This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/4cLeBIUzolxvixomGkjZcKiBte8.roa
File:                     4cLeBIUzolxvixomGkjZcKiBte8.roa (raw, json)
Hash identifier:          N/jmOnjqMHqyGA9wdQXttd0JDYddztlZ/3k1FyNVxQU=
Subject key identifier:   E1:C2:DE:04:85:33:A2:5C:6F:8B:1A:26:1A:48:D9:70:A8:81:B5:EF
Certificate issuer:       /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial:       019B78A340E339E43B83F0A2C6747487B27E
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/4cLeBIUzolxvixomGkjZcKiBte8.roa
Signing time:             Thu 01 Jan 2026 08:18:43 +0000
ROA not before:           Thu 01 Jan 2026 08:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203666
IP address blocks:        94.45.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:40:e3:39:e4:3b:83:f0:a2:c6:74:74:87:b2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
        Validity
            Not Before: Jan  1 08:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e1c2de048533a25c6f8b1a261a48d970a881b5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3c:26:18:5d:fb:f6:4f:2e:a9:6c:52:e4:70:
                    ec:7c:15:70:4f:95:30:63:d6:c8:5e:75:6d:d3:f0:
                    7f:ac:0c:6f:66:7e:09:bc:04:04:ed:c8:3a:5a:5d:
                    a2:26:6b:d8:e7:f0:37:d9:f8:37:c3:47:a1:71:29:
                    7e:6b:7d:3f:0d:b8:f0:23:2b:b3:e2:8e:12:2d:a7:
                    12:d2:70:ba:ae:1f:13:c5:ad:20:aa:4a:5a:08:68:
                    6b:7f:1e:e5:da:0e:55:4f:94:e2:07:34:1f:c0:3f:
                    53:a5:fa:00:70:7e:1a:86:78:19:88:b7:d9:f0:00:
                    f5:40:53:d3:18:d9:9a:ee:bb:3d:df:8c:00:07:dd:
                    73:4c:f6:0f:07:33:23:b1:5d:44:e4:33:f7:a7:6d:
                    7a:d1:af:c1:d9:cc:de:90:0c:3b:c2:4d:2f:70:3c:
                    9a:71:00:bb:2f:0d:61:bb:4d:f2:18:81:47:50:c5:
                    c8:ec:5e:d0:cd:63:cb:91:82:9c:be:14:0a:b8:ad:
                    ff:a8:01:32:4a:ec:36:5e:f1:8f:ef:19:9a:c5:0f:
                    c6:8a:ae:52:27:73:6b:19:ee:81:91:30:0c:f2:77:
                    cc:6a:99:8a:4e:3d:43:54:93:c0:24:f3:54:17:ac:
                    dc:58:4c:b9:f8:44:3c:2b:e1:20:39:62:6e:d6:55:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C2:DE:04:85:33:A2:5C:6F:8B:1A:26:1A:48:D9:70:A8:81:B5:EF
            X509v3 Authority Key Identifier:
                keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/4cLeBIUzolxvixomGkjZcKiBte8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:d7:77:eb:ab:7f:44:d2:a4:3e:76:1f:4c:db:86:fb:3f:84:
         99:8c:dc:2d:64:cb:8d:18:dd:18:78:2e:b4:fc:00:fb:73:96:
         06:9a:4b:5b:93:e1:72:14:5c:30:8a:11:3e:9d:bc:77:b7:16:
         05:e6:fe:85:8a:c2:cf:68:32:2c:ef:6a:dc:a9:35:2b:0d:f7:
         8a:ca:47:75:06:d6:ed:c8:8a:7b:53:d9:c6:f5:04:ea:f9:2c:
         15:d1:49:24:b9:f9:3e:15:6f:1d:c5:8c:d4:a9:0b:6b:40:22:
         50:97:de:e2:95:1b:a9:af:ef:25:50:6c:c3:f1:5c:5f:88:23:
         3a:8c:2e:a6:77:4c:c8:a5:ed:84:40:38:97:72:b3:2f:32:8e:
         7d:b0:1c:ee:94:ac:7d:fa:dd:11:94:2c:72:e1:27:ea:62:fd:
         90:9d:6f:ae:8d:88:6e:8d:d9:6e:21:82:a1:eb:73:fb:a3:bb:
         14:1c:a7:33:16:6b:c8:55:fd:51:54:87:3c:13:f1:f2:70:7f:
         01:4b:51:73:58:18:9e:93:af:d4:37:b3:92:84:52:57:b0:ce:
         03:f8:8a:96:e6:fb:85:2d:d7:b2:68:56:e8:58:79:48:ff:6b:
         0e:45:f8:2d:92:90:87:07:d4:be:b2:d5:93:3b:61:50:a7:66:
         e7:05:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:21 2026 by rpki-client