This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/Iv-RS1GWW-xLn8dNxq7r5YXXjSs.roa
File:                     Iv-RS1GWW-xLn8dNxq7r5YXXjSs.roa (raw, json)
Hash identifier:          oE5PL3Krr0r9ntiL9YECi1nkIPrZCu90vdTKGFyXWag=
Subject key identifier:   22:FF:91:4B:51:96:5B:EC:4B:9F:C7:4D:C6:AE:EB:E5:85:D7:8D:2B
Certificate issuer:       /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial:       019B7F81FFD959159295D0228FA2780B0BC5
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/Iv-RS1GWW-xLn8dNxq7r5YXXjSs.roa
Signing time:             Fri 02 Jan 2026 16:19:44 +0000
ROA not before:           Fri 02 Jan 2026 16:19:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        5.57.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:81:ff:d9:59:15:92:95:d0:22:8f:a2:78:0b:0b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
        Validity
            Not Before: Jan  2 16:19:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=22ff914b51965bec4b9fc74dc6aeebe585d78d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:66:2b:b3:2c:d8:6d:3f:84:3f:34:07:0a:
                    86:2c:30:5e:af:e3:dc:23:29:82:83:5e:94:7b:60:
                    bf:c9:17:ac:75:0b:ea:d9:84:79:f2:e0:15:d4:10:
                    0f:9b:b7:f7:a4:4b:97:ed:72:09:19:f7:0d:aa:fd:
                    6e:6b:9f:09:e5:89:b9:ea:5e:e6:9a:85:af:dd:b1:
                    09:22:3e:25:85:13:f8:97:22:d1:d9:b4:a1:af:50:
                    7a:64:3b:bc:a7:32:44:da:fa:59:3f:ae:cb:17:c9:
                    2e:e9:f7:8e:b2:76:92:f4:e2:a1:a6:45:97:35:51:
                    b8:82:1a:e2:59:23:ec:d9:cb:2f:be:3b:af:c6:7a:
                    99:79:1a:3b:cd:ac:28:35:02:50:5f:fa:5d:33:54:
                    8c:2c:dc:35:ae:c2:eb:43:fb:d4:90:81:71:01:f1:
                    f1:07:d5:43:3c:52:73:dc:04:37:29:1f:5b:24:3b:
                    01:41:1f:28:47:68:49:4d:77:d2:59:ec:ee:fe:21:
                    97:c5:43:fb:33:54:ce:0a:92:94:eb:35:ae:12:00:
                    fc:47:da:d0:db:15:52:71:72:cb:77:6d:99:21:47:
                    42:f7:42:04:bc:a6:bc:dc:8f:db:52:56:6d:15:96:
                    41:1b:88:01:19:7a:55:51:a6:bd:06:84:84:ef:36:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:91:4B:51:96:5B:EC:4B:9F:C7:4D:C6:AE:EB:E5:85:D7:8D:2B
            X509v3 Authority Key Identifier:
                keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/Iv-RS1GWW-xLn8dNxq7r5YXXjSs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.57.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:17:e1:08:72:cf:b7:81:23:0c:4b:36:3d:96:80:49:b1:49:
         4e:40:09:99:78:71:d0:31:b5:34:41:fd:d3:a2:ab:86:59:4e:
         d5:bd:19:fb:10:68:6d:9c:c3:89:69:72:1d:4b:37:18:ca:97:
         3e:86:18:fc:7e:f0:ae:ef:07:52:dd:09:60:9f:36:ef:66:16:
         22:83:40:ac:f3:2d:94:bb:19:61:fd:68:c8:f4:0c:39:3d:fd:
         34:fd:5d:53:95:81:39:10:9c:e3:c8:43:b3:55:44:a3:13:2a:
         71:d8:be:dd:7c:6e:03:19:92:36:1c:c1:78:8d:e3:6d:bf:e7:
         cf:e1:f0:2c:66:46:35:a8:da:a6:0e:f5:1e:6b:8d:78:35:b5:
         b5:78:e7:dc:94:96:e4:d2:ac:71:14:3d:a7:3a:b1:8f:58:c1:
         3e:23:58:d3:cf:52:bb:a5:00:6a:84:0f:25:14:21:d5:59:d0:
         16:33:f8:1f:d1:b3:5b:7e:16:b1:a1:9a:16:14:0b:d2:42:d5:
         68:fa:91:0e:91:e2:87:5a:05:b0:c0:02:9d:65:42:53:3c:8e:
         74:67:ce:ad:90:85:3f:0c:ae:eb:72:ac:0f:6e:c6:48:b3:a5:
         9b:1d:77:0a:05:97:8d:03:86:99:a2:22:08:1a:ff:33:88:11:
         f6:ca:51:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:59:32 2026 by rpki-client