This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/ED5p1B1IxAZmQOzt6AanfGEwViA.roa
File:                     ED5p1B1IxAZmQOzt6AanfGEwViA.roa (raw, json)
Hash identifier:          Vgy/saespTYCm8/+U6m7bOHGz/WxK5i8EHUgIoHte9o=
Subject key identifier:   10:3E:69:D4:1D:48:C4:06:66:40:EC:ED:E8:06:A7:7C:61:30:56:20
Certificate issuer:       /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Certificate serial:       019B7B35CF1755DDF91807B3646F10BE7FF3
Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/ED5p1B1IxAZmQOzt6AanfGEwViA.roa
Signing time:             Thu 01 Jan 2026 20:18:02 +0000
ROA not before:           Thu 01 Jan 2026 20:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39661
IP address blocks:        194.50.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:cf:17:55:dd:f9:18:07:b3:64:6f:10:be:7f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
        Validity
            Not Before: Jan  1 20:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=103e69d41d48c4066640ecede806a77c61305620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:a8:59:1f:57:01:4f:1d:bb:ac:9c:d2:42:
                    7e:83:3c:fc:d8:69:80:b0:88:8d:64:2d:84:50:da:
                    30:16:3b:fd:db:bd:6c:6d:ef:d6:22:1b:ef:83:96:
                    c9:b1:3c:33:de:de:77:fc:0b:84:27:66:91:32:8f:
                    d8:af:8e:dd:15:a9:0d:cc:b6:7c:08:6d:ea:e4:61:
                    70:2f:ac:97:3d:95:f3:70:f7:e5:cc:c5:24:a4:96:
                    60:b4:f5:37:19:06:a4:96:9d:e5:3b:3e:a6:61:72:
                    a2:f6:ee:8e:9f:60:d5:8a:5d:18:a3:64:3f:37:ee:
                    0d:19:35:b9:6a:47:29:78:e8:50:5b:26:e3:2b:4d:
                    c8:8f:ac:66:30:e4:6c:60:5c:fe:26:b3:0b:33:43:
                    eb:b6:ee:44:2d:53:4f:d4:2a:8c:1f:c7:46:d8:25:
                    97:1a:03:d6:78:a7:ca:4a:db:9a:69:30:0d:d8:91:
                    12:23:82:01:27:dd:40:eb:97:0e:0d:ed:a8:8d:76:
                    a0:6c:e8:ae:e5:c1:8f:87:53:92:74:7b:8c:a7:11:
                    b1:24:99:38:f8:82:b5:6a:36:89:2f:e6:c2:0d:7e:
                    3e:7d:5e:16:ec:95:1c:b3:24:16:ff:45:d8:fe:a0:
                    79:ab:96:48:40:6d:4a:34:4c:e8:94:7a:03:57:66:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3E:69:D4:1D:48:C4:06:66:40:EC:ED:E8:06:A7:7C:61:30:56:20
            X509v3 Authority Key Identifier:
                keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/ED5p1B1IxAZmQOzt6AanfGEwViA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:ad:43:54:9c:ac:5e:08:a0:2e:85:e7:f6:a8:59:aa:a8:
         8e:76:f4:8f:3e:ce:62:50:1d:f3:69:69:19:e3:59:7b:d3:9b:
         b4:9a:02:de:27:96:27:c1:03:34:f4:d0:aa:d8:b9:ab:34:67:
         a6:a8:2c:5a:9d:2f:03:c4:9f:31:bc:cb:1a:36:13:f5:40:a2:
         b9:58:aa:47:1d:e6:a9:b2:f7:f7:f8:33:e2:c7:3c:4d:88:83:
         82:af:92:6a:44:d5:4e:08:09:38:76:44:2c:00:4d:0b:cf:7f:
         be:69:2f:5a:dd:94:75:cf:e9:dc:fb:7a:03:f3:d6:23:82:6c:
         9d:4b:3c:bd:92:d8:69:ee:71:42:d2:61:dd:70:28:76:c1:e7:
         6f:9f:9d:67:e6:c0:9f:64:18:fb:b1:a4:83:6a:98:0c:8c:26:
         12:24:95:51:39:23:39:71:55:39:05:d3:14:e1:c2:a0:6d:9b:
         bb:e2:c9:30:f6:86:4a:0e:42:70:45:ac:82:33:79:f5:d1:c5:
         93:c7:ef:6b:41:fa:4e:ae:0c:e6:68:ea:22:e9:91:c6:ad:cc:
         77:b1:fd:1b:c5:5d:4c:36:f6:a9:fc:a8:24:2e:7f:91:05:f0:
         83:a9:26:bf:06:42:8d:57:9d:47:ee:9a:a2:87:8d:7f:93:a5:
         d1:47:1c:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7Nc8XVd35GAezZG8Qvn/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMmVjMGE5YjllNjBlODY1MjE2OGNhNjlkOTIzOWYyNzMw
N2MzNzIwHhcNMjYwMTAxMjAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDNlNjlkNDFkNDhjNDA2NjY0MGVjZWRlODA2YTc3YzYxMzA1NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwISoWR9XAU8du6yc0kJ+gzz82GmA
sIiNZC2EUNowFjv9271sbe/WIhvvg5bJsTwz3t53/AuEJ2aRMo/Yr47dFakNzLZ8
CG3q5GFwL6yXPZXzcPflzMUkpJZgtPU3GQaklp3lOz6mYXKi9u6On2DVil0Yo2Q/
N+4NGTW5akcpeOhQWybjK03Ij6xmMORsYFz+JrMLM0Prtu5ELVNP1CqMH8dG2CWX
GgPWeKfKStuaaTAN2JESI4IBJ91A65cODe2ojXagbOiu5cGPh1OSdHuMpxGxJJk4
+IK1ajaJL+bCDX4+fV4W7JUcsyQW/0XY/qB5q5ZIQG1KNEzolHoDV2Yf5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBA+adQdSMQGZkDs7egGp3xhMFYgMB8GA1UdIwQY
MBaAFEsuwKm55g6GUhaMpp2SOfJzB8NyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3k3QXFibm1Eb1pTRm95bW5aSTU4bk1IdzNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mZDUzZjctODMxNS00MGQyLTkxNWIt
Y2QwZjU5YzI4ZDJkLzEvRUQ1cDFCMUl4QVptUU96dDZBYW5mR0V3VmlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mZDUzZjctODMxNS00MGQyLTkxNWItY2QwZjU5YzI4ZDJk
LzEvU3k3QXFibm1Eb1pTRm95bW5aSTU4bk1IdzNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjJuMA0G
CSqGSIb3DQEBCwUAA4IBAQAisK1DVJysXgigLoXn9qhZqqiOdvSPPs5iUB3zaWkZ
41l705u0mgLeJ5YnwQM09NCq2LmrNGemqCxanS8DxJ8xvMsaNhP1QKK5WKpHHeap
svf3+DPixzxNiIOCr5JqRNVOCAk4dkQsAE0Lz3++aS9a3ZR1z+nc+3oD89Yjgmyd
Szy9kthp7nFC0mHdcCh2wedvn51n5sCfZBj7saSDapgMjCYSJJVROSM5cVU5BdMU
4cKgbZu74skw9oZKDkJwRayCM3n10cWTx+9rQfpOrgzmaOoi6ZHGrcx3sf0bxV1M
Nvap/KgkLn+RBfCDqSa/BkKNV51H7pqih41/k6XRRxyJ
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:32:27 2026 by rpki-client