This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/cgUyX51ni1S68djJwifB7g8e6Kw.roa
File:                     cgUyX51ni1S68djJwifB7g8e6Kw.roa (raw, json)
Hash identifier:          3dVMqfRP6yRNJLYCw4N0iFLQvnH08Iy8aWjLtSTCtyk=
Subject key identifier:   72:05:32:5F:9D:67:8B:54:BA:F1:D8:C9:C2:27:C1:EE:0F:1E:E8:AC
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       019B7CECD82A1C6B75789B27155790B836D3
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/cgUyX51ni1S68djJwifB7g8e6Kw.roa
Signing time:             Fri 02 Jan 2026 04:17:35 +0000
ROA not before:           Fri 02 Jan 2026 04:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209854
IP address blocks:        194.26.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:d8:2a:1c:6b:75:78:9b:27:15:57:90:b8:36:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Jan  2 04:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7205325f9d678b54baf1d8c9c227c1ee0f1ee8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:1f:9e:00:f2:5f:b1:d0:b4:81:a0:cf:56:
                    57:50:f2:4f:d8:6e:48:6e:ff:a1:92:fa:24:c9:5a:
                    6b:94:4f:62:75:f0:8e:c5:ae:81:38:95:16:72:fb:
                    37:1f:74:f6:49:87:73:cd:f4:37:e5:3e:a2:6d:98:
                    f9:b5:5b:20:eb:0e:2f:4a:4d:81:1e:61:2a:ff:76:
                    17:78:d3:c2:fe:c8:e9:96:bf:6d:06:bc:4d:7a:13:
                    87:95:4f:30:27:5c:8b:56:f9:18:d7:78:09:97:da:
                    11:9a:a8:56:36:95:0d:16:4c:ca:01:f2:e6:a2:fe:
                    e9:5c:e5:c9:1a:a6:2a:98:ee:63:f0:ba:ce:fa:79:
                    24:0f:bc:bf:5b:fc:01:9f:5a:72:5f:89:a7:b9:b8:
                    d4:82:3b:d4:eb:f6:29:4a:54:56:f3:0a:79:5b:56:
                    26:02:94:c5:bc:4d:d4:0a:a4:67:41:54:53:97:b1:
                    d4:ca:db:04:8c:a5:67:8b:89:98:3b:aa:ea:b2:c1:
                    62:12:ec:16:ba:81:55:4f:86:b1:c6:98:76:a2:6c:
                    26:e0:46:d3:a6:6d:0d:5b:c9:27:1b:3e:df:6f:6a:
                    1e:bf:36:36:bc:25:84:f7:00:3c:e4:71:58:e6:2a:
                    03:42:37:b4:dc:3a:56:47:47:1b:68:af:da:8e:9b:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:05:32:5F:9D:67:8B:54:BA:F1:D8:C9:C2:27:C1:EE:0F:1E:E8:AC
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/cgUyX51ni1S68djJwifB7g8e6Kw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:e5:b1:00:8b:b1:3b:33:27:88:d6:79:85:63:25:1a:09:b1:
         2a:25:4c:ae:8e:f6:01:de:7a:c4:7b:4c:9d:8b:c8:8c:88:df:
         36:3b:db:91:3a:a2:d7:05:90:14:bf:7f:00:bf:23:9c:5d:55:
         fd:26:07:e8:3a:5a:f8:a6:fe:08:93:7e:ae:62:9d:0e:01:64:
         3c:3e:b6:e5:c4:2e:b2:db:70:b1:1f:43:e1:0f:16:52:3b:90:
         84:b7:14:9e:e6:3e:4b:c0:1f:b9:75:ae:44:c5:de:c2:1f:88:
         3e:94:94:bf:83:fe:15:a2:7a:f3:37:1f:f0:32:19:46:68:1a:
         3d:a7:95:a7:d2:52:1e:e5:10:8c:be:27:01:68:b0:1e:36:b0:
         6b:b0:34:ee:36:57:ec:e9:94:16:41:dc:87:54:c6:f6:eb:39:
         fa:29:0b:a7:a7:2d:47:21:a5:90:4b:ab:86:f9:03:fd:80:14:
         f2:a4:e2:01:0e:eb:68:b7:12:f9:c1:31:55:90:37:06:b2:1b:
         af:8e:9f:82:cc:d7:ba:b1:d1:bf:90:8b:13:04:dc:7f:97:59:
         aa:14:e2:75:f8:58:3b:07:b9:1c:66:9f:ca:4a:a8:81:56:ac:
         f6:dd:84:19:6e:63:00:3f:5d:96:73:f0:dc:ea:f6:0c:f5:ef:
         95:80:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:33:04 2026 by rpki-client