This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/4C5txelxptdoicijUbZlUymO1KI.roa
File:                     4C5txelxptdoicijUbZlUymO1KI.roa (raw, json)
Hash identifier:          n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=
Subject key identifier:   E0:2E:6D:C5:E9:71:A6:D7:68:89:C8:A3:51:B6:65:53:29:8E:D4:A2
Certificate issuer:       /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial:       019B7C127C6BABDDEE924A6E3260F299E25A
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/4C5txelxptdoicijUbZlUymO1KI.roa
Signing time:             Fri 02 Jan 2026 00:19:04 +0000
ROA not before:           Fri 02 Jan 2026 00:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        185.94.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:7c:6b:ab:dd:ee:92:4a:6e:32:60:f2:99:e2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
        Validity
            Not Before: Jan  2 00:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e02e6dc5e971a6d76889c8a351b66553298ed4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:93:85:d0:87:e0:61:99:76:b6:18:fe:cb:
                    86:b5:e4:67:69:52:c2:bd:45:00:80:f9:e6:5a:69:
                    81:ae:20:aa:51:96:38:2f:36:68:be:bb:a3:82:d7:
                    8a:dc:34:c4:76:a0:56:b4:cc:b4:9b:a5:14:a5:95:
                    37:ae:72:41:37:83:1b:c5:6c:2d:67:60:d0:66:7c:
                    26:7c:4f:fe:41:2e:a4:8b:40:80:dd:49:e8:2c:0d:
                    02:5e:ff:91:3d:ac:12:00:8b:75:9e:71:81:64:1d:
                    a0:69:fd:98:b7:03:9c:13:59:b2:80:48:be:48:c7:
                    8f:2a:6a:87:70:cc:33:33:a7:47:81:04:f6:e9:08:
                    8d:36:73:76:53:f6:83:94:87:ce:8d:4e:63:05:16:
                    a0:b8:43:cd:9e:78:85:f0:dc:75:ce:94:8a:64:74:
                    52:8c:6a:09:29:03:89:42:34:0f:95:58:20:99:8c:
                    56:0d:a1:3a:8f:73:5a:42:e1:96:b3:c8:fc:55:25:
                    07:dd:4e:c6:2b:1d:35:5e:5b:b5:6e:4f:a6:7c:be:
                    9b:03:a5:54:c6:4f:ed:0f:54:47:a0:ac:ff:56:b3:
                    53:53:80:53:da:ce:ad:c9:ed:24:c1:07:d2:e7:06:
                    5a:5a:42:48:d6:4b:4d:a1:18:09:1a:d2:9c:20:2b:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:6D:C5:E9:71:A6:D7:68:89:C8:A3:51:B6:65:53:29:8E:D4:A2
            X509v3 Authority Key Identifier:
                keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/4C5txelxptdoicijUbZlUymO1KI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.94.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b5:0d:39:05:59:d9:e9:0b:6b:29:51:14:76:19:6c:ea:ec:
         cf:5e:1a:a7:db:e9:51:5d:1d:d5:9e:85:22:4e:9d:4b:94:7f:
         a2:29:48:64:17:4f:fc:7d:42:05:61:cf:f4:14:a0:a4:12:61:
         c7:38:c0:f5:4a:30:0e:3b:36:0b:15:3e:a0:40:b8:63:59:14:
         10:ae:52:ea:c5:69:d7:fc:f5:bd:24:84:1b:c0:56:8e:89:34:
         bc:85:62:99:3d:0e:02:01:c2:5c:02:ba:3f:24:0f:04:70:cb:
         e6:15:12:f9:8d:3a:d1:c6:7f:b7:8a:df:74:75:5d:18:b3:c2:
         7f:68:50:ab:82:2e:ef:1a:a8:2a:5b:4c:5f:ba:ca:ed:64:0a:
         61:e5:41:5e:47:38:87:25:69:0c:bb:9b:83:fe:ec:63:db:4c:
         d1:d5:48:8c:e3:62:58:f0:69:2c:ad:ef:e1:77:90:90:c4:95:
         37:85:c1:fb:d7:bd:34:da:b3:f5:85:cf:82:d6:ca:bf:6d:ca:
         23:7e:24:1b:20:47:bd:8f:59:17:74:39:66:d0:6e:58:56:28:
         22:05:d6:b0:ea:fb:c8:ea:b7:9b:9b:1a:21:0b:4b:82:48:91:
         0d:34:5c:7f:d9:b8:42:4e:71:5f:e7:34:f0:3d:22:db:f9:8a:
         a2:1c:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:59:31 2026 by rpki-client