This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/5ysiViCYjFvC9-kctDcIkY-pILA.roa
File:                     5ysiViCYjFvC9-kctDcIkY-pILA.roa (raw, json)
Hash identifier:          G9bDJB7QDClrvtETEje7e1l6WKvZlQKdYpwndPvzGug=
Subject key identifier:   E7:2B:22:56:20:98:8C:5B:C2:F7:E9:1C:B4:37:08:91:8F:A9:20:B0
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       019B7F1501FE7406E14D18E58D11591E99C3
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/5ysiViCYjFvC9-kctDcIkY-pILA.roa
Signing time:             Fri 02 Jan 2026 14:20:41 +0000
ROA not before:           Fri 02 Jan 2026 14:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20860
IP address blocks:        185.179.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:01:fe:74:06:e1:4d:18:e5:8d:11:59:1e:99:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jan  2 14:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e72b225620988c5bc2f7e91cb43708918fa920b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:09:d5:75:f1:88:80:97:13:ca:3b:ca:4c:
                    d1:5c:77:a4:1b:ec:39:dd:89:52:eb:a0:58:63:6d:
                    ac:b5:a8:6b:4e:fa:88:8f:99:1b:0f:d1:8d:3c:3a:
                    33:40:72:35:e1:ed:bf:6e:54:f3:7f:ba:aa:4d:95:
                    15:27:a1:cc:70:46:28:0e:50:f7:d5:ab:b4:96:e8:
                    91:6f:b7:89:c7:47:08:ea:cb:78:38:8c:35:0a:40:
                    60:82:5a:2c:9e:d3:3a:e1:e2:35:2b:63:7e:38:39:
                    91:1f:98:5f:c6:4c:6e:59:e5:77:af:e5:ab:12:51:
                    66:62:47:08:d3:2b:bc:2f:12:c2:d4:dc:70:68:b1:
                    68:51:10:c1:1b:67:a0:a9:60:5c:72:33:07:1c:f1:
                    20:5b:66:3e:32:60:d8:0f:c1:7f:4d:ec:37:46:3d:
                    29:20:22:db:69:c2:32:82:58:8a:9f:a8:ba:db:9f:
                    a0:ea:0b:a4:64:81:79:a4:ad:2e:f4:2d:05:4b:06:
                    9d:c8:c2:64:bb:32:fd:b3:c9:8c:c6:99:7e:72:5b:
                    8c:00:f7:62:9f:f8:11:77:0c:3f:3b:a8:48:3b:26:
                    b9:cf:0f:a0:87:de:ed:b1:e1:64:9a:bf:23:a6:ce:
                    84:7d:04:c3:27:0f:8d:0e:20:96:79:7e:92:84:ea:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2B:22:56:20:98:8C:5B:C2:F7:E9:1C:B4:37:08:91:8F:A9:20:B0
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/5ysiViCYjFvC9-kctDcIkY-pILA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:d3:dc:60:09:5b:29:24:a7:56:0e:30:6d:a8:fc:c7:ba:2e:
         aa:3b:cc:5a:b5:e4:28:2b:cd:f1:f3:f0:5e:4b:29:5d:f6:2d:
         de:3f:4a:06:c6:fb:9d:51:52:90:a3:5c:25:a8:ba:7b:26:03:
         a0:c9:0e:31:b1:6a:4e:f8:6f:79:0c:2b:b0:08:98:af:92:6c:
         2e:ae:62:2d:0b:04:e5:33:f0:20:8c:68:d5:2e:c0:91:b1:81:
         d1:78:94:84:6e:56:63:b3:72:34:38:44:f3:55:a8:b2:9e:c2:
         9c:8f:64:d4:18:9f:aa:d2:0c:80:41:95:53:2e:78:3a:d9:ae:
         28:b0:a2:5c:b4:38:2e:50:d5:59:77:cb:69:f0:59:b2:d9:24:
         75:c5:b7:6b:31:ba:9a:8c:b1:76:1b:b7:33:f4:03:ba:31:c8:
         cb:71:1d:e0:8f:a3:ba:92:f7:c8:56:d0:cf:da:77:99:5c:3a:
         f7:8c:76:5a:92:cb:0a:44:5c:d9:27:79:52:88:42:6f:fe:37:
         02:3c:df:de:b0:fa:1d:95:4e:6a:6e:b9:24:02:fd:cb:24:4a:
         71:e2:9a:52:51:7f:16:c6:8a:5f:dd:ca:5a:7d:ab:a7:c9:35:
         d0:33:f8:f3:67:05:1c:ce:5f:2c:c6:f1:f6:65:21:b5:08:94:
         c1:97:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:31:37 2026 by rpki-client