This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/5e0tqH24BTM03yiq8eWs7gQhfjU.roa
File:                     5e0tqH24BTM03yiq8eWs7gQhfjU.roa (raw, json)
Hash identifier:          2dooK4E+vB8Vi+8KxuvklQIHFbXhQITTT/Vg0tuOqZ0=
Subject key identifier:   E5:ED:2D:A8:7D:B8:05:33:34:DF:28:AA:F1:E5:AC:EE:04:21:7E:35
Certificate issuer:       /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial:       019B7CEE28DD223E438FDAD32475D4952A68
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/5e0tqH24BTM03yiq8eWs7gQhfjU.roa
Signing time:             Fri 02 Jan 2026 04:19:01 +0000
ROA not before:           Fri 02 Jan 2026 04:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60453
IP address blocks:        193.142.234.0/24 maxlen: 24
                          193.142.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:28:dd:22:3e:43:8f:da:d3:24:75:d4:95:2a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
        Validity
            Not Before: Jan  2 04:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e5ed2da87db8053334df28aaf1e5acee04217e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:1f:18:8b:70:e3:88:74:03:ff:1c:fc:46:
                    16:c9:36:e2:81:62:b7:fe:82:be:3d:cd:c5:44:64:
                    cd:ff:84:b4:5e:1c:97:d8:67:9b:09:e7:a6:d9:44:
                    6a:b5:d6:d9:4a:e5:ef:fc:06:be:b6:f6:17:02:3c:
                    07:c6:01:e5:14:24:27:5c:37:51:8a:ef:ba:c1:51:
                    dd:61:10:84:95:fb:de:1f:27:80:3c:70:2a:9e:fa:
                    04:fa:93:fc:b6:20:e1:85:d3:0e:9e:64:7d:a4:4b:
                    bd:cb:d6:15:b4:ed:96:e6:49:e1:e2:fa:dd:2f:6f:
                    78:a3:0a:43:d3:b7:97:c9:60:04:24:80:e7:25:fc:
                    b6:5c:e8:59:58:29:ae:fe:62:2c:c8:60:41:d6:c5:
                    83:c0:7c:7e:58:d9:ef:ad:b7:db:16:34:40:f9:d9:
                    8e:a6:75:30:06:bc:3e:48:14:00:63:a7:f2:02:be:
                    29:2e:29:29:e9:e3:07:fc:f2:13:62:43:19:ba:40:
                    1c:e5:b9:c4:3e:99:47:50:bd:40:4a:43:95:23:ed:
                    2a:54:fe:88:ed:3f:23:f4:ae:22:19:03:e6:ae:d0:
                    32:b3:a7:9e:33:79:7a:35:68:cd:2a:dd:b3:08:07:
                    3d:cd:63:81:58:0b:00:49:d8:d5:6f:f5:e7:13:31:
                    71:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:ED:2D:A8:7D:B8:05:33:34:DF:28:AA:F1:E5:AC:EE:04:21:7E:35
            X509v3 Authority Key Identifier:
                keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/5e0tqH24BTM03yiq8eWs7gQhfjU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.234.0/24
                  193.142.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:96:06:ef:25:66:39:d0:88:d7:e8:06:f6:84:4b:dd:d6:d9:
         a8:21:a0:9c:47:b8:42:cf:a1:71:0f:a7:12:48:14:84:9d:cc:
         d3:a4:2f:9f:8b:81:0b:44:c5:b2:fc:a8:e6:75:e3:10:c9:c6:
         cf:9f:2b:a6:d4:1f:be:ac:ef:9c:aa:2d:b6:14:6d:e8:95:e0:
         8b:0f:c2:95:ad:07:e4:0d:ca:d3:e3:85:47:be:d3:5e:a5:d8:
         86:dc:fd:16:90:f6:e0:3d:f9:93:7e:d6:3d:86:02:6a:2d:1b:
         08:46:45:89:1b:22:7f:ce:2a:5c:d1:10:8e:32:d4:bf:f0:be:
         8c:58:82:84:78:c0:06:db:2e:4b:66:92:a3:f1:88:ef:89:e0:
         02:b9:d1:9e:3a:21:32:d9:9f:1d:f6:ce:61:85:57:10:3d:64:
         59:37:ba:f8:dd:5f:cf:d3:0c:3c:c9:41:86:ba:80:7d:a4:6b:
         bf:47:eb:04:a1:f0:aa:1f:47:f7:e3:fc:b5:a0:c4:28:67:7c:
         18:1f:65:9f:ad:8d:81:55:92:d9:2f:57:b9:6c:d4:2e:14:43:
         7b:b7:25:35:50:88:ee:18:e1:0d:70:4d:92:dd:1a:b6:49:35:
         f3:03:7c:9f:04:f8:26:a7:9f:8c:a2:2d:38:40:2b:e7:53:72:
         02:fc:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:40:52 2026 by rpki-client