b9:69:43:38:c9:6d:95:8c:45:ea:81:83:
         42:44:59:03:cd:ee:8a:0b:15:db:fd:8e:eb:85:f3:0e:09:1f:
         80:46:b0:bd:a8:ce:fc:9a:32:fd:7d:ab:c8:89:69:a0:5e:d0:
         90:ff:40:82:b4:95:f3:15:a3:1f:ba:9d:81:de:50:13:05:ed:
         6b:08:12:c2:fa:13:48:1a:4f:92:15:fe:41:1f:1d:2a:fc:68:
         f3:12:4a:e0:78:b0:d5:2a:c3:98:45:19:6e:f9:3e:ec:9a:a0:
         ed:18:97:85:7f:16:8b:ab:b1:d2:fe:75:d7:93:ac:d4:c6:e4:
         d9:05:d6:59:2b:9a:39:75:35:53:05:1f:da:18:fd:93:22:e0:
         ee:c7:b9:d8:e9:6d:20:d6:25:a6:e3:86:94:3a:84:ca:ec:0f:
         0d:97:3a:72:1d:1b:43:f3:6d:1e:ac:8f:fc:c3:dd:87:c1:9c:
         48:23:2b:6d:de:9a:01:d9:f2:a0:db:62:f6:b2:e3:23:f4:dc:
         e3:a9:1e:ec:38:ce:e0:45:0f:a5:f3:c4:fe:53:9b:89:42:76:
         ea:49:a3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:39:47 2026 by rpki-client