This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/S5UynofK7WJJ-xulmVkgmQs1QXc.roa
File:                     S5UynofK7WJJ-xulmVkgmQs1QXc.roa (raw, json)
Hash identifier:          TXD/V01KAky388bBNTxAgbyyS5aEJ2JYb1ASStpgwNI=
Subject key identifier:   4B:95:32:9E:87:CA:ED:62:49:FB:1B:A5:99:59:20:99:0B:35:41:77
Certificate issuer:       /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial:       019B797EDDCE82B706BEC842FFF072F3816B
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/S5UynofK7WJJ-xulmVkgmQs1QXc.roa
Signing time:             Thu 01 Jan 2026 12:18:36 +0000
ROA not before:           Thu 01 Jan 2026 12:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21107
IP address blocks:        130.193.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:dd:ce:82:b7:06:be:c8:42:ff:f0:72:f3:81:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
        Validity
            Not Before: Jan  1 12:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b95329e87caed6249fb1ba5995920990b354177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9d:37:a9:bd:84:28:90:7b:35:dd:fd:c0:10:
                    c7:10:d0:73:b2:af:ee:e2:ce:0a:6b:ee:30:1e:b8:
                    56:b1:36:9c:5c:6e:6c:e1:f5:5e:9b:80:08:ec:09:
                    07:5d:37:c0:b1:37:1c:bc:40:08:c9:ea:d9:ca:65:
                    c9:19:4d:09:38:d6:34:e6:2f:26:58:f6:b9:30:98:
                    f6:e5:1e:16:cf:d0:72:3b:6d:ef:2a:16:01:29:4d:
                    56:70:68:7a:70:57:25:cc:79:4f:cb:45:bd:5f:71:
                    3f:b9:d3:cf:f7:2e:e3:11:01:aa:d1:71:8e:95:12:
                    af:da:d9:62:0b:40:5e:69:0b:fa:bc:e3:93:37:d2:
                    be:63:02:f8:83:e4:95:73:b9:50:c2:f0:d2:5c:cb:
                    f1:44:f6:ed:b2:72:3b:5f:ae:cc:6e:0e:96:ba:0c:
                    1c:f9:88:17:d0:65:06:d7:51:33:78:9a:f3:fe:5c:
                    ee:9a:6d:82:c6:fa:6e:05:ba:2f:d2:d6:40:f4:a1:
                    ad:53:9d:80:90:80:1b:0a:cb:24:11:71:56:f8:2e:
                    a5:4a:7f:70:a5:d1:78:f5:5c:b4:96:49:47:f7:fa:
                    80:0b:0e:fe:3d:90:21:90:b7:67:77:c0:c0:96:ee:
                    34:6e:8e:64:16:c1:ad:ed:d4:d4:c4:12:e7:92:cb:
                    ba:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:95:32:9E:87:CA:ED:62:49:FB:1B:A5:99:59:20:99:0B:35:41:77
            X509v3 Authority Key Identifier:
                keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/S5UynofK7WJJ-xulmVkgmQs1QXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.193.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b0:87:8c:08:69:0f:62:17:6b:28:34:b0:17:c2:8e:a2:63:
         84:f4:8b:6f:bc:ee:2c:d3:c5:a9:c7:81:97:93:8f:30:2d:94:
         b2:4d:8a:1f:e1:0a:9d:55:f8:e9:e9:10:50:02:a4:ab:13:ff:
         e6:ab:b9:7d:ef:ea:82:5d:1b:4b:b4:ae:22:bb:1d:38:73:9f:
         30:20:4d:43:40:a2:d9:bb:e3:c8:41:97:56:35:62:35:f2:31:
         36:02:93:bb:0e:68:cc:0a:32:05:3c:dc:8d:61:9e:4b:a7:7b:
         3d:ec:45:fc:3e:60:21:93:48:31:5f:4a:74:a8:f4:e7:5f:d6:
         46:6a:4d:3d:9e:98:b9:dd:43:f2:3d:5e:26:38:ba:ce:f0:bc:
         4d:c7:02:24:0c:a2:31:11:e0:01:b7:41:6e:2f:2b:50:9c:e1:
         c5:5b:f8:3d:98:7a:bc:3f:cd:53:21:b8:3d:df:17:fb:1b:3c:
         71:68:2b:f2:17:bf:70:6a:25:68:87:a0:83:a4:54:30:a3:00:
         3a:cb:81:0a:10:ef:5c:f2:ed:c3:5b:0c:0c:75:11:9d:8e:93:
         1c:a4:90:c4:75:40:91:18:52:aa:e2:7d:b3:4a:cf:c2:47:76:
         9c:91:69:7d:77:12:31:0e:70:d7:af:f9:83:b6:a5:78:0c:d4:
         6a:20:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:04:55 2026 by rpki-client