This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5TamKQRKAykbyReRjkKJlIwBaZQ.roa
File:                     5TamKQRKAykbyReRjkKJlIwBaZQ.roa (raw, json)
Hash identifier:          2Nui7XnhnCO+H/1I8EtyInUUILiHHYasZIkGxJ75sYI=
Subject key identifier:   E5:36:A6:29:04:4A:03:29:1B:C9:17:91:8E:42:89:94:8C:01:69:94
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       019B797E22EA99DFB8B19CD9A665A4B34B71
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5TamKQRKAykbyReRjkKJlIwBaZQ.roa
Signing time:             Thu 01 Jan 2026 12:17:48 +0000
ROA not before:           Thu 01 Jan 2026 12:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        128.0.118.0/24 maxlen: 32
                          185.115.206.0/24 maxlen: 32
                          185.133.195.0/24 maxlen: 32
                          185.137.181.0/24 maxlen: 32
                          185.146.195.0/24 maxlen: 32
                          185.205.68.0/24 maxlen: 32
                          185.207.212.0/24 maxlen: 32
                          185.251.234.0/24 maxlen: 32
                          194.113.164.0/24 maxlen: 32
                          194.113.169.0/24 maxlen: 32
                          194.113.170.0/24 maxlen: 32
                          194.113.172.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:22:ea:99:df:b8:b1:9c:d9:a6:65:a4:b3:4b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 12:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e536a629044a03291bc917918e4289948c016994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:c9:e6:1d:f3:86:86:ee:41:dc:2f:9d:2b:
                    b0:9c:be:61:3d:2e:1d:51:34:7d:c1:3f:b4:1c:ad:
                    be:b9:e0:9c:64:aa:95:39:85:fd:ed:4c:9c:f9:6d:
                    f9:9c:4f:64:f7:5e:80:02:0b:4c:d9:34:ba:73:cb:
                    5a:e7:aa:d3:18:64:03:01:63:1a:5e:15:bf:4b:3c:
                    c7:cd:62:cd:75:78:f6:fa:bb:b0:6c:16:15:72:a4:
                    a3:86:6b:fc:a6:15:21:10:ac:2b:90:23:1e:77:31:
                    95:05:e8:7a:d2:43:87:d6:e7:49:60:ec:9c:aa:05:
                    50:57:0d:58:aa:5a:82:25:43:8e:fa:9f:eb:0b:61:
                    6f:ac:7a:cb:57:9d:29:5c:81:01:47:8b:41:b8:ea:
                    f7:18:9a:2b:10:18:0e:28:b5:50:42:5c:3a:8d:c9:
                    e3:18:f9:5e:41:43:0d:e6:9c:1a:d1:1d:8e:5a:b1:
                    aa:26:0c:c8:d8:76:82:89:62:0f:b5:53:b4:6f:6d:
                    5a:6b:9c:a6:b5:58:a4:a5:71:49:95:82:f6:46:a5:
                    ef:fa:cf:7e:0d:fc:9f:a3:e7:39:74:a9:9e:da:29:
                    05:bc:77:ba:09:19:27:b8:aa:50:f7:0b:df:56:61:
                    12:de:bf:2f:d0:40:93:13:8b:45:0a:d5:cd:86:85:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:36:A6:29:04:4A:03:29:1B:C9:17:91:8E:42:89:94:8C:01:69:94
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/5TamKQRKAykbyReRjkKJlIwBaZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.0.118.0/24
                  185.115.206.0/24
                  185.133.195.0/24
                  185.137.181.0/24
                  185.146.195.0/24
                  185.205.68.0/24
                  185.207.212.0/24
                  185.251.234.0/24
                  194.113.164.0/24
                  194.113.169.0-194.113.170.255
                  194.113.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b5:bd:87:b4:08:4a:11:15:63:78:ca:84:01:52:4c:ca:db:
         e5:d3:56:c2:05:b6:35:26:d6:87:df:34:70:1a:36:4b:b9:88:
         43:82:b4:53:81:1a:51:4e:30:ba:2b:cc:23:99:98:a0:60:76:
         cf:7d:6c:86:76:be:de:f6:6a:9a:9c:33:14:04:92:28:c6:3d:
         b9:ab:eb:e9:86:20:ef:85:df:4c:81:76:ea:5a:5c:ab:a8:39:
         a0:f4:d7:89:a5:6f:7e:ea:b3:a0:3f:fd:17:6f:23:9a:92:41:
         a6:90:9c:ec:39:9e:09:e0:a0:ab:9e:c1:94:82:ee:71:13:a7:
         6b:de:8b:ef:a9:b9:32:f5:cf:fe:b2:69:a7:74:45:9b:ee:cc:
         cb:c8:56:4c:e2:d3:3e:91:a8:1d:ee:fd:05:3f:d8:ce:f7:be:
         43:a1:fe:3e:03:4b:01:ed:e6:1b:10:dc:76:44:23:a0:38:ba:
         28:62:43:43:3c:97:86:af:60:6f:04:87:cc:d7:2a:c3:f3:47:
         e3:c0:5c:7a:61:31:1b:9a:5d:9c:29:b6:cf:e9:b7:1a:30:9b:
         74:0b:b2:a2:48:6d:45:60:84:bf:6e:54:21:66:7f:d1:81:57:
         98:69:72:8e:47:55:7e:2d:1e:a6:3a:ac:78:b7:0b:54:73:98:
         a9:11:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:29:29 2026 by rpki-client