This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/u4GrkDmUsv-KxQ5w2mZacZhAwrQ.roa
File:                     u4GrkDmUsv-KxQ5w2mZacZhAwrQ.roa (raw, json)
Hash identifier:          VCry5fXsZmif7uFZi9Q9iqevGHcyEwoEotMmeJClM4s=
Subject key identifier:   BB:81:AB:90:39:94:B2:FF:8A:C5:0E:70:DA:66:5A:71:98:40:C2:B4
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       019B7C8028066A11CA35568174DA35835434
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/u4GrkDmUsv-KxQ5w2mZacZhAwrQ.roa
Signing time:             Fri 02 Jan 2026 02:18:52 +0000
ROA not before:           Fri 02 Jan 2026 02:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208751
IP address blocks:        45.135.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:28:06:6a:11:ca:35:56:81:74:da:35:83:54:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  2 02:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb81ab903994b2ff8ac50e70da665a719840c2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:21:e2:f4:2b:07:8d:14:d1:9f:a2:19:98:
                    2f:57:11:be:ec:11:72:b5:e1:39:95:44:cf:36:41:
                    25:81:01:e5:9c:c5:33:8d:3f:ae:04:b5:11:d8:1f:
                    5c:af:63:75:8c:42:a9:cf:90:b9:82:f9:8d:9b:32:
                    ab:36:d2:50:fd:3e:8c:91:5c:49:ad:c9:29:5a:5b:
                    27:d1:b3:5e:18:71:cd:cd:2e:b0:ec:a5:8f:32:bf:
                    26:f7:cd:a2:23:4c:ac:a4:37:08:7f:4d:4d:3c:fa:
                    d7:63:ac:59:08:05:f0:c8:ce:f7:fd:da:28:13:21:
                    59:67:87:32:71:1c:56:03:8b:82:ba:3d:1b:29:bc:
                    3b:a7:4d:5c:a3:46:b8:4b:81:93:76:ee:1e:20:1b:
                    7a:b4:30:5a:dd:d4:59:74:a5:57:da:33:ac:cc:93:
                    c5:78:cc:fb:ce:13:73:fa:b5:2a:d0:cd:d0:eb:3a:
                    bc:29:5b:38:7c:0a:8a:f8:2e:b7:1c:d1:73:fc:f5:
                    08:07:05:51:a4:2c:ff:dd:3a:53:77:4c:13:24:3b:
                    3d:06:34:7b:29:11:d5:a9:8c:6a:3d:6f:ac:7c:ae:
                    6c:e1:4c:ad:83:60:e1:d4:18:61:47:0f:d7:59:e1:
                    fc:92:5b:cc:84:e8:1c:cb:8c:f8:f3:71:d0:f4:7d:
                    4f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:81:AB:90:39:94:B2:FF:8A:C5:0E:70:DA:66:5A:71:98:40:C2:B4
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/u4GrkDmUsv-KxQ5w2mZacZhAwrQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:01:d3:da:76:c8:07:99:93:d2:0d:47:e1:0c:6c:4f:c1:
         ba:0b:0e:47:df:77:70:f5:cf:2e:45:88:d1:43:4a:8f:af:89:
         bb:1c:f1:63:dd:8c:aa:6a:29:e9:fb:e6:33:af:0f:42:26:0c:
         12:2c:e0:7f:34:76:57:bc:8d:b8:d8:e7:b3:eb:86:2e:52:07:
         c7:65:7e:4e:8e:af:07:34:50:7f:fd:f8:40:4e:63:31:e5:fc:
         9f:f1:f6:5c:fe:e9:f4:cc:10:5b:51:f1:81:43:28:fb:8b:aa:
         58:ae:97:26:d5:ee:c4:f4:1b:7f:fc:c6:61:c7:65:29:d4:a8:
         ce:78:c1:e0:21:8a:36:b7:09:33:9e:84:ee:dd:6b:e5:34:62:
         d3:85:27:c4:8c:93:01:be:96:15:8c:0e:f2:0c:f4:0c:fb:01:
         26:c5:b8:7c:17:4c:ee:37:5d:48:09:d6:74:18:f1:c8:22:1c:
         82:3d:3f:aa:ff:af:3f:ee:e0:97:80:58:e9:20:0b:36:d5:29:
         e0:41:8e:7b:2d:ed:0d:3d:f2:e3:f1:14:e0:6b:56:03:86:db:
         11:3e:53:2c:ce:fa:8a:be:7e:ff:2d:6a:7c:8c:ed:d2:66:06:
         68:85:b2:80:40:76:4a:47:3f:2a:5e:cb:d5:34:45:55:6f:f6:
         1e:0d:3d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:55 2026 by rpki-client