This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/x1IDat6YDBdzEhpue2RnoEodHRk.roa
File:                     x1IDat6YDBdzEhpue2RnoEodHRk.roa (raw, json)
Hash identifier:          GNbqBnSl6BYmQm/dEuII/J8pPs8l3TWXFnBRJpdqWP0=
Subject key identifier:   C7:52:03:6A:DE:98:0C:17:73:12:1A:6E:7B:64:67:A0:4A:1D:1D:19
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019B76EAD2DE3DAA16BDD7477209739F8F78
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/x1IDat6YDBdzEhpue2RnoEodHRk.roa
Signing time:             Thu 01 Jan 2026 00:17:39 +0000
ROA not before:           Thu 01 Jan 2026 00:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207346
IP address blocks:        5.180.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:d2:de:3d:aa:16:bd:d7:47:72:09:73:9f:8f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Jan  1 00:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c752036ade980c1773121a6e7b6467a04a1d1d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:41:c7:1d:b7:3b:b2:81:d9:fb:a6:15:52:
                    7b:b9:fd:19:c3:37:11:8d:2a:3a:2a:ad:e1:f1:88:
                    b4:ac:cb:7f:24:84:96:5f:86:ad:c4:de:f2:86:de:
                    0b:10:41:71:aa:22:17:87:e7:9a:43:df:86:f2:20:
                    7f:51:d5:1e:d9:bb:67:0b:1d:ea:ce:06:6e:f2:a0:
                    27:4e:36:f2:4c:67:37:7a:e4:53:f1:8c:59:c7:74:
                    4c:56:66:4a:dd:3b:61:cc:e5:54:88:a2:e4:f7:5a:
                    11:27:31:87:0d:e8:34:a6:16:80:7a:27:8b:25:f2:
                    99:4b:b0:c5:88:25:78:e0:59:2f:7c:6b:38:1a:c6:
                    56:a2:65:5c:24:16:35:1a:d7:80:9b:fd:b5:ce:63:
                    eb:eb:20:7d:74:6a:f5:5c:e4:11:b4:f0:a5:44:dd:
                    50:22:7a:c5:ff:53:cf:bb:98:8e:62:e3:2d:75:c7:
                    51:ad:55:3b:77:c9:96:09:97:91:26:23:b8:42:eb:
                    b0:f6:f0:d2:f1:40:e2:5c:35:f9:85:6e:20:83:59:
                    27:c8:e0:2d:2d:b9:ae:2c:5b:f2:af:e0:a8:b9:1d:
                    b7:28:8e:2b:ed:16:4a:80:bd:af:c8:91:51:af:8e:
                    7c:9d:b0:0e:de:bc:19:2b:f7:fc:60:6f:c7:b2:c1:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:52:03:6A:DE:98:0C:17:73:12:1A:6E:7B:64:67:A0:4A:1D:1D:19
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/x1IDat6YDBdzEhpue2RnoEodHRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:58:23:f0:45:4c:7a:e2:47:70:7e:d6:32:59:10:5c:3d:e8:
         26:cd:23:f9:27:5a:76:31:d8:a9:3c:bc:01:af:a0:59:24:7a:
         9f:7b:74:88:50:07:77:43:28:ce:a3:f7:9c:ee:56:dc:96:48:
         a6:98:cd:e7:cf:65:b4:57:76:98:e3:0a:29:88:d8:f5:cd:02:
         8a:dc:b0:4c:fe:aa:de:a0:ba:ec:1e:06:fe:9b:1e:ff:77:48:
         fc:e4:5a:a7:30:1e:6f:c0:9f:6f:bf:ae:7b:2e:97:03:98:4e:
         b5:6f:01:30:4c:8e:da:38:8f:6f:87:c6:27:7f:1a:15:55:d2:
         6f:4b:c6:2a:2f:b1:7a:f9:06:d8:28:e1:25:6b:63:e8:3b:03:
         52:a4:1c:96:4d:22:a1:de:5e:04:b0:6b:65:80:65:fb:fe:3f:
         fc:b4:a4:ca:35:d2:4e:0c:9e:e2:41:d0:60:54:f7:35:00:59:
         df:7e:03:d0:7a:66:4b:20:61:20:2c:f7:a4:4d:2f:f6:e3:86:
         fd:bf:bb:92:4c:6b:7d:ea:0c:01:56:1f:6f:03:b1:7b:e2:1f:
         20:8e:0c:2a:32:88:a0:5c:de:06:69:0d:09:38:eb:87:3f:5c:
         d3:3d:ab:4c:a0:3b:cb:49:7d:33:9c:6e:0a:3b:44:70:46:8d:
         66:28:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:14 2026 by rpki-client