This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/0VMT834xpSH5P_uOhco5RR0cnoY.roa
File:                     0VMT834xpSH5P_uOhco5RR0cnoY.roa (raw, json)
Hash identifier:          Ng9UcPHoDDsKYVTWePxupbYgszhaJH87Xsya0hFWmSI=
Subject key identifier:   D1:53:13:F3:7E:31:A5:21:F9:3F:FB:8E:85:CA:39:45:1D:1C:9E:86
Certificate issuer:       /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial:       019B797F3304D78AE5111B0BE92DC1B1D678
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/0VMT834xpSH5P_uOhco5RR0cnoY.roa
Signing time:             Thu 01 Jan 2026 12:18:57 +0000
ROA not before:           Thu 01 Jan 2026 12:18:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        45.80.175.0/24 maxlen: 24
                          2a13:7c40:1::/48 maxlen: 48
                          2a13:7c40:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:33:04:d7:8a:e5:11:1b:0b:e9:2d:c1:b1:d6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
        Validity
            Not Before: Jan  1 12:18:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d15313f37e31a521f93ffb8e85ca39451d1c9e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:d8:12:87:30:79:a9:29:b1:e3:d3:70:fb:
                    db:37:70:f7:8a:8d:6c:d1:d4:29:0a:08:5a:c4:c0:
                    5f:48:16:65:9a:df:f6:e5:7d:b5:c7:e1:95:de:8a:
                    f5:d3:77:6d:b0:5c:02:a0:bf:c8:d6:19:fc:4c:e7:
                    f1:f2:3c:01:d5:15:9c:de:bf:ca:ab:5e:ff:bb:e8:
                    51:be:82:f8:77:08:45:4f:3f:1d:4a:11:7b:62:6d:
                    63:8b:44:d0:2f:47:af:f9:58:5c:57:51:10:84:b7:
                    78:e0:2f:2c:54:40:2a:c0:a6:1d:5f:8b:98:91:11:
                    4f:69:bc:6c:26:83:90:e0:5b:76:a4:07:d0:6c:bf:
                    b6:b7:47:e7:38:d3:1a:de:32:2c:ef:3a:24:5d:e0:
                    d9:cf:62:5b:ae:af:4d:94:69:db:67:ee:cf:99:8f:
                    84:ef:cc:64:4a:42:3e:5b:4b:c7:2d:b2:ad:e7:2b:
                    b1:8b:62:b2:d4:61:b2:2c:c3:f4:3d:b9:37:89:d3:
                    1e:bc:8f:67:1b:d5:f7:3c:f7:22:c3:84:5f:45:e7:
                    75:1e:7e:2d:e9:4a:3b:c1:ca:6b:80:0b:2f:36:fe:
                    42:68:25:a6:ec:4f:4f:1f:cb:26:2a:f3:fc:0b:a6:
                    8b:ea:dc:18:f1:6d:a9:26:06:b1:85:0a:28:b8:36:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:53:13:F3:7E:31:A5:21:F9:3F:FB:8E:85:CA:39:45:1D:1C:9E:86
            X509v3 Authority Key Identifier:
                keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/0VMT834xpSH5P_uOhco5RR0cnoY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.175.0/24
                IPv6:
                  2a13:7c40:1::-2a13:7c40:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:aa:b0:7a:25:99:31:49:8d:07:42:26:73:19:10:3c:0f:
         e4:a3:d4:11:c6:4f:83:08:04:c4:ee:f6:c3:01:19:51:c9:5f:
         c2:53:51:fd:8d:96:2f:2a:de:0e:ca:f8:5f:a8:ed:09:80:43:
         e7:7d:80:ff:eb:3a:f2:a8:74:cc:38:e5:16:73:29:68:03:f9:
         b8:0a:d5:9d:73:c3:aa:ce:db:c8:0e:f3:e0:39:f1:fa:52:0b:
         53:45:79:60:4c:c5:cf:7a:2d:38:a0:03:df:bb:dc:3b:68:af:
         9b:95:2f:8c:27:d5:8f:21:c1:62:f7:40:01:7e:cb:9d:f4:ce:
         49:bb:d0:64:7e:4b:82:db:12:8f:c0:cd:cd:37:ac:e7:68:0a:
         92:65:57:55:c7:00:e8:6c:ba:b5:74:78:ad:26:3c:0e:0a:4e:
         06:d2:ac:b5:b9:b0:ed:b3:c0:37:35:df:ab:62:20:2d:d9:59:
         46:c2:25:8a:79:2e:11:d2:42:37:aa:fe:2e:46:f1:1f:04:87:
         8f:19:a4:a9:5b:46:5b:1e:d4:45:1b:0f:24:b4:37:9e:20:17:
         e1:b4:f2:e2:18:bf:a9:17:d9:c7:d0:b9:1a:1d:3f:37:9a:90:
         ab:c4:be:93:42:9c:97:13:b0:8e:ca:35:f6:ed:d7:43:db:78:
         99:ad:7e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:31 2026 by rpki-client