This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_2Eucbeg0EvjQuvMvxYlWqbq-mo.roa
File:                     _2Eucbeg0EvjQuvMvxYlWqbq-mo.roa (raw, json)
Hash identifier:          fUG7sQ+jICqGFN/gENLT9AUUpo8/HkJusUKp/G7MoAo=
Subject key identifier:   FF:61:2E:71:B7:A0:D0:4B:E3:42:EB:CC:BF:16:25:5A:A6:EA:FA:6A
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       019B121E8AB1FBD9BEC87B1A4E6BEB2B5473
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_2Eucbeg0EvjQuvMvxYlWqbq-mo.roa
Signing time:             Fri 12 Dec 2025 10:32:30 +0000
ROA not before:           Fri 12 Dec 2025 10:32:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202736
IP address blocks:        163.5.13.0/24 maxlen: 24
                          163.5.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:12:1e:8a:b1:fb:d9:be:c8:7b:1a:4e:6b:eb:2b:54:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Dec 12 10:32:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ff612e71b7a0d04be342ebccbf16255aa6eafa6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:c6:89:99:a1:78:ff:22:65:3c:f2:a4:5d:
                    a1:a5:d0:30:a6:e2:a5:7f:11:5f:14:e4:7a:fa:8b:
                    6f:e5:06:fb:42:cd:13:f2:a8:5f:dd:24:4a:47:c6:
                    30:5d:14:84:05:36:2c:95:f8:52:c0:8a:a3:32:9f:
                    b3:56:d6:24:c6:ff:15:3c:bb:25:56:88:f3:2c:5f:
                    18:63:77:b1:f4:26:d9:aa:88:1f:7f:ae:8a:e2:a5:
                    38:ec:73:37:22:7b:80:29:d7:bc:09:7a:c4:30:04:
                    52:ba:76:ef:59:90:fb:22:37:e3:0b:9e:4a:d3:23:
                    7b:b1:6c:3a:d1:1f:b1:b5:61:66:d6:e2:30:cf:08:
                    4f:e6:e3:07:d1:1c:23:eb:1d:72:d4:97:a4:9d:e8:
                    f2:e1:82:b1:99:e9:20:6a:f5:4e:fa:1a:40:ce:29:
                    12:38:c9:e1:18:40:11:49:d2:dd:57:75:1d:5b:90:
                    b1:30:b1:5f:d1:1e:1d:8d:94:20:d0:ad:2f:76:99:
                    46:a6:d1:6b:1b:43:48:22:25:92:72:dd:3c:85:c6:
                    7a:bb:88:4c:b7:22:15:74:a6:25:70:82:f1:f2:bd:
                    4b:10:4c:29:72:03:9f:e4:87:05:18:bf:b2:8c:ad:
                    1f:80:c4:d2:9c:8f:0a:90:52:d6:db:fb:9b:6e:56:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:61:2E:71:B7:A0:D0:4B:E3:42:EB:CC:BF:16:25:5A:A6:EA:FA:6A
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_2Eucbeg0EvjQuvMvxYlWqbq-mo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.13.0/24
                  163.5.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f5:3f:53:9a:1b:af:3a:30:2a:7a:2e:90:0f:af:a2:8f:05:
         fc:47:d5:0a:53:4c:8c:c9:e1:20:d1:61:8e:8f:15:01:3b:2e:
         bd:f4:94:0e:3e:90:c9:50:7d:e8:66:1e:93:37:2e:52:fb:c1:
         2b:48:7e:96:16:3f:15:70:51:55:72:d8:54:dc:1d:bf:b4:11:
         c8:43:b2:5c:be:2f:b0:a7:50:34:f3:ca:6e:4e:8b:94:83:88:
         fe:a0:99:a0:2d:44:db:25:e5:d9:4f:b0:0f:cd:cf:3b:aa:d2:
         81:49:7b:9a:ca:13:ec:38:c8:c7:32:45:22:e8:42:89:20:75:
         b5:95:bc:4d:5d:c2:45:69:bb:70:b4:0c:e2:b8:53:8b:11:66:
         8d:72:f7:d6:15:4d:4f:6d:e3:3a:61:29:00:cc:34:3e:71:3e:
         15:74:2d:c9:14:95:e2:e9:d4:8c:02:99:ba:d0:44:df:28:55:
         76:21:c6:61:85:e9:f9:84:85:d9:e4:15:ac:b4:50:12:ff:cd:
         42:0a:07:ba:89:75:ec:b2:4e:d6:74:0a:40:2a:f1:56:c0:fa:
         ee:6f:a2:92:df:f3:69:11:fe:5e:87:21:71:49:fc:68:df:31:
         e6:08:b0:9f:a8:4b:3d:19:4b:73:9a:f9:f7:17:3f:98:3b:41:
         1d:ae:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 02:26:04 2025 by rpki-client