This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/51hxgxTjF8d-8U2LHhK-5cxqJtY.roa
File:                     51hxgxTjF8d-8U2LHhK-5cxqJtY.roa (raw, json)
Hash identifier:          fBiyh4idsqAFaTeBW1YJXg0VC+eFjugl2XL3CLyGGSY=
Subject key identifier:   E7:58:71:83:14:E3:17:C7:7E:F1:4D:8B:1E:12:BE:E5:CC:6A:26:D6
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       019C46049C50C3B962C2B1FCBC88DA78000A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/51hxgxTjF8d-8U2LHhK-5cxqJtY.roa
Signing time:             Tue 10 Feb 2026 05:27:13 +0000
ROA not before:           Tue 10 Feb 2026 05:27:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201002
IP address blocks:        45.138.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 01:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:46:04:9c:50:c3:b9:62:c2:b1:fc:bc:88:da:78:00:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: Feb 10 05:27:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e758718314e317c77ef14d8b1e12bee5cc6a26d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:f3:c5:b5:e7:d1:46:27:f3:05:a4:a3:66:
                    0f:04:6c:e4:8b:04:c0:63:53:07:20:c1:89:9d:9b:
                    8d:f8:58:f3:51:b0:a7:cd:94:8b:07:be:1a:cc:34:
                    cc:06:6a:66:6d:c3:31:7c:2d:97:fd:c6:bc:6c:38:
                    65:ff:73:97:8e:51:ee:31:e5:32:19:0c:de:13:db:
                    87:41:94:ed:f2:a3:86:d4:2e:2d:1c:94:61:6a:15:
                    ef:06:23:03:74:9b:00:cb:96:4b:0c:88:1a:59:15:
                    12:09:99:2a:f7:fe:c4:0a:0b:0b:88:2c:ff:72:02:
                    4d:b0:cc:64:9b:72:73:5d:b1:74:12:b8:27:81:88:
                    73:40:0a:c3:4a:49:3d:ed:8d:31:47:9e:ff:1a:03:
                    ba:43:96:9e:44:74:f0:b8:4b:0e:c7:13:2e:e9:9f:
                    4b:56:02:2e:33:8e:94:60:b8:7c:50:22:02:c6:fa:
                    4e:d0:44:33:ad:36:98:cf:08:3d:91:29:36:20:57:
                    58:31:40:fa:2e:8e:69:4d:c2:2f:7d:c5:06:aa:cf:
                    8b:12:23:4b:dc:bf:96:86:7b:18:c9:d7:04:f6:2e:
                    5f:dd:e2:cd:26:cf:12:0e:74:c2:f2:d7:8a:30:92:
                    cc:ef:8b:85:eb:65:4d:92:c9:df:4f:b8:7f:6a:64:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:58:71:83:14:E3:17:C7:7E:F1:4D:8B:1E:12:BE:E5:CC:6A:26:D6
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/51hxgxTjF8d-8U2LHhK-5cxqJtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:fb:1f:5e:f9:8e:4b:df:0e:33:ff:d7:4c:3a:c6:c7:57:5b:
         22:84:21:be:a0:5a:23:17:ca:1f:21:ed:81:0e:fe:47:39:d5:
         83:79:d1:b3:92:da:88:4b:48:d2:71:3e:b5:7d:03:1b:6e:2d:
         60:16:9c:ab:24:a0:39:eb:12:d4:17:04:80:f9:d3:89:f0:f4:
         dc:2c:14:03:b2:73:e1:24:6e:87:93:0e:2f:a5:b3:22:0c:20:
         04:62:8f:85:f6:d2:6b:8a:d1:39:28:d6:12:bf:59:8e:0b:ac:
         25:8c:55:d9:0f:8d:0b:b5:b7:59:ac:75:27:7d:80:b6:77:ba:
         cd:54:4c:c6:2d:24:ad:6d:7f:69:6e:b7:bc:6f:14:bc:98:43:
         4d:89:a5:e6:e9:00:5a:ca:b9:9e:a3:09:a7:dc:ca:08:b8:78:
         93:eb:71:2c:44:8d:31:27:e2:e8:00:d2:ae:24:f5:dc:08:c6:
         e8:09:a8:73:44:bb:8c:89:52:30:9d:98:74:45:34:bf:e8:ee:
         71:30:f6:49:43:78:b3:5d:96:32:f1:1f:6f:88:62:ad:7b:76:
         db:54:4d:7a:30:d9:0e:06:f1:22:6f:c1:28:15:bc:c0:c0:62:
         59:0a:75:db:68:c4:56:08:6c:be:0f:f2:ca:22:c2:f6:b5:63:
         28:68:69:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 10:51:25 2026 by rpki-client