This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/E_0leT_uDRkXv7WB57p6ohdYHcA.roa
File:                     E_0leT_uDRkXv7WB57p6ohdYHcA.roa (raw, json)
Hash identifier:          of3SrKQ/OM0hwqJUJsuqK6bsFn3lmbUXAT1QC0UR01k=
Subject key identifier:   13:FD:25:79:3F:EE:0D:19:17:BF:B5:81:E7:BA:7A:A2:17:58:1D:C0
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       019B7AC7D350215F6C0438ACC796694F5E40
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/E_0leT_uDRkXv7WB57p6ohdYHcA.roa
Signing time:             Thu 01 Jan 2026 18:17:54 +0000
ROA not before:           Thu 01 Jan 2026 18:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56323
IP address blocks:        159.148.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:d3:50:21:5f:6c:04:38:ac:c7:96:69:4f:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jan  1 18:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13fd25793fee0d1917bfb581e7ba7aa217581dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:06:68:1c:e3:fa:6e:81:a0:5d:98:5e:02:
                    7c:70:3f:33:b3:6e:e9:10:2a:40:c0:ed:ee:a9:75:
                    aa:e6:7b:18:91:0c:47:22:cb:ff:93:a2:46:53:b9:
                    e2:db:99:94:be:f4:1c:f3:ba:3e:68:07:48:f4:74:
                    09:ff:c4:03:9e:b0:39:fb:7e:eb:b8:d8:59:e0:45:
                    18:ad:0b:35:bf:c0:0c:27:8a:54:fc:2f:60:32:3f:
                    14:40:70:26:27:2e:e4:28:0a:2f:39:7c:aa:cf:59:
                    ee:ac:94:58:bd:65:64:4b:db:dd:95:d0:91:7b:0f:
                    aa:26:59:8b:1b:73:0e:96:a7:8d:e8:8d:e2:f7:0c:
                    06:15:bb:09:e1:c0:2d:74:66:69:ce:ad:86:d8:e1:
                    43:af:84:9d:12:7e:39:09:d9:62:38:fa:9c:ad:22:
                    f9:2f:23:9a:ce:bb:3a:43:83:f5:c5:1d:91:43:81:
                    69:bf:f8:6e:c5:cd:d4:45:94:0f:e8:15:a8:3c:61:
                    55:79:3a:5d:18:01:cb:16:fd:53:52:36:46:ac:7e:
                    98:64:16:9e:59:a5:d3:7b:d4:94:06:9d:96:a9:c1:
                    87:aa:9f:4a:b5:31:f6:2f:2a:53:44:7d:49:1c:83:
                    21:42:52:ad:f0:90:ef:c6:6e:00:dc:48:e8:37:05:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FD:25:79:3F:EE:0D:19:17:BF:B5:81:E7:BA:7A:A2:17:58:1D:C0
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/E_0leT_uDRkXv7WB57p6ohdYHcA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.148.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:f6:c9:6b:d1:d8:d6:ad:ac:15:61:e4:bb:50:3d:2c:b6:
         d8:35:37:07:9b:41:4e:e0:22:15:ff:1c:64:3c:30:f9:93:b0:
         d3:cb:60:f8:2f:e2:12:c4:a7:51:96:8c:b5:25:2b:c5:13:89:
         19:d1:f5:40:d0:98:4e:45:49:1d:6c:34:22:1c:e9:55:c2:70:
         5d:f4:48:55:16:1a:d5:48:bf:a1:27:67:f4:61:c0:18:75:7e:
         db:18:5b:59:79:c5:20:da:d4:40:45:1a:8c:bc:42:03:c4:5d:
         08:f9:68:1e:aa:7e:aa:81:32:52:15:c1:59:c0:51:68:d4:70:
         f9:4a:5a:fe:22:40:a4:38:c6:2e:ce:2b:72:30:7f:e7:e9:76:
         d7:f5:de:d1:7a:04:b0:34:6b:12:f2:a9:88:c2:6c:f5:1c:8c:
         4b:e3:28:fb:06:ba:6c:71:0c:39:91:0a:51:77:c8:19:00:ca:
         cd:30:1e:2d:b7:f3:ec:4f:cd:1e:d5:c9:e0:86:2a:08:74:57:
         7c:72:9a:37:f1:f6:87:9e:d1:dd:45:58:41:5d:b5:64:c5:9c:
         e0:1a:3d:ae:00:ce:1b:80:da:f7:53:2e:d7:3b:89:57:c9:c9:
         11:50:b3:dc:36:c8:5d:e2:e2:b5:55:31:46:ef:7a:c5:62:7a:
         15:9d:36:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:42 2026 by rpki-client