This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/5qyuI5ThHH3azcrMiZNkaa5sMNI.roa
File:                     5qyuI5ThHH3azcrMiZNkaa5sMNI.roa (raw, json)
Hash identifier:          fmjgPwlAX7M+XSOUbCHllncTYtDZa0t8AvCNpNZSKEk=
Subject key identifier:   E6:AC:AE:23:94:E1:1C:7D:DA:CD:CA:CC:89:93:64:69:AE:6C:30:D2
Certificate issuer:       /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial:       019B7835355F07EDD43E6139EBF9770AC206
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/5qyuI5ThHH3azcrMiZNkaa5sMNI.roa
Signing time:             Thu 01 Jan 2026 06:18:31 +0000
ROA not before:           Thu 01 Jan 2026 06:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58261
IP address blocks:        178.210.164.0/24 maxlen: 24
                          185.218.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:35:5f:07:ed:d4:3e:61:39:eb:f9:77:0a:c2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
        Validity
            Not Before: Jan  1 06:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6acae2394e11c7ddacdcacc89936469ae6c30d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:f4:6a:09:dc:b3:1f:8c:ba:66:c3:e0:07:
                    c4:30:43:75:12:da:89:14:13:99:52:78:c7:40:fe:
                    5b:13:dc:b0:ed:be:8c:e8:99:80:94:6c:12:68:c1:
                    48:f7:ba:ea:9d:c0:a0:2d:82:e6:b5:6a:86:61:64:
                    35:21:27:e0:0b:5f:24:e0:ff:d9:86:22:1c:d7:99:
                    b9:d3:28:2f:2b:7b:7a:4c:33:28:37:77:ab:a0:7b:
                    e0:d9:89:38:df:f8:f5:36:cd:86:be:63:7e:cc:39:
                    86:88:48:73:bc:26:80:27:c6:b8:c5:89:31:58:7d:
                    24:c1:da:20:cd:12:d7:37:ce:ec:9c:fa:37:9c:b6:
                    9e:2d:c1:3e:d4:03:09:a6:0d:df:b3:72:ef:2e:7e:
                    32:69:b6:20:4b:46:aa:37:fb:93:82:8e:9b:14:b0:
                    47:6d:41:e3:47:78:da:98:ec:14:b9:cb:02:5d:6a:
                    aa:a8:cc:47:4d:bb:37:4f:90:ef:11:10:57:20:3c:
                    96:e7:85:d5:68:b3:1a:65:c4:31:bd:c5:11:6c:71:
                    30:b3:ad:54:42:73:04:e6:5c:15:a2:10:af:4f:da:
                    b2:f9:e0:79:4d:dd:f7:67:3a:a3:68:7f:ad:76:8a:
                    4c:ca:fc:2e:25:31:33:d5:54:88:c2:76:49:fb:5c:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AC:AE:23:94:E1:1C:7D:DA:CD:CA:CC:89:93:64:69:AE:6C:30:D2
            X509v3 Authority Key Identifier:
                keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/5qyuI5ThHH3azcrMiZNkaa5sMNI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.210.164.0/24
                  185.218.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:d1:78:b7:df:a4:fd:36:54:5b:1c:e7:46:b5:21:64:a1:
         57:32:d1:32:ad:be:0b:35:18:6d:b0:12:c0:1d:7b:cf:21:94:
         55:09:07:c2:49:c1:d3:54:72:2f:66:f0:02:3c:6a:6f:f7:40:
         b4:9b:0f:54:a4:8c:fc:81:e6:c8:8f:01:ac:47:0c:86:b4:8b:
         e9:c1:e2:5d:2a:11:d0:8b:aa:5c:4e:ec:58:a4:fc:60:31:51:
         7a:93:7b:ec:76:e7:91:11:38:3c:82:5c:16:24:b2:1b:ef:04:
         49:9b:a8:d1:2d:bd:f6:8a:ad:e3:0d:36:5f:14:ce:75:94:22:
         5f:82:97:28:65:6e:10:3f:e1:85:f6:58:73:72:82:42:d2:0f:
         b7:67:21:39:43:14:04:b8:d6:cb:3c:d9:a3:5a:f8:99:c6:fc:
         02:fd:b8:e8:ec:f5:5b:92:ec:89:66:b6:e9:63:f5:b5:d6:39:
         96:13:9c:08:b7:f0:77:69:93:8f:cc:dc:d9:3d:b2:15:60:60:
         01:10:29:95:c4:aa:ae:14:bc:8f:e8:49:2a:95:e7:d9:38:0a:
         7b:2b:b9:fe:a3:27:40:0f:9d:1c:ff:b3:7d:8c:66:2b:24:a9:
         1f:fc:98:46:56:14:48:68:bd:37:ff:9c:6a:f6:94:0a:90:db:
         c5:98:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:49:30 2026 by rpki-client