This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/py9eyb051zBNGRXqf0w217Iyr0U.roa
File:                     py9eyb051zBNGRXqf0w217Iyr0U.roa (raw, json)
Hash identifier:          V1rIxP2aeir1g3qKAPo7xgCkgSSb/VU/nyh0Upf99zs=
Subject key identifier:   A7:2F:5E:C9:BD:39:D7:30:4D:19:15:EA:7F:4C:36:D7:B2:32:AF:45
Certificate issuer:       /CN=145c4728382ec5354e106023df467a4113b49324
Certificate serial:       019BF9A30A3FB946B8B789AE219B612582A2
Authority key identifier: 14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/py9eyb051zBNGRXqf0w217Iyr0U.roa
Signing time:             Mon 26 Jan 2026 09:29:30 +0000
ROA not before:           Mon 26 Jan 2026 09:29:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206426
IP address blocks:        195.54.56.0/23 maxlen: 23
                          195.54.56.0/24 maxlen: 24
                          195.54.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:a3:0a:3f:b9:46:b8:b7:89:ae:21:9b:61:25:82:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145c4728382ec5354e106023df467a4113b49324
        Validity
            Not Before: Jan 26 09:29:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a72f5ec9bd39d7304d1915ea7f4c36d7b232af45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:27:a2:e1:eb:d6:6b:87:c8:11:32:59:e2:
                    12:d5:3c:3e:2f:e6:74:44:8a:cb:93:79:83:52:4f:
                    43:44:75:21:60:c0:34:34:4a:30:12:77:09:de:b8:
                    f1:ee:90:8b:b3:ae:eb:f9:49:40:9e:74:90:da:0e:
                    b7:e3:ee:6b:40:3e:37:d6:71:da:c4:5d:1f:99:4e:
                    73:93:39:bc:24:5f:b3:f6:46:1e:de:4b:22:b1:cc:
                    d8:60:75:02:81:9c:1c:4f:49:ac:e0:15:73:d7:56:
                    d9:9f:cf:dc:63:97:1b:0f:83:64:40:b3:45:46:25:
                    20:1b:f5:15:36:52:93:b9:64:95:04:b4:fa:0f:d1:
                    23:a3:c1:92:94:82:39:aa:3b:c8:45:3a:c1:63:6a:
                    69:98:f6:f9:d6:88:f8:75:52:b5:13:ba:a7:10:f6:
                    4b:a4:bf:6a:bd:cd:84:99:d1:6d:60:d2:59:cb:e4:
                    10:47:93:31:99:10:e9:43:80:73:48:7d:33:10:a8:
                    35:47:07:22:33:3e:2a:e4:1f:43:73:bd:b2:e0:b2:
                    01:10:c5:75:30:f2:e5:f4:41:99:f7:0f:87:67:83:
                    da:14:74:57:24:5f:e1:6f:65:d8:2a:e6:d3:cd:7f:
                    ba:1e:90:0f:e0:dc:c1:bf:fa:55:0e:39:42:af:47:
                    65:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2F:5E:C9:BD:39:D7:30:4D:19:15:EA:7F:4C:36:D7:B2:32:AF:45
            X509v3 Authority Key Identifier:
                keyid:14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/py9eyb051zBNGRXqf0w217Iyr0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.54.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:ee:86:f7:0f:1f:6d:4b:3a:13:a4:d7:22:1a:07:d3:11:
         f0:5b:04:02:f6:83:25:85:01:50:5e:63:15:2c:4b:e7:70:7d:
         02:fa:98:fd:b2:1a:9b:86:15:e7:68:d6:11:c4:d6:d4:0c:8e:
         76:0a:bf:52:7a:bc:dc:22:3c:69:82:36:73:44:2c:a4:87:4d:
         2b:a3:5e:2c:7b:e8:61:96:bb:63:e8:4c:f3:6c:cf:7a:cd:70:
         c3:87:94:21:4c:16:95:f6:31:62:dd:d1:77:ed:19:75:80:55:
         db:fb:4d:50:6c:49:79:9e:f7:4f:96:e1:0b:52:0b:05:9e:8b:
         d5:12:f7:8c:3a:68:85:6f:fc:d4:55:df:b0:ac:f4:49:5e:95:
         fd:54:52:cb:9f:69:3e:d0:cd:fa:1e:fe:85:cb:3c:ac:bc:8a:
         62:bf:e2:da:86:53:34:eb:28:0b:7a:4a:cb:38:50:bd:d0:9d:
         98:32:be:50:3d:37:ce:ef:40:e2:2c:c9:0a:50:88:0d:d7:c5:
         d9:b4:c7:d0:e8:51:3a:9c:62:2b:c3:8e:75:08:0a:6e:e6:30:
         db:f0:ca:d7:58:72:29:8b:ba:a0:15:68:47:47:f4:45:e5:f9:
         87:2b:bc:64:c1:57:bc:2f:ae:41:5d:43:2b:ac:7f:cc:3a:69:
         81:ef:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:17 2026 by rpki-client