This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/5ey037UD9ZyYntlcFPrPEvGuXaE.roa
File:                     5ey037UD9ZyYntlcFPrPEvGuXaE.roa (raw, json)
Hash identifier:          bBm6Afecvoirc2fsYnSFihOCiwl7vHE/59eznix//pI=
Subject key identifier:   E5:EC:B4:DF:B5:03:F5:9C:98:9E:D9:5C:14:FA:CF:12:F1:AE:5D:A1
Certificate issuer:       /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial:       019B7C11FE2BFDC5D498151499E24DFA0245
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/5ey037UD9ZyYntlcFPrPEvGuXaE.roa
Signing time:             Fri 02 Jan 2026 00:18:32 +0000
ROA not before:           Fri 02 Jan 2026 00:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35434
IP address blocks:        83.230.0.0/19 maxlen: 19
                          83.230.32.0/20 maxlen: 20
                          83.230.48.0/22 maxlen: 22
                          195.82.160.0/21 maxlen: 21
                          195.82.168.0/22 maxlen: 22
                          195.82.172.0/23 maxlen: 23
                          195.82.176.0/21 maxlen: 21
                          195.82.188.0/22 maxlen: 22
                          212.106.138.0/23 maxlen: 23
                          212.106.160.0/21 maxlen: 21
                          213.227.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:fe:2b:fd:c5:d4:98:15:14:99:e2:4d:fa:02:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
        Validity
            Not Before: Jan  2 00:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e5ecb4dfb503f59c989ed95c14facf12f1ae5da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:55:14:c0:7b:08:f4:61:e6:28:31:be:62:21:
                    5a:f2:0b:43:07:a7:3d:3f:bc:43:ef:fa:de:28:6c:
                    fd:d1:b9:69:f0:ea:ad:dc:97:69:34:3d:9f:f5:da:
                    70:03:38:b5:5b:40:56:62:94:05:82:3d:c1:ba:3f:
                    8d:52:42:d7:03:60:ce:13:f3:11:67:a1:78:b1:3d:
                    66:7f:89:6b:c3:30:2f:a5:20:de:12:66:59:ca:be:
                    2c:35:18:89:00:7f:ec:b0:95:5b:1d:51:4a:5b:f7:
                    b7:48:a9:65:75:4d:a4:d1:01:60:fd:4f:bc:f7:41:
                    1d:22:df:3c:76:dc:51:94:98:e3:88:b4:0f:1d:0f:
                    b1:b2:5d:84:87:98:f5:ea:47:2a:c8:2f:ac:a6:c1:
                    48:08:da:04:4d:bb:00:ba:30:5c:8d:1b:2d:3b:be:
                    4d:ff:7b:10:14:32:05:c3:9d:52:0b:82:53:e7:f6:
                    9f:83:6b:3e:23:bc:f3:4c:8e:f9:6d:5e:b6:b8:c6:
                    b8:4c:2d:f8:b5:d2:02:7b:8f:a5:05:cb:0e:f7:7e:
                    28:bd:d2:a7:b9:07:82:ed:07:b4:8a:8f:61:41:2d:
                    e6:60:a9:1b:7a:d4:62:88:d0:bc:91:63:a7:6a:0b:
                    2b:ee:9f:a0:01:44:63:a8:d9:9d:17:1a:a5:57:dc:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EC:B4:DF:B5:03:F5:9C:98:9E:D9:5C:14:FA:CF:12:F1:AE:5D:A1
            X509v3 Authority Key Identifier:
                keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/5ey037UD9ZyYntlcFPrPEvGuXaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.230.0.0-83.230.51.255
                  195.82.160.0-195.82.173.255
                  195.82.176.0/21
                  195.82.188.0/22
                  212.106.138.0/23
                  212.106.160.0/21
                  213.227.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:20:18:1a:fa:7c:97:67:52:b6:35:42:4c:78:a2:7b:49:4e:
         38:f3:01:74:46:40:de:51:f6:b2:6f:ff:2c:5e:4c:6c:83:c0:
         3d:75:de:d0:7a:69:ee:70:75:43:04:52:53:54:c7:3d:7b:51:
         bd:af:b4:14:39:0a:8d:71:c9:45:4e:47:2e:40:28:75:f4:4a:
         a3:83:fb:b8:02:85:ad:67:2b:0b:e9:c6:0c:a3:1b:bd:00:82:
         65:27:9d:de:96:7e:f9:ec:bc:45:b7:f5:23:4d:05:bd:b1:1b:
         5c:2b:86:c7:85:7a:19:73:e8:ae:cc:f7:a0:41:b6:5a:2c:7e:
         19:27:12:70:4c:f2:6f:f8:1f:7b:5c:40:6d:59:b2:77:1f:ba:
         4d:cc:89:d0:6f:85:b1:d3:88:1f:41:dd:c0:17:4e:b6:df:f6:
         6b:15:e9:40:25:37:2c:b4:75:3a:9d:7a:5e:7a:4e:79:e6:7f:
         31:58:af:62:13:89:5a:f6:3f:4b:09:b4:4b:fe:5a:e9:34:e3:
         53:20:a0:19:07:c3:c1:51:f1:f8:78:3b:cf:32:17:15:91:54:
         14:a5:4f:13:8d:c2:cb:44:55:62:45:42:77:ee:6e:c1:4f:70:
         ec:f4:91:ce:38:9b:63:32:36:51:25:4a:cb:93:21:ea:60:21:
         9a:6b:82:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:19:28 2026 by rpki-client