This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/p3_p0oefeCWIGWl--B6scwMOl68.roa
File:                     p3_p0oefeCWIGWl--B6scwMOl68.roa (raw, json)
Hash identifier:          TzUMNS4PCBQmbQd3CE8J49kK3X/KRKK4UzkYkcKRrPc=
Subject key identifier:   A7:7F:E9:D2:87:9F:78:25:88:19:69:7E:F8:1E:AC:73:03:0E:97:AF
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019B76EAD1F1D416CCEE4388ED908A428468
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/p3_p0oefeCWIGWl--B6scwMOl68.roa
Signing time:             Thu 01 Jan 2026 00:17:39 +0000
ROA not before:           Thu 01 Jan 2026 00:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204922
IP address blocks:        5.180.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:d1:f1:d4:16:cc:ee:43:88:ed:90:8a:42:84:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Jan  1 00:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a77fe9d2879f78258819697ef81eac73030e97af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1a:1a:c5:02:14:03:d2:2e:30:6c:b6:5e:db:
                    db:d7:49:c8:e1:8c:32:40:61:08:69:88:6f:91:e9:
                    54:a5:f6:4c:91:35:e9:cc:b5:2b:1b:1f:ab:1b:49:
                    3f:8d:5c:34:96:b0:26:4a:31:ac:9f:b5:76:af:be:
                    3d:f6:a4:6f:4d:26:66:fa:88:39:6d:56:dc:c4:cb:
                    57:cc:49:00:16:90:9c:23:18:b8:99:51:d5:9f:4b:
                    a4:0b:ad:09:4f:6a:41:ad:16:05:d7:ee:b4:aa:1a:
                    62:c8:6f:87:c2:25:76:9a:3f:86:12:02:d7:8e:20:
                    3b:71:ee:43:82:b1:6a:d9:1e:1c:cd:49:97:e8:8c:
                    2e:21:f6:e9:aa:61:89:f5:d6:b6:1b:28:50:f7:82:
                    2f:de:2b:fe:0a:f8:91:b5:25:f8:52:92:dc:70:3d:
                    b2:ec:9e:47:05:da:8d:f1:c6:cd:a7:64:84:c4:59:
                    0e:76:74:9e:9d:91:e3:9a:27:ae:dd:75:e3:01:2d:
                    de:07:57:42:5f:fd:b5:d9:09:6d:3b:69:bb:12:96:
                    36:f2:65:6d:0b:59:84:49:e9:d3:ee:c1:4d:83:db:
                    d1:f1:93:20:95:b4:51:2b:0a:a8:d9:ea:be:04:ee:
                    fd:cc:2d:83:69:a0:5d:8e:83:f7:35:f5:99:d0:8d:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7F:E9:D2:87:9F:78:25:88:19:69:7E:F8:1E:AC:73:03:0E:97:AF
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/p3_p0oefeCWIGWl--B6scwMOl68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:69:ee:07:e5:d6:ca:61:9c:66:63:ed:23:d1:5b:19:a2:4a:
         91:1f:48:09:24:78:b3:38:71:13:9a:2a:0c:23:26:c7:9c:7f:
         b3:23:bb:c3:f8:f8:81:06:d4:f6:15:2a:ac:66:b5:e6:5d:5f:
         6d:cb:30:b5:c5:ae:67:d2:ba:33:90:e3:8f:85:05:35:71:cd:
         68:d6:c0:18:4a:b4:8b:0b:96:ef:4d:4a:b2:81:7e:e2:8e:9d:
         aa:6a:41:da:4c:07:db:33:a6:ae:08:63:ef:46:32:63:19:85:
         4e:18:6f:de:79:73:23:ab:89:16:af:73:37:07:58:ff:40:f3:
         ff:6c:6e:72:f2:7c:2d:eb:99:c0:fe:6f:3b:30:68:f6:9b:af:
         c3:e7:7d:98:ee:f9:03:8f:fb:d1:4e:02:49:b3:82:03:6c:8b:
         26:92:99:ef:35:49:44:19:ab:f6:1f:c7:92:77:38:90:f1:c1:
         8f:b4:d9:45:f7:68:10:f5:93:c2:5d:b3:e4:33:08:12:40:ff:
         8d:00:36:04:c0:89:3b:3f:16:65:c2:01:b1:7d:6c:f5:6e:0a:
         8f:bb:04:44:46:d9:1a:dc:0a:ae:5f:ec:4f:89:92:d0:63:62:
         52:45:62:a7:06:7e:0d:bd:c9:c5:d8:74:aa:a9:fa:fe:7c:34:
         be:1f:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:29:52 2026 by rpki-client