This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/5T7ElemNC6g4KLG0_8xrYW5fehU.roa
File:                     5T7ElemNC6g4KLG0_8xrYW5fehU.roa (raw, json)
Hash identifier:          1yULm6jsqwJXi2ojiG48hP/e+HZZVs+RhK8qR3uDV70=
Subject key identifier:   E5:3E:C4:95:E9:8D:0B:A8:38:28:B1:B4:FF:CC:6B:61:6E:5F:7A:15
Certificate issuer:       /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial:       019B783527E4A58B9EEE248F4B3FAE23ABAE
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/5T7ElemNC6g4KLG0_8xrYW5fehU.roa
Signing time:             Thu 01 Jan 2026 06:18:28 +0000
ROA not before:           Thu 01 Jan 2026 06:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208439
IP address blocks:        45.136.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:27:e4:a5:8b:9e:ee:24:8f:4b:3f:ae:23:ab:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
        Validity
            Not Before: Jan  1 06:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e53ec495e98d0ba83828b1b4ffcc6b616e5f7a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:97:02:db:54:ed:09:c9:67:cf:71:73:25:
                    d9:15:20:d6:9d:2a:01:16:38:ca:d5:96:d1:81:f3:
                    a1:3e:17:11:26:b8:0f:04:ec:da:e3:5d:8a:aa:c9:
                    03:d1:32:39:27:1e:a9:ce:4f:b3:ea:58:fe:c1:a3:
                    ea:13:fe:d5:ad:a0:48:b9:98:20:d5:1c:86:f9:44:
                    90:1f:45:f1:d9:7e:1d:4d:54:1a:1f:3d:23:fa:23:
                    f7:06:0e:e7:5b:97:7a:1c:06:1e:5d:fe:f8:92:3d:
                    f9:fc:b1:76:20:3d:e3:c5:f0:42:21:cc:f9:6a:aa:
                    30:0d:06:70:49:a9:f3:f2:30:53:9b:4e:13:66:9c:
                    1b:e1:ae:3d:05:c8:d6:09:1a:0d:36:f3:f7:b0:56:
                    19:bc:ce:0b:03:56:23:3d:e7:08:8b:3e:f6:d2:58:
                    a1:37:0b:56:8f:f4:8b:54:d0:6a:42:a3:37:bf:7e:
                    fe:8c:cf:80:19:b8:ac:12:be:84:ff:ea:41:14:92:
                    c0:86:74:96:2a:aa:43:cb:d2:51:f2:e5:36:22:6f:
                    3f:90:12:92:ae:0b:1f:e3:6d:48:96:a5:ed:85:69:
                    b3:4a:dd:72:f2:68:05:a3:2c:1a:8b:b8:0b:b1:ce:
                    c7:ce:84:11:85:df:99:dc:53:dc:5e:2b:9c:d8:ed:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3E:C4:95:E9:8D:0B:A8:38:28:B1:B4:FF:CC:6B:61:6E:5F:7A:15
            X509v3 Authority Key Identifier:
                keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/5T7ElemNC6g4KLG0_8xrYW5fehU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:23:ee:ae:2d:e0:58:6b:04:d8:e5:c9:96:73:83:7d:54:55:
         25:65:4e:54:26:1d:61:cd:2e:6b:c7:7e:1a:20:33:ac:1d:34:
         fd:78:d9:42:3d:c9:8e:84:a2:e8:5a:4f:33:e3:be:02:9f:c6:
         ed:b8:d2:34:a7:da:2c:5e:39:f5:97:f6:3b:a9:64:87:53:30:
         27:c2:00:f1:f3:61:03:d0:da:a6:69:3e:2d:a5:6e:55:c3:90:
         1d:74:3f:05:f4:15:d9:97:80:76:37:9b:67:41:40:84:98:80:
         3c:4e:98:e1:c6:53:66:c9:4a:ad:55:5c:98:5d:c8:d6:74:55:
         b7:51:e4:e9:d4:59:00:16:5e:24:a9:5d:3a:6d:df:ef:4b:9e:
         90:76:e6:76:27:98:44:4e:15:3e:ce:49:0a:4b:87:64:32:29:
         43:9d:aa:73:94:93:c5:54:5e:85:14:28:94:69:6e:2a:c2:f4:
         44:8e:e7:dd:fd:0a:3d:3d:24:1f:50:8e:8d:1e:9c:9a:8f:1a:
         b6:8b:4a:91:c5:fc:2d:00:de:16:d3:2d:f8:bc:3a:97:16:15:
         8d:d8:fb:67:58:ec:4d:e3:c4:bd:3e:3f:7e:c4:cb:0f:f8:ae:
         39:e6:e4:d5:93:26:15:9e:41:bc:96:60:47:02:a5:40:21:53:
         fc:b8:16:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NSfkpYue7iSPSz+uI6uuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk5MWFjZDdiMjI3M2Q5ZTE4NjVhZmEyNzU1ZTZmNWU2
NzJlNTUwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTNlYzQ5NWU5OGQwYmE4MzgyOGIxYjRmZmNjNmI2MTZlNWY3YTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35SXAttU7QnJZ89xcyXZFSDWnSoB
FjjK1ZbRgfOhPhcRJrgPBOza412KqskD0TI5Jx6pzk+z6lj+waPqE/7VraBIuZgg
1RyG+USQH0Xx2X4dTVQaHz0j+iP3Bg7nW5d6HAYeXf74kj35/LF2ID3jxfBCIcz5
aqowDQZwSanz8jBTm04TZpwb4a49BcjWCRoNNvP3sFYZvM4LA1YjPecIiz720lih
NwtWj/SLVNBqQqM3v37+jM+AGbisEr6E/+pBFJLAhnSWKqpDy9JR8uU2Im8/kBKS
rgsf421IlqXthWmzSt1y8mgFoywai7gLsc7HzoQRhd+Z3FPcXiuc2O3OswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOU+xJXpjQuoOCixtP/Ma2FuX3oVMB8GA1UdIwQY
MBaAFAWpkazXsic9nhhlr6J1Xm9eZy5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMt
ZDdjNmZmOTMzYzIzLzEvNVQ3RWxlbU5DNmc0S0xHMF84eHJZVzVmZWhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMtZDdjNmZmOTMzYzIz
LzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYikMA0G
CSqGSIb3DQEBCwUAA4IBAQCHI+6uLeBYawTY5cmWc4N9VFUlZU5UJh1hzS5rx34a
IDOsHTT9eNlCPcmOhKLoWk8z474Cn8btuNI0p9osXjn1l/Y7qWSHUzAnwgDx82ED
0NqmaT4tpW5Vw5AddD8F9BXZl4B2N5tnQUCEmIA8TpjhxlNmyUqtVVyYXcjWdFW3
UeTp1FkAFl4kqV06bd/vS56QduZ2J5hEThU+zkkKS4dkMilDnapzlJPFVF6FFCiU
aW4qwvREjufd/Qo9PSQfUI6NHpyajxq2i0qRxfwtAN4W0y34vDqXFhWN2PtnWOxN
48S9Pj9+xMsP+K455uTVkyYVnkG8lmBHAqVAIVP8uBaa
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:19 2026 by rpki-client