This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/9EjUnibhEJq5bLfdbGt92aCmGYY.roa
File:                     9EjUnibhEJq5bLfdbGt92aCmGYY.roa (raw, json)
Hash identifier:          DnS2jnsGqE15sINmHwk3fDd3mcW2MTDLdlWaO67YF34=
Subject key identifier:   F4:48:D4:9E:26:E1:10:9A:B9:6C:B7:DD:6C:6B:7D:D9:A0:A6:19:86
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       019B7F83882D046F3F5FE42E93E332E4AAF0
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/9EjUnibhEJq5bLfdbGt92aCmGYY.roa
Signing time:             Fri 02 Jan 2026 16:21:25 +0000
ROA not before:           Fri 02 Jan 2026 16:21:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197071
IP address blocks:        45.65.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:88:2d:04:6f:3f:5f:e4:2e:93:e3:32:e4:aa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Jan  2 16:21:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f448d49e26e1109ab96cb7dd6c6b7dd9a0a61986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f5:7a:71:0f:72:ba:67:75:5a:50:b7:21:7a:
                    85:26:ef:d2:02:e6:90:80:d2:00:11:69:30:14:ae:
                    08:62:ed:66:49:28:aa:1d:64:40:fd:75:a8:4a:52:
                    30:9e:45:89:d0:a3:20:56:8d:f8:51:1e:eb:17:c3:
                    7d:d7:7c:22:2a:31:ed:e3:c6:f3:96:27:28:02:28:
                    ee:73:73:5d:51:86:f7:2c:52:6c:d1:db:33:e1:5c:
                    03:b9:1f:50:01:38:c4:d6:ce:3c:c2:82:d2:a3:70:
                    09:55:fb:21:d9:37:7c:51:1b:b0:83:8b:96:65:28:
                    d4:cd:bc:7a:85:e7:98:33:35:4d:1a:b5:bd:cd:0b:
                    e4:f3:4b:32:ae:49:3c:6d:32:44:13:be:9d:11:0b:
                    4e:36:fa:7c:52:ec:4e:1a:6c:5f:5b:3e:92:b4:13:
                    b0:5b:8b:12:64:9a:b0:3a:b4:65:b5:bd:55:6c:0a:
                    63:d4:42:af:fb:53:a5:c7:25:bd:e9:11:06:d1:95:
                    02:34:fc:9a:35:8b:bb:6f:54:77:60:3a:0c:10:af:
                    b8:f1:e8:de:ff:ca:16:a6:e2:fa:99:de:8e:d5:7a:
                    92:bf:ba:6a:cc:12:57:a4:c6:6e:21:02:ac:c1:fb:
                    07:df:e2:5d:9c:bd:c3:a6:ed:15:ce:f3:86:f4:a2:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:48:D4:9E:26:E1:10:9A:B9:6C:B7:DD:6C:6B:7D:D9:A0:A6:19:86
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/9EjUnibhEJq5bLfdbGt92aCmGYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8d:cb:1b:6a:fe:c4:14:17:bd:89:6c:24:cb:b5:5f:1d:09:
         e7:c1:cb:ee:c8:38:43:f9:f3:d4:ec:3c:94:d3:2b:bd:dd:9a:
         b1:d3:80:53:28:73:14:c9:92:99:cf:8e:9e:d1:43:51:f0:0a:
         37:38:39:e7:ff:21:e4:37:2f:93:5d:5e:6f:6d:6e:d5:3b:93:
         e4:12:ac:e7:c5:90:0f:ee:97:f9:34:2f:63:1d:24:9c:46:7a:
         6f:b3:e3:f5:11:91:99:e9:1c:18:22:6f:b7:17:db:3a:b4:02:
         bd:7a:2c:92:d9:ef:85:31:a8:c9:ff:29:70:91:7b:be:f2:6c:
         7b:4a:70:88:73:d9:8e:5d:9d:77:50:6a:5d:a5:e0:54:94:f8:
         0a:11:3d:71:cd:8d:13:99:25:6b:2f:01:64:75:e4:2e:43:73:
         cb:b8:6e:56:65:b2:ff:3f:06:cd:c5:de:9e:44:80:d6:d2:a5:
         3a:89:3c:c5:fe:0a:4e:a8:ce:45:11:90:08:05:42:7c:58:8c:
         03:6d:6e:ee:82:ce:ca:b6:7e:98:56:da:0b:4e:c0:66:c4:c3:
         b5:9d:c5:cf:d6:99:6d:ba:4e:da:a5:6d:a3:88:10:fb:b1:78:
         bf:b0:9f:ee:74:ca:23:2f:f4:3e:eb:1b:9e:37:3f:c4:a6:e6:
         30:ec:82:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/g4gtBG8/X+Quk+My5KrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjYwMTAyMTYyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDQ4ZDQ5ZTI2ZTExMDlhYjk2Y2I3ZGQ2YzZiN2RkOWEwYTYxOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfV6cQ9yumd1WlC3IXqFJu/SAuaQ
gNIAEWkwFK4IYu1mSSiqHWRA/XWoSlIwnkWJ0KMgVo34UR7rF8N913wiKjHt48bz
licoAijuc3NdUYb3LFJs0dsz4VwDuR9QATjE1s48woLSo3AJVfsh2Td8URuwg4uW
ZSjUzbx6heeYMzVNGrW9zQvk80syrkk8bTJEE76dEQtONvp8UuxOGmxfWz6StBOw
W4sSZJqwOrRltb1VbApj1EKv+1OlxyW96REG0ZUCNPyaNYu7b1R3YDoMEK+48eje
/8oWpuL6md6O1XqSv7pqzBJXpMZuIQKswfsH3+JdnL3Dpu0VzvOG9KLRGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPRI1J4m4RCauWy33WxrfdmgphmGMB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvOUVqVW5pYmhFSnE1YkxmZGJHdDkyYUNtR1lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUFzMA0G
CSqGSIb3DQEBCwUAA4IBAQCIjcsbav7EFBe9iWwky7VfHQnnwcvuyDhD+fPU7DyU
0yu93Zqx04BTKHMUyZKZz46e0UNR8Ao3ODnn/yHkNy+TXV5vbW7VO5PkEqznxZAP
7pf5NC9jHSScRnpvs+P1EZGZ6RwYIm+3F9s6tAK9eiyS2e+FMajJ/ylwkXu+8mx7
SnCIc9mOXZ13UGpdpeBUlPgKET1xzY0TmSVrLwFkdeQuQ3PLuG5WZbL/PwbNxd6e
RIDW0qU6iTzF/gpOqM5FEZAIBUJ8WIwDbW7ugs7Ktn6YVtoLTsBmxMO1ncXP1plt
uk7apW2jiBD7sXi/sJ/udMojL/Q+6xueNz/EpuYw7IIP
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:05 2026 by rpki-client