This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-I-RFq5DUWbeGJv4zplz64A-SOo.roa
File:                     1-I-RFq5DUWbeGJv4zplz64A-SOo.roa (raw, json)
Hash identifier:          qBQG43Xb7gJXRxdasaVg9MYGlNOJT/BqZAFOQP1oSt0=
Subject key identifier:   F8:8F:91:16:AE:43:51:66:DE:18:9B:F8:CE:99:73:EB:80:3E:48:EA
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       019B7C802378C4C07D3E8E732CF49058964B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-I-RFq5DUWbeGJv4zplz64A-SOo.roa
Signing time:             Fri 02 Jan 2026 02:18:50 +0000
ROA not before:           Fri 02 Jan 2026 02:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199306
IP address blocks:        45.151.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:23:78:c4:c0:7d:3e:8e:73:2c:f4:90:58:96:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  2 02:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f88f9116ae435166de189bf8ce9973eb803e48ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:7a:67:04:fe:75:63:ea:24:ea:c5:01:9e:
                    0f:aa:92:78:6b:ba:d7:8d:bc:76:31:84:b1:cf:42:
                    c8:15:b9:77:be:87:c8:33:31:83:c5:1f:30:6b:ec:
                    e1:8e:2e:54:b8:fe:92:77:f0:8b:83:74:f7:5e:a0:
                    f7:fb:a9:05:d9:77:ff:a7:cd:fc:97:76:6b:ea:ad:
                    7c:4f:6d:da:da:03:2a:61:5f:e8:17:11:8a:88:b9:
                    18:f4:16:b6:f8:c9:c4:ef:bf:a3:ef:bc:99:9b:7c:
                    64:6c:9f:ca:18:43:0f:7a:c8:d1:8f:f8:13:e4:47:
                    0b:64:81:c2:60:11:b7:6c:95:71:1d:a9:99:9e:68:
                    b5:cb:c4:0c:c0:8c:5d:f1:b1:41:b9:07:39:57:87:
                    14:1b:12:e2:a6:71:8a:e3:6c:56:6e:6c:a5:e8:e4:
                    a1:3a:3d:11:26:90:0c:69:f2:a8:6d:19:5a:c6:a0:
                    6b:da:ea:29:8f:2c:f1:73:0a:72:d4:28:0a:7f:96:
                    8a:c1:5a:6f:5e:59:09:07:17:e6:a1:7e:f6:c8:4c:
                    ca:69:42:58:0f:17:b0:dd:45:bf:d6:b6:92:37:4d:
                    cc:06:8d:d2:81:d4:33:20:2b:0c:1d:52:99:47:2f:
                    d8:25:e5:2d:11:da:e9:d5:c4:d4:02:95:ee:09:97:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8F:91:16:AE:43:51:66:DE:18:9B:F8:CE:99:73:EB:80:3E:48:EA
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/1-I-RFq5DUWbeGJv4zplz64A-SOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:43:30:55:84:c4:5b:24:94:c1:85:13:e6:a5:0f:51:e8:77:
         fb:e0:10:d0:6d:db:e5:f4:9b:8f:0f:6d:bf:ef:51:9a:87:39:
         6a:17:a2:68:79:98:82:ff:c1:c0:8f:b6:0f:09:59:fe:ce:c5:
         f6:a8:a2:37:39:1e:5a:6b:2b:b5:9d:3e:b0:64:8c:bb:79:18:
         da:7c:73:2d:0f:f9:72:22:9b:3a:0a:28:a4:e5:cc:2d:56:d5:
         c6:cc:1f:d4:26:3c:da:01:ac:92:db:52:08:89:3c:f4:e1:a1:
         7c:5f:a5:ba:f3:0c:e3:b3:a2:5d:3d:fd:53:1f:46:20:45:aa:
         15:05:de:d6:05:cc:4f:66:d5:d6:43:57:05:fb:da:9a:12:48:
         22:83:98:f8:fc:47:9d:b9:77:eb:61:68:11:35:28:13:75:d2:
         e9:3c:d9:6d:2e:5c:f5:da:03:b6:b6:1c:39:3f:28:83:a1:60:
         36:1f:12:86:bb:a9:44:28:57:78:b5:7e:62:d6:17:d5:f0:eb:
         89:9f:fd:f8:e2:2d:cc:6f:ff:16:08:25:d6:8b:60:86:6c:2e:
         f7:7e:25:87:77:c3:86:d6:41:77:98:83:3f:c1:44:a6:9a:ba:
         31:1b:dc:ce:94:d9:99:29:12:59:0a:b4:e3:c8:49:96:a0:af:
         10:a3:e9:10
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt8gCN4xMB9Po5zLPSQWJZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODhmOTExNmFlNDM1MTY2ZGUxODliZjhjZTk5NzNlYjgwM2U0OGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVl6ZwT+dWPqJOrFAZ4PqpJ4a7rX
jbx2MYSxz0LIFbl3vofIMzGDxR8wa+zhji5UuP6Sd/CLg3T3XqD3+6kF2Xf/p838
l3Zr6q18T23a2gMqYV/oFxGKiLkY9Ba2+MnE77+j77yZm3xkbJ/KGEMPesjRj/gT
5EcLZIHCYBG3bJVxHamZnmi1y8QMwIxd8bFBuQc5V4cUGxLipnGK42xWbmyl6OSh
Oj0RJpAMafKobRlaxqBr2uopjyzxcwpy1CgKf5aKwVpvXlkJBxfmoX72yEzKaUJY
Dxew3UW/1raSN03MBo3SgdQzICsMHVKZRy/YJeUtEdrp1cTUApXuCZcAoQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPiPkRauQ1Fm3hib+M6Zc+uAPkjqMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvMS1JLVJGcTVEVVdiZUdKdjR6cGx6NjRBLVNPby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1
NC8xL0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2XOTAN
BgkqhkiG9w0BAQsFAAOCAQEAnUMwVYTEWySUwYUT5qUPUeh3++AQ0G3b5fSbjw9t
v+9Rmoc5aheiaHmYgv/BwI+2DwlZ/s7F9qiiNzkeWmsrtZ0+sGSMu3kY2nxzLQ/5
ciKbOgoopOXMLVbVxswf1CY82gGskttSCIk89OGhfF+luvMM47OiXT39Ux9GIEWq
FQXe1gXMT2bV1kNXBfvamhJIIoOY+PxHnbl362FoETUoE3XS6TzZbS5c9doDtrYc
OT8og6FgNh8ShrupRChXeLV+YtYX1fDriZ/9+OItzG//Fggl1otghmwu934lh3fD
htZBd5iDP8FEppq6MRvczpTZmSkSWQq048hJlqCvEKPpEA==
-----END CERTIFICATE-----
Generated at Mon Jan 19 19:59:21 2026 by rpki-client