This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/InNWe6dZglO7uEDucSJhMoUB55U.roa
File:                     InNWe6dZglO7uEDucSJhMoUB55U.roa (raw, json)
Hash identifier:          RSzKVRQA+oUsqr256y1ckYtX3s2+tqzZlXY58fpRuM8=
Subject key identifier:   22:73:56:7B:A7:59:82:53:BB:B8:40:EE:71:22:61:32:85:01:E7:95
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       019B797EDBF73FDCBBFDAA8915D070488CDF
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/InNWe6dZglO7uEDucSJhMoUB55U.roa
Signing time:             Thu 01 Jan 2026 12:18:35 +0000
ROA not before:           Thu 01 Jan 2026 12:18:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210646
IP address blocks:        151.251.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:db:f7:3f:dc:bb:fd:aa:89:15:d0:70:48:8c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  1 12:18:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2273567ba7598253bbb840ee712261328501e795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ba:28:28:66:57:55:e7:59:5a:78:0f:0a:25:
                    c1:b7:61:25:22:c3:52:96:f6:6f:7f:2c:88:08:5c:
                    05:73:98:63:75:79:3c:36:2c:35:20:44:40:e9:88:
                    13:05:bc:a0:8e:c6:23:6d:b7:9a:c2:d0:ed:83:88:
                    e7:3e:e6:ed:d2:c6:b4:d2:de:2e:d7:a0:84:cf:d2:
                    72:b2:6c:f9:f0:6f:d5:8c:29:55:54:db:63:33:ed:
                    6b:a0:4b:ee:99:14:0e:36:51:69:42:55:f4:59:b7:
                    28:79:23:e5:f6:ac:de:91:db:f3:1c:b3:bc:55:e7:
                    1b:af:36:8b:61:6b:2a:a4:69:f9:b8:ea:3f:59:f7:
                    b6:8f:d6:f8:e2:a9:d7:91:f5:90:87:c1:76:c3:17:
                    9c:f2:b4:44:d2:49:0b:61:10:e4:84:81:87:52:19:
                    76:6d:38:1a:63:4d:7f:9c:ec:0f:00:16:83:fd:a1:
                    05:26:3d:e6:89:03:3f:ba:86:46:68:5e:6e:85:f4:
                    58:ec:44:16:9a:ed:1c:55:62:8d:72:42:f0:e6:05:
                    5d:77:c9:83:50:75:b0:ef:3a:92:04:a4:b6:a4:f3:
                    fe:3b:fd:c7:75:d5:7e:e0:9d:33:dc:db:cf:3c:57:
                    67:c9:77:6d:a3:e8:cb:cc:d6:89:3e:1e:80:5d:d5:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:73:56:7B:A7:59:82:53:BB:B8:40:EE:71:22:61:32:85:01:E7:95
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/InNWe6dZglO7uEDucSJhMoUB55U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.251.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:1b:ce:69:44:b3:73:41:9d:fd:72:d4:89:30:64:bb:de:dc:
         9f:d4:19:a6:6c:1b:b1:0c:27:8f:36:53:f2:a1:fd:7c:63:15:
         b0:6b:ac:00:ad:db:4f:b5:e2:0b:9a:a8:fa:b1:19:14:21:aa:
         48:9c:3d:cf:e1:78:75:67:dd:db:4d:60:47:89:46:16:2d:3c:
         95:bf:d1:20:4b:3b:de:e0:9f:55:bd:18:99:a4:73:83:78:e4:
         91:58:c2:6f:3e:6e:34:f8:a3:cf:cd:7c:52:4b:69:5f:fa:40:
         05:04:a6:3a:32:0d:0e:cf:d1:94:4f:e5:b0:75:c7:21:04:42:
         5a:2f:36:68:ba:ae:4d:bd:6c:9a:38:5f:ca:3a:23:24:1e:48:
         f1:f1:26:4a:74:f3:8d:75:85:d4:e0:83:24:35:da:9e:05:e0:
         ed:49:e3:8b:47:9d:43:39:aa:bc:ad:65:6c:f0:67:f1:1b:35:
         9c:00:d1:58:6f:d7:b7:20:33:ee:f1:c7:86:13:00:01:0c:75:
         1d:72:89:fa:c1:a0:9d:35:6f:0a:ad:96:ae:1d:4c:9d:36:bb:
         23:42:34:51:6a:ee:ef:23:e3:ed:74:b3:1c:1f:93:b4:41:45:
         a4:8b:1d:50:88:d5:8a:43:b0:56:89:35:b4:c8:05:14:bd:9c:
         b1:c8:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:24:35 2026 by rpki-client