This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa
File:                     r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa (raw, json)
Hash identifier:          Lx5U2EtRmK/SMw+CSkQAbyTcgCy3VHiqTM7rtjngPZA=
Subject key identifier:   AF:91:03:78:47:73:48:26:74:6B:A6:FE:3F:96:06:2A:70:46:56:15
Certificate issuer:       /CN=7a3f897117599fe839a9940e81a1788244caad06
Certificate serial:       019B78352DEB58FF0547779BA6A5CEFAE4E1
Authority key identifier: 7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa
Signing time:             Thu 01 Jan 2026 06:18:29 +0000
ROA not before:           Thu 01 Jan 2026 06:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57905
IP address blocks:        194.1.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:2d:eb:58:ff:05:47:77:9b:a6:a5:ce:fa:e4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3f897117599fe839a9940e81a1788244caad06
        Validity
            Not Before: Jan  1 06:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=af91037847734826746ba6fe3f96062a70465615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:4f:3d:75:ee:94:29:23:15:dc:67:d5:d0:
                    eb:6a:11:25:a3:51:53:16:a0:80:44:80:9b:bb:8b:
                    22:68:bf:17:cb:80:ef:82:cf:95:1b:8f:65:7a:ff:
                    fe:c5:36:c6:bc:50:89:dc:6d:2f:53:1b:f0:ca:db:
                    60:e5:d7:33:45:18:a5:f1:1f:32:07:82:a4:6a:a0:
                    de:e0:0a:ca:f2:21:74:98:83:dc:d0:ce:eb:c8:8e:
                    73:b5:1b:94:0c:2f:1b:c3:95:b0:ed:b5:0e:9b:59:
                    f0:f2:1e:f8:d0:0c:f2:d7:43:90:7c:43:a4:2c:26:
                    38:c4:d8:1b:4b:c3:26:87:67:d8:74:f2:7e:f6:68:
                    dd:00:61:4d:ad:73:4f:3e:98:29:16:0e:e9:4d:03:
                    40:45:92:23:fa:e7:ee:86:60:55:ab:d0:65:2f:c9:
                    c7:c3:a3:92:86:79:53:59:e4:90:90:97:b9:72:ce:
                    53:73:6b:22:87:6e:86:c4:1d:d5:d4:9e:b9:d5:51:
                    fb:17:5f:e6:de:f2:e8:d7:15:be:4d:42:44:1a:7c:
                    f4:01:1b:19:fc:e6:31:0f:93:d1:c5:be:a2:8f:48:
                    ca:5d:0a:3f:4c:b3:ff:e6:08:bf:14:50:9d:ca:06:
                    3d:1a:7b:b0:6f:7b:bb:c6:94:a4:3f:9f:70:de:95:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:91:03:78:47:73:48:26:74:6B:A6:FE:3F:96:06:2A:70:46:56:15
            X509v3 Authority Key Identifier:
                keyid:7A:3F:89:71:17:59:9F:E8:39:A9:94:0E:81:A1:78:82:44:CA:AD:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ej-JcRdZn-g5qZQOgaF4gkTKrQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/r5EDeEdzSCZ0a6b-P5YGKnBGVhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/078960-3c3a-40e4-9342-b2afea6d06ab/1/ej-JcRdZn-g5qZQOgaF4gkTKrQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.1.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:72:1c:76:30:2b:47:79:b8:74:0a:b3:15:79:e3:f1:a7:76:
         ae:c2:c7:a6:aa:ef:35:7e:5a:85:b2:76:c1:cb:b6:52:e4:b4:
         e3:02:1f:18:e9:a3:3a:a2:4e:9a:b9:40:95:81:fd:6b:a9:a4:
         97:93:08:6d:00:20:df:8d:f3:d7:16:e3:bc:0e:f8:0e:43:71:
         4f:e7:b3:f5:20:8b:d0:e4:8f:cb:c9:ef:cb:e9:13:c3:df:a4:
         ae:ef:23:cf:e6:14:64:05:a3:f1:5e:0f:25:2f:54:23:47:2d:
         b0:2c:df:5c:fd:6e:02:46:46:68:29:39:8a:bc:06:d1:52:45:
         aa:9d:37:17:58:df:67:3c:93:70:d3:65:3e:9d:9d:70:39:c2:
         06:30:ca:56:89:04:de:fe:f6:01:57:a3:c1:a5:16:3d:0c:02:
         3d:76:63:be:96:66:27:ae:06:f8:61:7f:43:09:8a:6d:5b:5f:
         be:f1:4a:f4:e6:87:cd:dd:bb:c7:91:b3:7a:5e:5f:a7:cc:24:
         3a:13:5a:e3:fe:95:46:d6:30:b1:72:84:4f:d1:50:64:f9:26:
         7a:e2:8a:5b:90:1a:6a:25:8e:cf:16:9b:f8:80:87:40:a9:ee:
         51:16:8d:fe:7d:d5:1f:bb:01:a6:6d:a4:c5:1a:96:3c:b0:82:
         e0:0d:6c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:05:18 2026 by rpki-client