This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/5yZnSviNCqUR9YzEaiiWv0-lH_A.roa
File:                     5yZnSviNCqUR9YzEaiiWv0-lH_A.roa (raw, json)
Hash identifier:          f75eCg5n9cEQcAT6MFzhUgQHgXpvWjhzAy4lvUGA654=
Subject key identifier:   E7:26:67:4A:F8:8D:0A:A5:11:F5:8C:C4:6A:28:96:BF:4F:A5:1F:F0
Certificate issuer:       /CN=ed6d4b57a5a1f7617a9e3603efbaeef03b0cf921
Certificate serial:       019B76EB8C61111B060B82C2D305FA780DE6
Authority key identifier: ED:6D:4B:57:A5:A1:F7:61:7A:9E:36:03:EF:BA:EE:F0:3B:0C:F9:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W1LV6Wh92F6njYD77ru8DsM-SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/5yZnSviNCqUR9YzEaiiWv0-lH_A.roa
Signing time:             Thu 01 Jan 2026 00:18:27 +0000
ROA not before:           Thu 01 Jan 2026 00:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28736
IP address blocks:        195.26.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W1LV6Wh92F6njYD77ru8DsM-SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:8c:61:11:1b:06:0b:82:c2:d3:05:fa:78:0d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6d4b57a5a1f7617a9e3603efbaeef03b0cf921
        Validity
            Not Before: Jan  1 00:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e726674af88d0aa511f58cc46a2896bf4fa51ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:c4:fe:e5:67:70:a5:d5:63:ec:51:11:40:
                    6a:e1:b1:09:f6:f4:e3:ee:1b:ae:a8:09:1a:9e:60:
                    41:6d:9c:5f:fb:75:13:9e:74:f5:cc:80:0e:90:a8:
                    bc:36:4a:c3:c3:fa:fb:20:8a:9f:80:35:dc:43:6f:
                    4c:61:12:2a:23:19:73:2b:fc:12:64:d8:bc:60:bc:
                    53:a6:40:44:7b:89:b8:d1:00:6c:d7:36:1b:83:34:
                    f1:de:4a:a9:63:07:2b:69:16:2b:bf:cd:4a:98:5f:
                    45:77:dd:4f:03:60:cb:28:f5:27:84:0f:19:90:cd:
                    c8:be:b0:c3:ce:7a:9c:9d:0b:98:a2:e5:3f:18:38:
                    22:9b:f7:49:ab:8d:62:95:89:99:0f:55:0a:96:33:
                    e6:bf:da:5f:96:b7:56:6d:ce:23:68:60:27:08:03:
                    87:10:e8:5f:d3:e4:a6:cd:f9:0d:1d:51:b0:3b:fa:
                    6f:11:c1:42:74:c3:72:b4:0b:3c:01:df:f3:d0:8f:
                    85:03:1d:ec:35:75:62:f2:42:a5:7e:37:b0:a6:36:
                    ad:5b:34:dd:14:50:32:1d:e3:4c:94:f1:47:74:1c:
                    52:66:dc:2c:f4:75:c3:98:ab:eb:dc:6a:87:f1:41:
                    bf:9c:fd:d7:de:ca:3c:73:9e:e2:55:f1:a5:35:4f:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:26:67:4A:F8:8D:0A:A5:11:F5:8C:C4:6A:28:96:BF:4F:A5:1F:F0
            X509v3 Authority Key Identifier:
                keyid:ED:6D:4B:57:A5:A1:F7:61:7A:9E:36:03:EF:BA:EE:F0:3B:0C:F9:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W1LV6Wh92F6njYD77ru8DsM-SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/5yZnSviNCqUR9YzEaiiWv0-lH_A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fdcb01-a80c-451f-adb1-ebc224f765a2/1/7W1LV6Wh92F6njYD77ru8DsM-SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.26.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:71:6b:b7:5c:98:d8:a8:05:c4:78:0b:f2:7c:86:85:f1:
         fe:17:28:08:59:89:7d:e9:bd:3d:9f:a9:b7:6a:e1:bf:ee:5a:
         cf:f5:b3:ee:40:0f:b2:66:67:90:66:01:7b:be:ac:e3:b7:c7:
         65:de:de:a6:b2:8e:ca:f5:60:64:bd:e3:b7:a5:a5:fa:fb:f2:
         c8:60:3e:c3:d1:12:76:bd:6f:0c:9e:51:28:7c:f2:96:2c:1e:
         2b:35:8c:6b:99:12:9a:64:8d:1a:09:ec:e4:55:2a:77:00:d9:
         59:97:49:f2:ee:31:2f:72:0b:ca:b5:3b:ef:73:8a:99:cf:f8:
         b8:6e:2f:1b:6a:ef:ab:54:6d:1b:43:60:2d:e9:0b:20:c7:a0:
         d9:a4:44:54:94:1f:88:aa:00:d3:63:6d:af:d5:4a:b1:0e:e0:
         58:8c:dd:25:33:de:43:44:a0:64:4f:08:05:9a:df:d7:e5:25:
         60:63:9f:5d:ec:95:19:57:26:5a:d7:a3:39:11:4f:0d:79:c7:
         04:74:f1:8f:04:c7:01:6f:4b:9c:07:71:3e:52:46:24:61:e6:
         ad:89:65:d5:be:1d:43:60:28:82:6c:61:0d:78:e5:98:07:a3:
         fa:ba:75:15:de:13:eb:75:98:61:44:2c:b8:99:e0:c3:a3:30:
         26:0f:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:16:07 2026 by rpki-client