This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/7R5n93dmInVIhZo2ySnmSXNzAWI.roa
File:                     7R5n93dmInVIhZo2ySnmSXNzAWI.roa (raw, json)
Hash identifier:          i6QWAb1/llyvXfpufic5ZRyG2DfPoHNYLgosjpBJkgE=
Subject key identifier:   ED:1E:67:F7:77:66:22:75:48:85:9A:36:C9:29:E6:49:73:73:01:62
Certificate issuer:       /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial:       019C099ADE737548DD07CA29DD50DA3ACA83
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/7R5n93dmInVIhZo2ySnmSXNzAWI.roa
Signing time:             Thu 29 Jan 2026 11:54:30 +0000
ROA not before:           Thu 29 Jan 2026 11:54:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        110.172.189.0/24 maxlen: 24
                          114.69.245.0/24 maxlen: 24
                          114.69.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:09:9a:de:73:75:48:dd:07:ca:29:dd:50:da:3a:ca:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
        Validity
            Not Before: Jan 29 11:54:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed1e67f77766227548859a36c929e64973730162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:5b:bc:5b:71:75:03:fe:74:ce:37:7c:0e:
                    67:86:75:f0:af:73:0c:6f:38:9d:8d:5a:8d:c7:98:
                    5e:74:39:20:87:e4:06:59:ba:c3:1e:8b:4e:0b:eb:
                    d1:7a:6f:5f:a8:77:bb:b2:47:9a:02:6a:9e:e9:67:
                    26:1b:de:c4:ef:1e:6c:22:18:51:c6:72:b0:46:af:
                    13:6d:4f:4a:1b:10:fc:16:41:c9:61:f5:e7:b7:2d:
                    8f:5a:9d:c3:9d:46:ed:e8:ce:86:9a:2e:3d:dd:7a:
                    17:a4:8b:24:ed:7e:a3:54:1a:c5:88:94:03:90:89:
                    3b:b7:73:d6:64:4e:92:f4:08:ab:5a:41:87:32:f3:
                    d9:e9:39:47:72:55:d9:dd:5a:40:14:e1:ab:ba:30:
                    55:12:7d:de:10:8a:73:ba:6b:59:7b:56:86:8a:75:
                    25:a2:fa:60:a0:d3:13:10:ce:12:04:32:c9:6b:b6:
                    44:ae:0e:30:23:f0:d2:47:a1:94:0a:68:61:35:82:
                    8a:a8:22:29:3c:aa:ab:14:98:41:d8:ed:12:99:d9:
                    77:34:ca:7e:2a:18:eb:90:be:98:6b:2f:2a:6b:ee:
                    49:3c:64:7a:6b:10:d6:39:41:c5:8a:f0:e7:85:e1:
                    fa:5d:43:07:ab:5e:89:52:17:60:31:aa:74:3f:8a:
                    76:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1E:67:F7:77:66:22:75:48:85:9A:36:C9:29:E6:49:73:73:01:62
            X509v3 Authority Key Identifier:
                keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/7R5n93dmInVIhZo2ySnmSXNzAWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.189.0/24
                  114.69.245.0/24
                  114.69.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:67:98:8b:b9:3c:0a:62:c6:e9:70:0a:52:7c:1e:b4:ea:49:
         47:cd:53:93:d3:78:37:fe:36:88:3e:9a:97:3d:29:ac:d1:e7:
         d2:e2:0c:27:e4:ac:e7:ee:29:16:ac:f1:a9:2c:88:72:88:34:
         b4:70:9a:20:bd:b0:95:08:55:33:82:3a:e0:69:a3:c8:6d:c4:
         6d:61:af:8d:bd:15:f3:4f:b6:43:36:c7:22:a4:c6:f8:70:35:
         2c:1d:eb:20:3f:98:f9:82:be:ee:22:9a:8c:0d:28:70:f1:43:
         e2:6c:25:5a:88:10:24:af:e3:8f:e6:30:83:f4:32:97:77:0e:
         87:32:e6:ad:c1:e6:93:ba:c0:4d:05:a6:2f:98:0e:a9:bb:82:
         89:53:f7:41:c7:39:2e:a1:2b:84:37:5d:bd:27:e5:ff:f0:9b:
         19:3c:b2:8b:88:85:d9:2f:a0:d2:98:b5:50:bd:fa:a1:6a:3c:
         92:44:5e:3f:3e:35:be:c3:f0:61:7a:d2:1d:9c:a4:99:62:6a:
         d2:f6:12:fd:f9:d7:7b:c7:74:12:ee:7d:af:b3:7c:19:86:a4:
         01:9f:88:89:32:ed:70:50:83:37:cb:7e:0d:ad:fd:fd:e3:75:
         39:1a:0a:1f:2c:57:14:f6:c2:cd:61:07:2f:29:7f:5b:8e:64:
         ed:e2:fb:e2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZwJmt5zdUjdB8op3VDaOsqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx
ZWUyZDMwHhcNMjYwMTI5MTE1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDFlNjdmNzc3NjYyMjc1NDg4NTlhMzZjOTI5ZTY0OTczNzMwMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVNbvFtxdQP+dM43fA5nhnXwr3MM
bzidjVqNx5hedDkgh+QGWbrDHotOC+vRem9fqHe7skeaAmqe6WcmG97E7x5sIhhR
xnKwRq8TbU9KGxD8FkHJYfXnty2PWp3DnUbt6M6Gmi493XoXpIsk7X6jVBrFiJQD
kIk7t3PWZE6S9AirWkGHMvPZ6TlHclXZ3VpAFOGrujBVEn3eEIpzumtZe1aGinUl
ovpgoNMTEM4SBDLJa7ZErg4wI/DSR6GUCmhhNYKKqCIpPKqrFJhB2O0Smdl3NMp+
KhjrkL6Yay8qa+5JPGR6axDWOUHFivDnheH6XUMHq16JUhdgMap0P4p2IwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO0eZ/d3ZiJ1SIWaNskp5klzcwFiMB8GA1UdIwQY
MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt
NTFmNWZmODFjMTE3LzEvN1I1bjkzZG1JblZJaFpvMnlTbm1TWE56QVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3
LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbqy9AwQA
ckX1AwQAckX3MA0GCSqGSIb3DQEBCwUAA4IBAQA2Z5iLuTwKYsbpcApSfB606klH
zVOT03g3/jaIPpqXPSms0efS4gwn5Kzn7ikWrPGpLIhyiDS0cJogvbCVCFUzgjrg
aaPIbcRtYa+NvRXzT7ZDNscipMb4cDUsHesgP5j5gr7uIpqMDShw8UPibCVaiBAk
r+OP5jCD9DKXdw6HMuatweaTusBNBaYvmA6pu4KJU/dBxzkuoSuEN129J+X/8JsZ
PLKLiIXZL6DSmLVQvfqhajySRF4/PjW+w/BhetIdnKSZYmrS9hL9+dd7x3QS7n2v
s3wZhqQBn4iJMu1wUIM3y34Nrf3943U5GgofLFcU9sLNYQcvKX9bjmTt4vvi
-----END CERTIFICATE-----
Generated at Thu Feb 5 20:47:40 2026 by rpki-client