This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fWenl3kqzuOILIVKIdWwg1EHblE.roa
File:                     fWenl3kqzuOILIVKIdWwg1EHblE.roa (raw, json)
Hash identifier:          SyW/75QuUgvbvHODz4azAnY4VnHqw/B+sNi/eNwJluA=
Subject key identifier:   7D:67:A7:97:79:2A:CE:E3:88:2C:85:4A:21:D5:B0:83:51:07:6E:51
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       019B76EAD001B7E7284E36375D8450A831A5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fWenl3kqzuOILIVKIdWwg1EHblE.roa
Signing time:             Thu 01 Jan 2026 00:17:38 +0000
ROA not before:           Thu 01 Jan 2026 00:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207633
IP address blocks:        5.180.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:d0:01:b7:e7:28:4e:36:37:5d:84:50:a8:31:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Jan  1 00:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d67a797792acee3882c854a21d5b08351076e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:92:08:83:9a:70:76:78:c8:95:da:af:9a:
                    03:29:45:6e:b4:9d:51:54:56:9f:5e:25:96:d7:45:
                    17:65:c3:64:98:2d:07:77:0d:4f:26:1c:64:b7:87:
                    68:be:42:e0:26:8f:c9:4e:b7:32:f7:63:a1:90:45:
                    46:b3:6c:9c:c4:9e:59:b2:cc:6a:8c:87:93:d8:b7:
                    3d:ec:37:40:f9:93:c5:fa:1a:33:23:7d:17:2a:47:
                    ed:56:1d:20:57:96:bc:69:c4:85:53:1f:00:11:9a:
                    ba:5d:f5:93:63:91:77:b9:92:5e:1f:74:95:c2:0f:
                    04:b6:9a:e7:15:5b:35:30:e7:6d:a2:e8:a1:32:1f:
                    19:2b:87:3b:96:44:5d:59:e6:9e:e6:79:68:b2:71:
                    d9:0a:6a:01:b1:c5:2a:07:32:8c:6f:1b:57:3b:a6:
                    99:22:e2:a9:e0:cb:7a:39:c1:1f:17:8b:ad:92:21:
                    1a:a5:aa:fe:9e:69:d4:6a:b8:1f:33:4b:61:a5:cc:
                    64:4f:73:cf:86:df:cd:6b:3d:5c:95:69:c3:90:d7:
                    fd:3c:79:3c:14:b6:a8:51:8c:e1:a4:89:bf:ea:03:
                    3d:2b:c6:f0:8d:c2:4a:55:c5:72:0e:ec:3c:d6:2c:
                    52:40:ce:c9:df:50:b9:fd:77:15:11:50:94:0f:a7:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:67:A7:97:79:2A:CE:E3:88:2C:85:4A:21:D5:B0:83:51:07:6E:51
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fWenl3kqzuOILIVKIdWwg1EHblE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:c9:c9:4e:71:80:49:ed:6c:71:05:e6:92:3d:8c:83:35:32:
         ee:48:51:1b:e8:92:5c:21:18:20:44:8c:01:f7:ad:25:08:22:
         14:a1:48:00:c2:cb:7a:9e:fb:64:b7:fc:45:a9:08:10:50:f6:
         aa:d6:be:2e:3e:49:21:0d:53:22:fe:3a:ac:26:4d:b9:dd:46:
         43:5f:0f:18:10:33:91:40:d1:b8:85:b3:03:93:38:2f:2b:89:
         99:69:f0:a9:72:5d:4a:9a:45:c3:2c:4c:57:c2:cd:28:5f:89:
         bb:9d:87:ad:d2:c8:b4:2d:e3:19:d5:ad:d8:25:6a:d5:71:f2:
         46:c9:03:b4:85:c6:0d:b4:74:80:af:dc:c7:a6:95:0c:77:20:
         18:30:b1:d2:e8:f1:f1:81:a2:6e:89:fb:35:9b:09:94:54:88:
         a3:ce:66:ca:fa:5b:d0:5c:d4:3d:73:70:a8:d8:75:da:ff:12:
         3f:38:8b:f0:5b:97:57:55:14:32:d6:1c:3a:42:3a:9f:57:5e:
         06:db:f5:69:68:bf:05:93:6b:0c:d6:65:4d:c6:fc:92:fb:e1:
         bc:f2:ab:b8:b8:57:7d:0b:3c:40:43:73:ad:db:c2:12:7e:1a:
         9f:11:14:3f:23:03:d0:f0:e9:23:ad:96:5e:18:14:dd:9d:0a:
         a9:59:c3:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26tABt+coTjY3XYRQqDGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDY3YTc5Nzc5MmFjZWUzODgyYzg1NGEyMWQ1YjA4MzUxMDc2ZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIiSCIOacHZ4yJXar5oDKUVutJ1R
VFafXiWW10UXZcNkmC0Hdw1PJhxkt4dovkLgJo/JTrcy92OhkEVGs2ycxJ5Zssxq
jIeT2Lc97DdA+ZPF+hozI30XKkftVh0gV5a8acSFUx8AEZq6XfWTY5F3uZJeH3SV
wg8EtprnFVs1MOdtouihMh8ZK4c7lkRdWeae5nlosnHZCmoBscUqBzKMbxtXO6aZ
IuKp4Mt6OcEfF4utkiEapar+nmnUargfM0thpcxkT3PPht/Naz1clWnDkNf9PHk8
FLaoUYzhpIm/6gM9K8bwjcJKVcVyDuw81ixSQM7J31C5/XcVEVCUD6c2HwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1np5d5Ks7jiCyFSiHVsINRB25RMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvZldlbmwza3F6dU9JTElWS0lkV3dnMUVIYmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbQgMA0G
CSqGSIb3DQEBCwUAA4IBAQASyclOcYBJ7WxxBeaSPYyDNTLuSFEb6JJcIRggRIwB
960lCCIUoUgAwst6nvtkt/xFqQgQUPaq1r4uPkkhDVMi/jqsJk253UZDXw8YEDOR
QNG4hbMDkzgvK4mZafCpcl1KmkXDLExXws0oX4m7nYet0si0LeMZ1a3YJWrVcfJG
yQO0hcYNtHSAr9zHppUMdyAYMLHS6PHxgaJuifs1mwmUVIijzmbK+lvQXNQ9c3Co
2HXa/xI/OIvwW5dXVRQy1hw6QjqfV14G2/VpaL8Fk2sM1mVNxvyS++G88qu4uFd9
CzxAQ3Ot28ISfhqfERQ/IwPQ8OkjrZZeGBTdnQqpWcMP
-----END CERTIFICATE-----
Generated at Wed Jan 21 16:15:40 2026 by rpki-client