This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/f5k5qCfc97nrWBFtHlPeoZAbHU0.roa
File:                     f5k5qCfc97nrWBFtHlPeoZAbHU0.roa (raw, json)
Hash identifier:          5U/u1GLlwPYY0FROjlFUf8bRvu5+K/AhZTkC/PSthCU=
Subject key identifier:   7F:99:39:A8:27:DC:F7:B9:EB:58:11:6D:1E:53:DE:A1:90:1B:1D:4D
Certificate issuer:       /CN=58e0abb776daf25f720db6a26bb12fbd34deed90
Certificate serial:       019B7C135BF752772D049122D89B8ADBE4A0
Authority key identifier: 58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/f5k5qCfc97nrWBFtHlPeoZAbHU0.roa
Signing time:             Fri 02 Jan 2026 00:20:02 +0000
ROA not before:           Fri 02 Jan 2026 00:20:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57464
IP address blocks:        194.93.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:5b:f7:52:77:2d:04:91:22:d8:9b:8a:db:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0abb776daf25f720db6a26bb12fbd34deed90
        Validity
            Not Before: Jan  2 00:20:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f9939a827dcf7b9eb58116d1e53dea1901b1d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:31:de:13:47:47:b8:95:a8:76:7f:02:43:dc:
                    75:98:0a:67:b0:b1:26:50:4f:76:a1:38:6e:c0:b7:
                    3f:98:29:22:f5:f9:c9:20:7c:84:46:c8:48:d4:56:
                    43:c3:40:3c:99:e2:3e:c0:bc:1b:cb:db:77:65:15:
                    ab:48:74:28:98:83:28:a3:01:c4:0f:9a:23:fe:af:
                    b7:2b:32:22:f9:f4:cc:ef:f1:97:12:d2:2e:24:da:
                    79:83:fd:c4:e1:76:be:e3:13:92:e9:b8:29:29:36:
                    7f:9b:f9:82:46:4b:3d:1e:28:6d:b2:aa:7b:aa:49:
                    a7:ae:34:e1:a3:9e:dc:50:3f:78:4f:8d:55:a8:f9:
                    d1:4a:03:cd:d9:00:2c:5e:e8:6b:e4:f2:21:4d:7a:
                    44:f4:ac:11:af:cd:04:5d:27:cf:0b:4e:60:30:f4:
                    15:8a:4b:21:ab:ac:34:a4:4c:73:a1:cb:55:e3:71:
                    4d:39:70:13:df:26:fc:4d:a7:43:02:45:f5:be:4c:
                    2f:08:ed:92:d9:ab:c1:ad:25:87:78:7e:22:bd:c3:
                    ec:8c:57:bb:41:94:c6:f9:f4:f2:69:d5:3b:bb:0d:
                    0f:5f:c5:be:38:55:1a:cd:4a:3f:67:9d:4f:4c:09:
                    7b:eb:bf:ef:a9:20:09:d4:a2:50:60:95:c8:1c:62:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:99:39:A8:27:DC:F7:B9:EB:58:11:6D:1E:53:DE:A1:90:1B:1D:4D
            X509v3 Authority Key Identifier:
                keyid:58:E0:AB:B7:76:DA:F2:5F:72:0D:B6:A2:6B:B1:2F:BD:34:DE:ED:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOCrt3ba8l9yDbaia7EvvTTe7ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/f5k5qCfc97nrWBFtHlPeoZAbHU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/904341-4a73-426d-9bac-a339eecb8dc7/1/WOCrt3ba8l9yDbaia7EvvTTe7ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.93.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:fd:34:0c:6f:00:3d:c2:32:a3:de:f4:c1:fe:bf:c9:0d:66:
         e5:f5:ad:b4:2c:00:17:38:d1:85:e4:3f:59:3e:d9:c8:52:1d:
         8b:d3:6f:06:57:3d:e7:02:7b:51:2e:e7:5d:83:56:14:45:20:
         c1:e7:28:b7:2b:d6:0a:a6:92:8a:d2:05:a8:33:15:77:9d:b5:
         17:2c:02:b5:5e:5f:af:71:53:df:a7:19:a5:6b:76:6a:12:3f:
         e4:90:bc:97:58:d5:a9:ae:52:02:02:95:89:6c:56:57:f7:90:
         a0:5e:39:a8:48:62:81:9e:23:10:ae:31:73:b8:d7:de:bb:76:
         34:a3:48:50:35:c4:3f:b3:9a:17:5d:99:c7:f9:d7:51:06:f2:
         51:43:9c:60:83:1f:cb:2b:89:f2:7a:53:80:93:ff:67:c3:15:
         65:f9:21:a5:36:83:c1:de:d9:f7:27:e2:0e:9e:c5:08:b4:de:
         48:0f:79:f6:6e:50:dc:ae:72:62:7d:29:3d:f4:33:e5:bc:d1:
         a9:44:e1:e9:1d:df:1d:24:64:95:c6:c3:a9:db:fb:b9:cd:f2:
         94:f8:63:74:31:1d:6c:88:00:44:38:97:e0:b1:47:85:8d:4f:
         a9:3c:6e:6b:2a:f7:b8:ee:6b:f3:2f:f7:77:3e:48:c7:64:ac:
         b7:82:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:59 2026 by rpki-client