This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/73qa9Ge1geu-Qx2QYpdH4DGLUcQ.roa
File:                     73qa9Ge1geu-Qx2QYpdH4DGLUcQ.roa (raw, json)
Hash identifier:          bRIojSaK0Bq+m3vmKKD1uT4o7T46KaQyR7+pwf57yb8=
Subject key identifier:   EF:7A:9A:F4:67:B5:81:EB:BE:43:1D:90:62:97:47:E0:31:8B:51:C4
Certificate issuer:       /CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
Certificate serial:       019B7EA6C9351D1496DB7C1738CBA6905A9E
Authority key identifier: 12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/73qa9Ge1geu-Qx2QYpdH4DGLUcQ.roa
Signing time:             Fri 02 Jan 2026 12:20:18 +0000
ROA not before:           Fri 02 Jan 2026 12:20:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24978
IP address blocks:        185.5.14.0/23 maxlen: 23
                          2a02:c740::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:c9:35:1d:14:96:db:7c:17:38:cb:a6:90:5a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125bb4f41fa8a9912a0c356ccc274c75332ab244
        Validity
            Not Before: Jan  2 12:20:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef7a9af467b581ebbe431d90629747e0318b51c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:de:50:bd:d9:5c:bf:4d:7c:00:39:cf:0a:
                    bd:e3:f5:4e:9b:8f:b8:62:4f:46:5b:70:a4:49:3c:
                    64:db:07:a6:d8:6e:5d:7d:d3:9f:0e:5d:2e:1a:9a:
                    4a:45:34:36:6d:5d:6d:bd:ce:8b:f2:44:0a:dd:9f:
                    a5:26:6e:12:b5:65:57:39:cf:18:dd:a1:1c:d8:6b:
                    17:37:f7:10:06:5d:9b:6e:1d:ce:ef:4c:91:47:39:
                    db:fd:61:63:83:10:69:8e:fc:99:85:25:63:47:43:
                    a8:e2:c8:c8:f1:19:85:ca:79:bc:00:84:6f:69:87:
                    fa:ea:40:3c:eb:ef:9a:35:de:7c:1a:77:c7:ca:14:
                    bc:cd:2a:99:9c:f3:6c:48:e7:c5:63:c8:67:63:95:
                    94:97:b3:5a:94:dc:9d:a0:7f:ad:7c:b7:18:6b:a5:
                    64:c9:75:1c:36:c0:f4:58:90:7e:43:7c:c5:58:c3:
                    61:4e:72:cd:1b:f1:61:6c:fb:db:a2:1d:76:fe:92:
                    a1:d6:66:c7:e9:78:4a:85:87:0a:a2:6d:8d:a9:cb:
                    0a:36:eb:77:b7:b0:cc:d1:ca:ef:a4:db:d5:06:1e:
                    fb:cc:f4:1b:15:5c:65:bc:6f:fc:69:7c:72:db:74:
                    f4:be:95:c0:7f:89:42:5b:ab:e2:d2:cb:90:6c:23:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7A:9A:F4:67:B5:81:EB:BE:43:1D:90:62:97:47:E0:31:8B:51:C4
            X509v3 Authority Key Identifier:
                keyid:12:5B:B4:F4:1F:A8:A9:91:2A:0C:35:6C:CC:27:4C:75:33:2A:B2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elu09B-oqZEqDDVszCdMdTMqskQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/73qa9Ge1geu-Qx2QYpdH4DGLUcQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/59681b-ef84-4cfd-80f4-b653a6c414a0/1/Elu09B-oqZEqDDVszCdMdTMqskQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.14.0/23
                IPv6:
                  2a02:c740::/30

    Signature Algorithm: sha256WithRSAEncryption
         83:81:52:70:ea:52:26:f9:8b:77:f8:5b:0d:aa:c4:dd:55:85:
         1a:ae:f4:1d:ef:f8:a1:9b:5d:76:2c:b4:47:dc:30:4e:32:fa:
         0a:ee:0b:e5:78:fa:d9:40:77:ae:01:ca:e1:a4:0f:0f:f2:a1:
         1d:00:c1:fd:d9:9f:06:23:99:49:79:04:ca:90:f5:27:ad:4a:
         d9:71:e3:a9:02:59:4f:13:80:42:ac:bf:a0:90:70:98:f2:a8:
         34:cf:90:7c:63:62:69:b0:99:8e:d0:24:5e:33:5d:b7:47:85:
         87:17:8c:eb:d0:5b:07:68:73:3c:49:fa:bb:3b:ac:95:63:30:
         e9:6d:69:4a:a8:ae:23:aa:85:48:7e:63:28:e5:f6:5a:1a:c9:
         a7:99:de:53:c6:70:4e:88:19:f9:db:f6:e0:21:8a:24:94:ec:
         a0:17:f1:54:ca:0a:a5:98:b0:73:60:83:57:6b:ec:2c:5e:94:
         b0:a2:f9:0c:6a:54:94:63:7c:bf:01:d8:12:9c:9f:dc:c3:1c:
         77:5a:f8:ec:91:a9:b8:19:8f:a9:c9:5e:40:3a:a6:4b:ca:3a:
         fe:d5:88:0b:60:1f:dc:b4:51:4e:c2:74:7d:4f:12:c6:2f:39:
         6c:c1:10:fd:50:ba:30:73:75:61:b1:ef:5c:a3:2b:0b:0e:89:
         6e:23:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:23 2026 by rpki-client