This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SiI2SweNuMw3Zh5hN0AodnHSZK4.roa
File:                     SiI2SweNuMw3Zh5hN0AodnHSZK4.roa (raw, json)
Hash identifier:          Ja7prbcEfWRWN6iJlFWBHvB00+46h6yhrgI24su9Th0=
Subject key identifier:   4A:22:36:4B:07:8D:B8:CC:37:66:1E:61:37:40:28:76:71:D2:64:AE
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       019B77C6E23CD95CC8425D86BA1E3BD7B9AF
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SiI2SweNuMw3Zh5hN0AodnHSZK4.roa
Signing time:             Thu 01 Jan 2026 04:18:01 +0000
ROA not before:           Thu 01 Jan 2026 04:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58061
IP address blocks:        195.14.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 13:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:e2:3c:d9:5c:c8:42:5d:86:ba:1e:3b:d7:b9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Jan  1 04:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a22364b078db8cc37661e613740287671d264ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:49:11:ce:42:c4:7f:a3:89:5e:1a:cc:fd:
                    a7:d9:f1:42:95:3b:7e:0f:12:87:23:f2:47:38:ba:
                    7f:15:17:29:90:8b:4a:79:8b:5f:ad:0f:34:41:9d:
                    48:19:a2:51:92:3e:4a:30:42:3b:6e:54:00:54:5a:
                    dc:69:53:13:96:58:1f:a5:e1:42:49:9d:cb:6f:e7:
                    76:80:e6:3e:21:48:10:51:36:e9:45:e2:a4:65:22:
                    c7:17:4f:a8:89:89:20:2e:63:d9:16:b6:5e:74:b2:
                    b0:6b:a2:a2:f5:d3:16:fe:19:8f:f0:80:c5:54:dd:
                    f0:e0:f6:a8:ea:bf:77:b8:62:f7:a5:8c:87:ff:91:
                    65:2c:6a:8c:80:8a:a0:a3:82:b3:a9:84:b1:12:2a:
                    13:0e:57:fd:1b:4b:c1:2c:3e:a5:83:2a:51:33:2c:
                    c3:67:61:0a:60:08:6f:c3:fb:51:40:03:5e:c1:06:
                    25:48:54:7c:74:64:d9:6f:ba:cb:58:d0:2a:61:1d:
                    33:8d:84:62:06:d8:77:4b:62:a3:13:aa:f1:d7:ad:
                    eb:9c:21:8b:66:c0:64:e9:bc:df:c8:af:4a:0d:64:
                    dc:88:44:69:3f:b1:75:b1:7d:97:aa:16:4a:e3:45:
                    71:c3:f6:ae:f3:9d:9e:0f:1e:54:ea:f0:25:60:1c:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:22:36:4B:07:8D:B8:CC:37:66:1E:61:37:40:28:76:71:D2:64:AE
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/SiI2SweNuMw3Zh5hN0AodnHSZK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.14.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:e0:cc:8c:23:49:c6:ee:69:26:11:8b:f1:1a:6c:df:39:05:
         bc:67:a3:bd:00:bb:75:15:26:01:de:84:21:c7:20:fa:54:94:
         5e:f7:c9:25:50:86:81:36:a6:b9:c7:53:5b:f1:d7:6a:15:0b:
         46:8c:2a:8a:f4:fe:b7:4c:45:f7:7f:07:cb:43:4b:63:b9:cf:
         d8:22:41:fd:97:5d:a4:60:08:7b:5b:be:d4:99:09:01:fa:80:
         61:a1:17:2e:fb:9f:ff:2b:6d:d3:08:ee:81:a1:1d:99:0d:6a:
         27:75:02:f1:d6:48:1a:ab:24:73:54:a5:17:7b:1c:a1:e4:16:
         d9:c5:8d:86:74:fb:b4:3b:84:3a:f9:24:8e:18:fd:ec:fc:6e:
         42:78:bf:07:4e:0e:52:6e:c7:61:72:29:66:02:c3:dd:e1:1b:
         e3:1d:8a:ff:84:53:7d:84:76:e5:38:f7:97:07:b0:28:ea:d9:
         2b:9c:e9:8f:af:ba:2b:91:a5:2e:c4:24:df:9f:82:3f:c5:ee:
         42:db:33:26:2b:55:37:75:55:be:27:aa:09:e8:01:4e:1a:bb:
         45:7a:b9:bb:35:b6:fb:02:66:20:68:36:5d:87:97:b0:b5:1c:
         ca:78:ce:17:8f:86:21:dd:59:bf:75:ef:1f:31:99:0e:f1:53:
         46:39:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 21:35:50 2026 by rpki-client