This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/S_e75AZV3-MMHLgXTcVLGq4T6uc.roa
File:                     S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (raw, json)
Hash identifier:          AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=
Subject key identifier:   4B:F7:BB:E4:06:55:DF:E3:0C:1C:B8:17:4D:C5:4B:1A:AE:13:EA:E7
Certificate issuer:       /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial:       019B7759560450D7A20676C81DACD96B7D11
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/S_e75AZV3-MMHLgXTcVLGq4T6uc.roa
Signing time:             Thu 01 Jan 2026 02:18:21 +0000
ROA not before:           Thu 01 Jan 2026 02:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29100
IP address blocks:        212.99.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:56:04:50:d7:a2:06:76:c8:1d:ac:d9:6b:7d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
        Validity
            Not Before: Jan  1 02:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4bf7bbe40655dfe30c1cb8174dc54b1aae13eae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ce:7d:46:77:c7:2d:b1:0f:80:b5:a1:43:7d:
                    79:2c:c9:59:b5:78:26:16:d0:5e:e9:10:c4:8c:21:
                    18:31:c7:16:b9:89:b0:1b:09:cb:c7:02:e9:c7:0c:
                    be:1c:51:ce:03:b8:d0:b3:d1:55:cd:ea:75:e6:9f:
                    51:23:a8:b9:f4:cb:b9:4c:32:95:9d:46:60:24:9b:
                    78:90:70:a9:52:1c:2b:76:35:0a:b0:1e:59:64:90:
                    56:cf:e2:66:ed:c2:4d:d6:f5:7b:4e:f8:2e:cf:97:
                    b6:01:aa:6d:b6:5c:e7:8d:dd:a1:b8:f6:a4:fb:39:
                    e0:88:ad:ae:69:72:59:e5:6d:eb:fd:15:a0:7f:d7:
                    d9:ab:96:db:6c:c8:4c:58:4f:66:84:e5:f9:b8:10:
                    28:78:46:a7:a6:f2:99:82:3a:e2:7d:17:1d:0d:10:
                    c9:19:07:21:63:a8:3b:d5:0e:f7:a2:f2:5d:64:c6:
                    b1:f9:41:8d:4c:6f:40:4f:6e:f2:91:5f:20:1d:7e:
                    cb:b8:dd:18:de:7f:72:f4:80:fd:fa:68:f7:bb:6f:
                    2b:29:65:4f:53:17:4d:b0:b0:3e:c1:54:a9:7d:f8:
                    b8:6c:14:56:8e:0f:d2:4d:db:33:40:9b:22:1f:e2:
                    8b:7c:ea:e1:c5:a7:e2:40:92:fa:ac:6c:b7:fa:72:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F7:BB:E4:06:55:DF:E3:0C:1C:B8:17:4D:C5:4B:1A:AE:13:EA:E7
            X509v3 Authority Key Identifier:
                keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/S_e75AZV3-MMHLgXTcVLGq4T6uc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.99.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:8e:cc:f3:03:26:2d:17:c6:ed:58:5c:8a:ca:04:f8:43:dd:
         48:6b:3f:10:aa:97:dc:61:24:a7:9f:7a:8d:1d:2e:7b:1d:ac:
         1f:6b:71:72:c6:55:51:ea:2d:2c:92:5b:85:a8:65:cd:bd:cb:
         6e:45:c9:d9:e7:5b:01:02:df:f7:db:79:72:21:a7:24:d1:3d:
         42:1b:b8:63:13:30:ae:25:a6:ee:3e:06:4c:2b:2d:db:77:44:
         14:bb:ec:98:ce:95:f4:c5:e1:b1:9b:73:f7:59:88:99:70:a7:
         17:f9:cc:7d:82:d2:db:98:ee:0a:45:b4:74:4e:65:b2:03:e5:
         28:4a:6b:64:ea:81:16:36:69:e3:26:38:65:09:dd:20:6c:0a:
         39:46:28:19:38:5b:84:63:5e:6a:f5:a8:c2:28:af:aa:de:35:
         eb:17:af:d3:94:71:8f:04:ae:40:90:29:7a:d1:71:8b:ac:51:
         32:2e:c3:49:fc:d8:bf:90:20:c3:28:41:cb:6b:13:b2:6c:4c:
         66:d6:5b:f9:7f:7b:eb:b8:d2:b0:ac:bd:ef:41:8f:00:06:eb:
         2a:3b:8d:e3:13:90:43:5d:3d:aa:14:a0:05:3f:08:88:7d:10:
         64:ea:9c:07:81:8b:90:c0:f3:36:bf:8d:76:ea:46:32:8f:73:
         a8:a5:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:50:11 2026 by rpki-client