This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/j3SATBVncK2DF4V1G61Us5Sk1zo.roa
File:                     j3SATBVncK2DF4V1G61Us5Sk1zo.roa (raw, json)
Hash identifier:          zEb02s6uI3yEOdLkdeGNR+AfUDQ2YjvmMsQ5yaJfovw=
Subject key identifier:   8F:74:80:4C:15:67:70:AD:83:17:85:75:1B:AD:54:B3:94:A4:D7:3A
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       019B7C8016081015D74E8391EBFF7B0C90BE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/j3SATBVncK2DF4V1G61Us5Sk1zo.roa
Signing time:             Fri 02 Jan 2026 02:18:47 +0000
ROA not before:           Fri 02 Jan 2026 02:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34534
IP address blocks:        45.152.162.0/24 maxlen: 24
                          45.152.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:16:08:10:15:d7:4e:83:91:eb:ff:7b:0c:90:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  2 02:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f74804c156770ad831785751bad54b394a4d73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:08:68:cf:79:65:ea:66:2c:45:2d:22:76:
                    9c:5c:b4:10:d8:7b:3d:31:1d:23:df:3b:df:92:89:
                    fe:56:af:e8:ee:a5:33:22:05:2a:06:07:90:9f:c0:
                    f1:ed:61:8d:be:20:70:13:b8:ed:39:31:91:f8:e0:
                    15:13:4b:92:05:25:fb:14:18:8b:b6:11:0e:b0:06:
                    92:bc:e6:27:27:b6:1f:75:9d:56:26:3b:0d:06:28:
                    26:8f:66:51:9c:3c:17:e2:8a:5e:c7:67:c3:4d:26:
                    38:8d:1a:71:71:45:98:2a:83:40:89:a9:28:03:ca:
                    0a:a7:ba:ac:d1:0a:3a:84:00:21:e2:fc:51:da:cb:
                    fd:8e:bd:d3:8c:71:96:ca:af:e7:a8:6c:87:db:2e:
                    a3:99:cc:ab:fa:f5:46:07:e8:b0:c3:ff:81:dd:6e:
                    d0:41:43:07:b1:43:4a:b4:bb:7d:97:b6:fc:e1:56:
                    5f:91:0f:e3:87:58:c1:44:a7:f0:72:a9:79:84:5a:
                    98:0b:6f:2f:48:97:0f:a6:02:94:b2:57:06:1f:80:
                    ff:0b:74:49:bf:08:a0:39:2b:e4:9a:62:3b:44:33:
                    3c:f0:01:85:b4:69:5c:66:b6:f1:ba:89:ef:fe:d2:
                    83:d6:92:60:2d:f0:9b:a1:43:6b:ff:bf:1d:52:88:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:74:80:4C:15:67:70:AD:83:17:85:75:1B:AD:54:B3:94:A4:D7:3A
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/j3SATBVncK2DF4V1G61Us5Sk1zo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:26:4c:8f:a7:5a:d5:e9:ad:01:6b:92:4c:34:51:c3:4f:f6:
         fd:b9:75:5e:bb:ea:a9:ad:61:6a:93:5f:30:f3:66:62:61:9a:
         25:25:dd:86:98:69:5c:fc:54:9d:7d:4f:08:fc:71:a5:05:d9:
         d5:0a:a5:89:49:6c:9b:56:14:08:6f:6d:d8:71:30:15:9f:a0:
         c1:c6:79:bc:5e:39:e8:63:e3:75:7a:12:06:f8:d4:96:1d:af:
         fb:6a:77:58:e3:ab:26:e9:6a:1d:6f:3b:81:b6:db:23:9d:c1:
         2f:9e:23:ec:a3:7f:52:40:08:5b:05:12:61:21:29:7e:c3:f5:
         1f:98:e6:d4:1b:65:c2:bc:37:04:f7:28:96:e1:60:92:0a:45:
         d2:51:af:fe:7b:0b:56:e8:03:48:e3:b5:3d:9e:a0:16:ac:55:
         c4:6d:7e:92:fd:14:08:93:2d:6c:18:08:30:5d:0c:11:42:a5:
         dd:71:5d:70:f0:53:a1:76:1d:ca:e1:f3:65:db:5b:c4:de:1c:
         dd:b9:0f:a8:17:94:15:fa:a6:22:c0:03:29:e2:e6:60:f8:55:
         b9:65:da:cf:d6:38:82:44:93:8a:dc:9d:d4:91:59:01:81:3b:
         7e:c5:67:23:58:90:f8:20:96:2a:d8:f0:d1:06:70:fe:bf:86:
         eb:7a:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:57:55 2026 by rpki-client