This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/p15GuFvixgoTOyyIbT-KTRAIEp0.roa
File:                     p15GuFvixgoTOyyIbT-KTRAIEp0.roa (raw, json)
Hash identifier:          UQuqR5EhC1mtt9aEgvSOw9iiUShCJRPN8GbN8v3CyZ4=
Subject key identifier:   A7:5E:46:B8:5B:E2:C6:0A:13:3B:2C:88:6D:3F:8A:4D:10:08:12:9D
Certificate issuer:       /CN=1a58462feba546104b4797292dd23a46b02f7ed2
Certificate serial:       019B78353B23BD33D9EC163808F843B9D9F0
Authority key identifier: 1A:58:46:2F:EB:A5:46:10:4B:47:97:29:2D:D2:3A:46:B0:2F:7E:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/p15GuFvixgoTOyyIbT-KTRAIEp0.roa
Signing time:             Thu 01 Jan 2026 06:18:33 +0000
ROA not before:           Thu 01 Jan 2026 06:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214689
IP address blocks:        145.63.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:3b:23:bd:33:d9:ec:16:38:08:f8:43:b9:d9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a58462feba546104b4797292dd23a46b02f7ed2
        Validity
            Not Before: Jan  1 06:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a75e46b85be2c60a133b2c886d3f8a4d1008129d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:bf:07:0d:9b:78:c6:a0:0a:68:bf:09:87:
                    d4:e5:c7:17:b2:38:14:cf:a6:c9:37:f9:ac:c6:89:
                    29:de:d8:0e:b1:82:93:84:a7:02:4d:a2:17:0a:f2:
                    ea:76:57:bb:54:85:aa:c6:f2:ff:f1:c0:37:36:7d:
                    60:32:43:66:81:b6:bb:2e:9e:c1:e6:75:f9:d5:c6:
                    a9:f5:b0:b5:49:9d:b8:f9:5f:e6:94:47:f9:2e:aa:
                    63:51:8d:82:99:05:c3:84:26:8f:85:2c:a3:94:1f:
                    97:0e:f6:88:be:ca:ad:11:a4:d9:00:42:ec:12:9c:
                    da:c7:09:48:96:d5:c5:86:f5:99:dc:24:6b:8d:12:
                    38:62:dd:be:1e:1c:5f:3a:91:f7:ce:1f:34:b9:ac:
                    18:88:5f:8f:45:5a:cd:60:71:7f:10:67:9b:fc:4d:
                    ab:06:34:97:ac:80:61:d9:37:06:31:f5:43:be:b9:
                    be:1c:ab:5c:79:09:e2:4e:88:2a:ac:8a:12:60:50:
                    10:2b:53:ac:2c:ea:91:2d:c4:d7:16:a6:1e:e8:aa:
                    cc:12:ee:ee:1c:67:d4:8c:8c:d1:1e:2c:9d:c1:00:
                    8f:18:34:a1:1d:30:dd:c0:ec:03:cf:ed:3a:85:1c:
                    75:40:1b:72:23:ed:c0:90:5d:43:3e:5d:80:7d:6c:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5E:46:B8:5B:E2:C6:0A:13:3B:2C:88:6D:3F:8A:4D:10:08:12:9D
            X509v3 Authority Key Identifier:
                keyid:1A:58:46:2F:EB:A5:46:10:4B:47:97:29:2D:D2:3A:46:B0:2F:7E:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/p15GuFvixgoTOyyIbT-KTRAIEp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.63.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:99:75:59:a9:ae:a6:06:a6:f4:ef:64:ad:98:75:6c:80:c0:
         09:5c:1e:4a:7c:8d:ff:11:42:ef:d0:52:10:bb:fe:c3:df:18:
         15:86:6e:4e:a1:1a:f7:b0:f5:72:52:53:31:5f:ec:b9:7c:c1:
         5d:a1:f5:4a:0d:1a:e6:bb:10:26:86:0d:89:97:81:f5:ef:56:
         c6:8b:85:20:f7:61:01:92:4c:f8:96:d2:f9:35:ec:46:03:48:
         01:be:18:26:80:d3:cb:34:bd:2f:62:3e:af:c6:d5:45:37:68:
         2f:19:06:56:e8:cd:af:08:7a:c9:6a:59:91:f3:e7:4a:0e:f0:
         98:ec:b8:21:46:d7:dc:13:03:f8:4e:ad:60:85:e9:f4:cf:a9:
         9e:db:6a:4d:06:34:f6:29:a9:2a:e5:1d:bf:36:d8:b2:c7:8b:
         d7:7f:55:90:c2:dd:f6:e4:b3:9a:2d:10:c9:3e:18:03:71:49:
         4b:b8:6e:8d:ae:91:80:a3:90:17:9d:a2:b7:7d:fd:3c:69:a6:
         bc:6e:e7:39:bd:15:3f:03:07:ee:40:73:da:ce:a2:96:31:36:
         fc:10:d3:ec:4e:9b:be:c0:ab:d1:36:9d:40:7f:5b:11:84:6d:
         55:29:9e:f6:c5:3f:98:5c:af:36:52:9b:51:f4:2c:bd:51:f4:
         bf:fd:0f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:52 2026 by rpki-client