This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/5VPFnx7Snq1s0xjLflc4cpAtHHc.roa
File:                     5VPFnx7Snq1s0xjLflc4cpAtHHc.roa (raw, json)
Hash identifier:          31yOTf+y5hoAFje/WnwVpgH2/J9KZ8DZIZVyKF4ts1w=
Subject key identifier:   E5:53:C5:9F:1E:D2:9E:AD:6C:D3:18:CB:7E:57:38:72:90:2D:1C:77
Certificate issuer:       /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial:       019B7A5ADAB0C430A8BC046C7AA90688068F
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/5VPFnx7Snq1s0xjLflc4cpAtHHc.roa
Signing time:             Thu 01 Jan 2026 16:18:53 +0000
ROA not before:           Thu 01 Jan 2026 16:18:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206719
IP address blocks:        185.162.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:da:b0:c4:30:a8:bc:04:6c:7a:a9:06:88:06:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
        Validity
            Not Before: Jan  1 16:18:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e553c59f1ed29ead6cd318cb7e573872902d1c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:d4:34:2c:a4:bc:31:ef:c0:d0:ee:b2:c0:
                    fe:33:5d:71:65:6b:0d:25:b9:ec:bf:58:d7:66:b1:
                    72:bf:00:bd:3e:ab:b5:d7:2d:8e:8b:9d:4c:56:f0:
                    c7:07:2f:a7:5e:8a:9a:6e:68:c0:7e:0c:c6:24:d9:
                    91:2f:81:1a:d1:71:88:7b:7d:3e:04:a6:6b:6d:d2:
                    e8:be:d5:b2:9f:90:f6:29:07:13:36:12:ae:e1:ae:
                    2e:c5:80:60:ea:4c:cc:3b:33:5f:2a:21:be:6c:2a:
                    30:f5:dd:88:4a:70:88:cf:7f:58:a1:fc:18:cc:8c:
                    e3:09:5e:03:e5:79:e7:6d:5f:8a:be:a0:b0:27:41:
                    2b:0b:f1:4d:c6:98:fd:63:14:85:be:1f:21:f5:1a:
                    a6:c8:16:65:90:fb:ed:4f:96:00:f9:90:85:88:b7:
                    6e:3c:ce:b5:b6:bf:02:ff:33:7d:3e:8f:1e:2b:20:
                    d2:48:8e:d7:23:07:90:c2:3f:8c:b4:b9:c6:74:b3:
                    67:cf:0d:34:37:b3:a7:0d:7a:7d:8a:0e:f5:7c:16:
                    25:5b:55:4b:20:25:fe:49:01:0c:cf:6c:82:31:cb:
                    9a:c8:b5:1a:83:23:67:32:8a:76:a1:78:67:22:6d:
                    4e:7c:7d:85:ff:92:8a:8b:21:48:b1:6b:b1:f7:6e:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:C5:9F:1E:D2:9E:AD:6C:D3:18:CB:7E:57:38:72:90:2D:1C:77
            X509v3 Authority Key Identifier:
                keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/5VPFnx7Snq1s0xjLflc4cpAtHHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e5:82:39:96:1e:cd:b4:cc:bf:d4:4b:e0:9e:0f:d2:97:4a:
         b0:c6:41:01:5b:77:20:6e:97:81:77:14:24:85:d3:90:0a:90:
         be:ad:d1:57:35:c0:9f:31:7f:69:8b:96:32:88:e3:e1:66:8d:
         c1:1d:21:f9:f3:da:02:d3:90:2d:9b:cb:5f:6c:80:3c:fa:2e:
         f9:50:4f:e5:6c:45:ae:e7:0d:10:8a:72:b2:b6:e1:55:16:b6:
         fb:1e:09:38:81:a8:d7:2b:1a:46:30:77:8e:3d:94:51:f4:3b:
         53:c6:0a:3b:88:73:e8:14:7b:6a:a6:d5:1d:31:51:ec:db:89:
         c8:1d:9f:d2:7e:86:03:9f:85:c5:4d:23:31:fe:55:cf:3e:7a:
         2f:4b:9c:f0:f4:3d:74:cf:dd:d7:e9:0b:e0:ba:42:3a:50:1d:
         11:93:b3:82:a3:85:5d:eb:26:03:a7:7c:ce:42:0e:64:76:2c:
         87:89:e3:2b:82:7a:eb:72:a0:f6:6b:27:52:d6:29:cd:81:72:
         d1:90:61:a0:32:89:67:f1:b1:62:1a:97:5c:12:13:d0:33:5d:
         83:a6:7f:ea:7a:20:1e:1d:2d:59:34:03:fd:b2:29:b2:9b:55:
         86:57:90:f7:02:d7:9a:90:66:fa:e8:7f:db:db:28:60:a2:bc:
         9d:7e:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:10 2026 by rpki-client