This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/5tnuY_EervGGDUz3gXIn8wuI43w.roa
File:                     5tnuY_EervGGDUz3gXIn8wuI43w.roa (raw, json)
Hash identifier:          uBzgwllDY08L9s6zjrsvT8VveqDxCL0p3GokO0+Zm4I=
Subject key identifier:   E6:D9:EE:63:F1:1E:AE:F1:86:0D:4C:F7:81:72:27:F3:0B:88:E3:7C
Certificate issuer:       /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial:       019B79101813B462AB6F357DCCF376A9CAF2
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/5tnuY_EervGGDUz3gXIn8wuI43w.roa
Signing time:             Thu 01 Jan 2026 10:17:36 +0000
ROA not before:           Thu 01 Jan 2026 10:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34986
IP address blocks:        193.104.166.0/24 maxlen: 24
                          193.188.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:18:13:b4:62:ab:6f:35:7d:cc:f3:76:a9:ca:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
        Validity
            Not Before: Jan  1 10:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6d9ee63f11eaef1860d4cf7817227f30b88e37c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:58:83:f7:2c:a0:e4:40:8c:37:d3:93:52:
                    eb:c8:f0:c8:b1:52:2f:d1:5d:ae:b5:8d:b5:65:9a:
                    8e:93:9a:29:83:f3:d8:98:5d:b5:33:cc:8e:14:94:
                    01:4e:38:20:be:86:7e:f5:00:24:4d:2f:a7:69:5e:
                    91:5b:a9:51:e9:7f:19:2e:10:b6:14:60:22:7a:32:
                    07:15:2f:2d:78:c5:91:58:0f:44:71:4c:3c:f5:7c:
                    20:ca:2c:66:38:d5:92:e6:80:7e:ff:74:c9:61:40:
                    39:d2:c4:4b:67:92:fa:62:50:ed:34:fe:05:06:af:
                    ad:78:21:a1:8f:ba:a8:8b:b2:0c:4c:ce:5e:e8:55:
                    cb:0b:e4:e4:49:ee:62:e8:7e:18:cb:f7:ff:5f:25:
                    24:13:25:72:9f:9f:2c:67:2b:aa:90:98:23:02:d4:
                    8a:9e:9f:aa:46:9c:7e:be:21:17:a7:d2:ab:56:db:
                    a8:c8:91:a1:02:56:62:13:e7:4d:0f:c8:f8:c2:d3:
                    ef:cc:01:b4:25:15:ed:8b:b2:33:73:1a:d3:8b:b3:
                    de:5b:01:7e:c6:19:55:af:7e:94:6e:9a:21:63:5b:
                    f1:d9:8f:65:73:bf:5e:4c:37:58:32:30:bb:f0:f2:
                    eb:aa:fa:d5:df:fb:65:91:a9:c3:d6:e4:29:72:60:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D9:EE:63:F1:1E:AE:F1:86:0D:4C:F7:81:72:27:F3:0B:88:E3:7C
            X509v3 Authority Key Identifier:
                keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/5tnuY_EervGGDUz3gXIn8wuI43w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.166.0/24
                  193.188.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:e7:c1:14:8f:4a:50:e0:eb:28:d5:91:80:81:e5:fe:74:de:
         63:f7:ab:a6:4a:cd:21:0f:50:86:4e:a3:0b:64:79:94:c0:c9:
         90:46:b3:20:ab:37:db:5e:1a:34:d9:d8:80:c9:6d:21:4f:c8:
         64:32:04:a0:6e:21:f6:83:89:5b:42:db:b2:ae:e3:90:79:47:
         18:11:6a:ed:de:eb:a6:77:d5:bc:30:f1:05:5f:cf:d4:a6:80:
         1b:9c:50:60:94:e5:87:2c:fc:22:a8:cb:49:80:38:93:07:27:
         5b:1b:27:88:65:a3:90:4c:96:97:12:9e:73:0f:4a:21:92:45:
         99:ce:d1:ca:ea:9e:fa:11:eb:b4:ef:13:ec:17:e5:5e:d7:f1:
         34:fd:24:92:f2:ef:f5:8d:77:19:a1:dd:c8:55:48:d9:61:63:
         e0:05:c2:f6:ea:5f:b1:7c:be:0a:47:92:f4:4a:1b:89:b9:d6:
         bd:ad:7c:4e:ef:c7:35:0a:9f:02:cd:fb:81:6e:ac:27:d1:5b:
         1e:70:ec:a3:68:87:03:15:c5:ea:31:85:ab:0d:52:b7:23:f7:
         11:9a:b0:43:43:22:e0:e7:76:e7:ba:e5:9f:78:2b:e2:6a:6e:
         fa:ca:03:91:d0:24:84:9d:ab:5b:2e:0f:be:2a:76:81:36:a7:
         b2:f4:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:29:16 2026 by rpki-client