This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/5Ue6FKrFYwLCWFcV_zsLxP-Ttlc.roa
File:                     5Ue6FKrFYwLCWFcV_zsLxP-Ttlc.roa (raw, json)
Hash identifier:          vHRw1aMy6QtggdL865LadOSRH74ZxGkEgwi3zn9M/rU=
Subject key identifier:   E5:47:BA:14:AA:C5:63:02:C2:58:57:15:FF:3B:0B:C4:FF:93:B6:57
Certificate issuer:       /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial:       019B79ED595435239255E9AEB9848A0CE143
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/5Ue6FKrFYwLCWFcV_zsLxP-Ttlc.roa
Signing time:             Thu 01 Jan 2026 14:19:16 +0000
ROA not before:           Thu 01 Jan 2026 14:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58204
IP address blocks:        91.239.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:59:54:35:23:92:55:e9:ae:b9:84:8a:0c:e1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
        Validity
            Not Before: Jan  1 14:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e547ba14aac56302c2585715ff3b0bc4ff93b657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:c8:a6:10:d5:9e:88:cd:55:0d:2d:c1:45:
                    bb:3c:3d:15:3f:d1:e9:c8:38:82:38:81:14:69:cb:
                    f4:80:0d:6d:65:bb:28:c2:f6:5a:2e:91:f7:27:ef:
                    f1:27:4f:a4:99:88:23:4c:e5:d3:90:86:2d:7b:00:
                    53:95:ee:94:e4:07:04:55:25:35:be:eb:0d:cd:2b:
                    80:d5:09:c5:ba:26:ae:f0:07:bb:72:ff:e9:c9:77:
                    e7:40:8a:d4:bc:cf:1f:ab:05:7f:b4:f3:db:a4:35:
                    77:7d:67:44:7b:a5:12:4d:97:cd:f0:80:40:78:c3:
                    4c:68:50:d7:88:7b:39:e0:60:0f:9c:44:15:1d:c1:
                    c6:30:88:45:51:d0:5d:d8:49:51:53:50:52:23:87:
                    b5:17:9b:54:9e:1f:8d:f8:8e:c3:64:16:47:01:61:
                    fe:50:64:4f:1c:49:fe:61:c3:55:87:05:19:d9:81:
                    89:e9:bb:37:52:da:d9:e3:f5:69:2d:3f:0a:68:a7:
                    1c:e8:d5:c7:1c:1f:32:28:34:13:e5:42:7d:58:02:
                    a0:cc:54:6b:d8:30:ec:e0:23:da:98:c0:60:c3:2a:
                    2a:eb:d3:45:bb:3b:19:34:33:7b:65:f8:40:51:62:
                    01:a5:1e:7f:29:be:fd:ec:f4:8f:11:68:b1:d6:e8:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:47:BA:14:AA:C5:63:02:C2:58:57:15:FF:3B:0B:C4:FF:93:B6:57
            X509v3 Authority Key Identifier:
                keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/5Ue6FKrFYwLCWFcV_zsLxP-Ttlc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:7f:14:81:35:2d:76:13:45:a6:8c:60:02:30:83:bb:89:09:
         87:f8:e6:f5:bb:6b:bb:df:15:0b:41:7c:92:85:27:0e:3f:8e:
         c2:c7:47:40:69:9d:13:de:33:48:c5:31:38:70:8c:79:39:f2:
         fb:28:52:24:38:e0:a7:28:db:a8:d9:a9:28:29:f5:3a:05:eb:
         0d:1f:e3:16:e5:f3:0c:d3:be:a3:b7:e3:ba:b1:f3:00:65:82:
         ec:3b:84:49:c1:0e:f0:d8:3f:90:1d:26:8e:6c:67:37:c9:ab:
         8b:0b:b5:48:17:92:c6:32:c8:cc:30:6f:62:7b:e3:35:6d:c1:
         f8:ca:c5:eb:66:96:55:37:f3:a8:5c:90:b4:0b:bc:37:e8:bb:
         93:d9:ab:56:07:c3:f5:1f:25:c7:de:ec:2c:67:2c:b3:ca:5e:
         ec:47:03:9e:b8:64:34:c3:c9:71:8c:7a:2f:fd:2b:51:ed:ac:
         4f:86:53:7c:f0:66:2a:4b:37:78:ab:98:b7:4e:7d:dc:ac:b8:
         4a:c3:b9:c7:6e:1f:b6:82:9b:ef:00:c2:8b:a7:44:f0:92:c2:
         0a:c4:ce:3c:2b:b5:a1:3e:f6:f7:51:7e:1c:cf:c8:93:c0:8a:
         4d:cb:e6:8b:36:03:85:09:b5:8e:b4:97:c6:fc:9a:5b:9c:ae:
         92:bb:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:22 2026 by rpki-client