This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/5Utp3I9pSTiaAdIgsLekd1EY7HM.roa
File:                     5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (raw, json)
Hash identifier:          kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=
Subject key identifier:   E5:4B:69:DC:8F:69:49:38:9A:01:D2:20:B0:B7:A4:77:51:18:EC:73
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       019B7EA534C31051C562E6DA3D0C65D4285C
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/5Utp3I9pSTiaAdIgsLekd1EY7HM.roa
Signing time:             Fri 02 Jan 2026 12:18:34 +0000
ROA not before:           Fri 02 Jan 2026 12:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62174
IP address blocks:        87.246.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:34:c3:10:51:c5:62:e6:da:3d:0c:65:d4:28:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jan  2 12:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e54b69dc8f6949389a01d220b0b7a4775118ec73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8b:12:03:fe:e8:64:b0:ef:94:e1:a6:f4:e3:
                    78:42:19:80:cd:de:5b:5f:bf:3e:17:d2:e7:7e:7b:
                    63:92:7a:14:0a:35:a2:a8:2f:2d:00:a5:4b:5a:70:
                    ac:72:f2:b4:48:86:16:10:78:77:f3:67:b0:ef:83:
                    8a:3d:2a:1e:d3:86:69:c7:2f:4e:ac:e6:ed:04:dd:
                    a4:0d:b0:6d:5a:59:61:53:f1:38:93:41:67:bf:09:
                    2f:66:d1:b9:ba:b1:f0:5d:a8:02:fe:4b:7f:ff:2b:
                    f4:45:6a:09:8c:ab:85:1c:b3:a2:32:32:91:f0:ae:
                    9f:1c:0d:48:d3:01:19:97:70:fc:da:e1:54:ff:45:
                    12:68:d9:f8:97:f9:b4:e5:7e:f7:63:6b:20:fc:c0:
                    a1:0b:c4:4b:8b:da:6a:37:7d:42:2c:8e:96:5a:29:
                    c3:30:3a:57:6e:83:32:65:ae:61:e7:ac:1f:ad:b4:
                    07:f4:ca:2e:d2:9a:ae:45:bf:e8:4c:16:dd:b8:8d:
                    2e:83:52:75:22:51:ad:73:8c:23:4f:12:7a:ed:04:
                    94:97:52:8e:e7:3f:6e:1a:72:d9:f2:42:65:e2:78:
                    de:04:e5:74:6c:01:21:30:4d:be:2c:25:ac:3b:28:
                    1f:cd:94:bd:34:20:34:36:07:6b:ce:be:09:0e:35:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4B:69:DC:8F:69:49:38:9A:01:D2:20:B0:B7:A4:77:51:18:EC:73
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/5Utp3I9pSTiaAdIgsLekd1EY7HM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.246.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a5:40:4c:3b:c5:b9:56:58:da:d3:84:b8:fd:c9:36:71:42:
         72:d2:2b:46:2a:13:ed:73:99:d2:a9:93:c3:f9:2a:f3:2e:48:
         29:f8:e5:d6:5c:d5:a1:3e:2b:92:00:e2:64:23:7b:89:a8:5c:
         b6:c5:54:3c:6c:8a:fa:ab:d9:61:7d:65:47:bc:92:2e:f9:d5:
         c6:06:9e:b3:85:2c:10:03:1d:a9:9c:66:42:f4:51:ba:70:a9:
         c0:e7:09:14:fa:1e:b5:d5:48:f1:58:ea:63:2e:db:8a:2f:15:
         7b:35:04:52:59:78:9f:f7:db:be:35:ad:95:ab:05:b0:b0:3b:
         cb:6e:c6:ce:99:86:98:ba:a4:5a:a3:29:04:7f:0b:7b:d9:50:
         bc:d2:d8:68:a9:5d:29:d5:24:80:aa:68:02:be:80:ea:e4:dc:
         bd:f5:59:bb:fc:08:a8:81:94:50:15:24:73:3a:ba:d3:77:99:
         1b:bf:ba:01:62:d7:c0:0e:06:8b:d1:59:b7:f2:36:53:ec:95:
         45:59:01:92:57:54:1d:c6:d9:a6:65:c8:85:8d:c8:f0:73:f1:
         53:53:31:62:24:fe:32:12:35:76:09:9d:5d:61:9e:13:4d:77:
         65:14:37:5c:d0:ce:24:93:ce:f3:81:46:e9:5d:c4:04:cf:63:
         e5:22:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:33:13 2026 by rpki-client