This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/taZbUsGibT55ZZu6Th_Go_ILjiU.roa
File:                     taZbUsGibT55ZZu6Th_Go_ILjiU.roa (raw, json)
Hash identifier:          d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=
Subject key identifier:   B5:A6:5B:52:C1:A2:6D:3E:79:65:9B:BA:4E:1F:C6:A3:F2:0B:8E:25
Certificate issuer:       /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial:       019B76EB6D40688537D0CAAE6D7F18A9DD9C
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/taZbUsGibT55ZZu6Th_Go_ILjiU.roa
Signing time:             Thu 01 Jan 2026 00:18:18 +0000
ROA not before:           Thu 01 Jan 2026 00:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60759
IP address blocks:        188.95.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:6d:40:68:85:37:d0:ca:ae:6d:7f:18:a9:dd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
        Validity
            Not Before: Jan  1 00:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b5a65b52c1a26d3e79659bba4e1fc6a3f20b8e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:5f:13:22:a8:a5:0e:ab:13:b0:8d:8b:a1:
                    ed:b3:7b:f5:09:9d:31:bb:16:50:29:24:c9:c1:d7:
                    cc:39:cc:30:0a:53:32:a4:92:87:89:c7:17:a0:0a:
                    2e:11:c7:64:e7:ea:10:a0:6f:d6:d2:c8:56:29:34:
                    a9:5a:69:41:d6:31:9b:0e:4b:9a:6b:97:e3:7b:cd:
                    ad:c4:6a:5f:42:59:f8:1d:b5:d1:95:66:c8:fb:c0:
                    15:d3:f9:6c:63:aa:eb:86:3e:70:7e:fa:84:11:5f:
                    5e:5d:3e:bc:92:ba:15:5c:8b:0d:08:c7:a3:39:a4:
                    cc:42:97:cb:46:a4:0f:77:7c:36:86:65:dd:f0:6a:
                    69:25:ea:7d:7a:06:af:87:a3:53:a8:fe:a9:04:46:
                    d1:0a:32:7b:12:d3:40:0e:3c:21:ee:98:c9:d3:4b:
                    7c:98:8c:fa:78:39:76:0b:fd:b4:95:49:a7:4c:03:
                    01:cb:bc:1e:49:6e:eb:e8:77:d9:bf:27:a0:12:3b:
                    0c:de:7c:65:96:b3:4c:73:35:04:6f:ce:57:c9:53:
                    ef:1a:e2:a6:2a:2f:3c:d8:0e:cc:e8:59:a3:a9:8b:
                    b8:46:73:b2:85:16:9c:05:6e:83:10:19:af:a9:a8:
                    46:44:bf:c4:cd:0b:2a:c2:b6:7c:db:8c:db:4a:00:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A6:5B:52:C1:A2:6D:3E:79:65:9B:BA:4E:1F:C6:A3:F2:0B:8E:25
            X509v3 Authority Key Identifier:
                keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/taZbUsGibT55ZZu6Th_Go_ILjiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:4e:82:2e:92:5c:7e:33:38:ff:3e:ed:4e:34:22:90:97:90:
         d1:16:ef:bd:7a:7f:a0:d8:64:a5:14:2e:67:f4:21:18:8d:64:
         3d:0f:32:18:87:db:85:a9:be:aa:a7:29:ad:4e:1f:71:a4:f5:
         dd:34:b6:43:61:83:58:c2:0b:26:36:7d:0a:aa:75:45:96:32:
         91:34:07:6e:aa:1e:36:ab:79:56:c1:44:31:d1:ca:8a:f2:c2:
         01:39:45:eb:ff:5a:e7:13:95:f6:2b:62:50:2e:cf:28:9a:d0:
         c5:cb:78:1a:ce:47:48:ac:80:fa:63:6f:48:98:43:8f:29:8d:
         8a:eb:08:f3:d0:97:c9:40:da:b1:a5:3e:b6:c1:24:ca:45:e6:
         54:16:12:27:4b:ff:28:7c:95:fa:61:6a:b2:e3:03:40:f6:fd:
         4b:71:4c:42:9f:58:24:db:c2:b6:6d:ea:80:8a:00:33:5f:44:
         a9:33:83:35:b0:92:0e:51:dd:6d:f6:53:cb:90:13:a7:4d:b7:
         c4:e5:ec:e6:81:13:4c:b0:48:c6:f5:d9:13:09:a0:28:20:b9:
         dc:e2:45:71:77:c5:d8:54:fa:48:a3:df:be:c4:1b:b3:6c:b7:
         93:f1:a9:13:d5:99:24:ba:38:d9:d1:ad:d9:f6:47:2c:4b:19:
         36:bf:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:48 2026 by rpki-client