This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ElHRjNHLvj_IBp_H__e2SFZ7To0.roa
File:                     ElHRjNHLvj_IBp_H__e2SFZ7To0.roa (raw, json)
Hash identifier:          W4VhGaIv4epwxdpQAWD3kLxvibxaUkEfqyYEPkfyoG8=
Subject key identifier:   12:51:D1:8C:D1:CB:BE:3F:C8:06:9F:C7:FF:F7:B6:48:56:7B:4E:8D
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       019B7F15F85B3B78D7DE196543673AA20B94
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ElHRjNHLvj_IBp_H__e2SFZ7To0.roa
Signing time:             Fri 02 Jan 2026 14:21:44 +0000
ROA not before:           Fri 02 Jan 2026 14:21:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215413
IP address blocks:        45.138.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Jan 2026 14:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:f8:5b:3b:78:d7:de:19:65:43:67:3a:a2:0b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: Jan  2 14:21:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1251d18cd1cbbe3fc8069fc7fff7b648567b4e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:07:92:1b:88:ae:8a:15:f4:c5:e7:4d:21:4b:
                    99:a5:2b:c0:d6:69:c7:9e:9e:da:17:ee:c9:b3:e0:
                    1b:08:a7:db:ae:7d:c2:04:23:6d:b2:90:de:1d:76:
                    20:cd:0e:62:e1:ef:ad:12:59:28:c9:24:35:2e:7b:
                    31:a1:dd:93:f1:de:0d:af:6f:c0:30:a9:76:b3:04:
                    ca:12:29:70:e7:b9:b4:88:03:db:98:0b:8b:69:95:
                    2c:5a:ee:12:60:b0:08:02:db:ae:e0:15:12:3e:49:
                    d5:01:99:85:47:d3:71:f2:05:0a:26:48:98:8f:5a:
                    ca:1f:f4:b9:3b:61:d1:c9:b3:f8:46:0b:7d:bf:ab:
                    4f:dd:1b:95:ed:be:dd:c4:c5:39:dc:81:44:a5:91:
                    55:5d:99:99:b1:dd:1f:b8:2d:75:ed:84:00:bd:cb:
                    69:dd:85:43:64:92:9c:e6:2e:77:5c:23:64:71:e3:
                    c2:8b:d9:24:c4:ef:af:a5:de:b1:7a:c6:a9:37:c4:
                    05:f6:d4:bd:84:29:51:63:53:75:39:50:5b:b9:c6:
                    31:e8:a4:bb:c0:41:80:d5:18:1b:84:3c:5a:be:23:
                    2a:6e:a9:69:1a:2e:50:59:7c:3a:67:08:a9:9b:8b:
                    72:99:59:49:3a:c3:aa:3f:11:6c:b0:f3:6d:f2:73:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:51:D1:8C:D1:CB:BE:3F:C8:06:9F:C7:FF:F7:B6:48:56:7B:4E:8D
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ElHRjNHLvj_IBp_H__e2SFZ7To0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:3b:99:e4:9b:90:8d:12:d8:d3:dd:14:6f:45:5e:0d:12:0a:
         93:b2:f2:36:28:91:54:03:26:70:1c:f8:99:bc:5b:78:23:71:
         23:51:23:c4:68:ee:0a:4e:ab:3b:8a:01:48:73:40:86:08:67:
         90:1d:18:e5:37:f9:57:ae:f0:81:ec:69:9e:e0:70:74:9b:c8:
         6e:2b:66:b4:4d:88:02:81:d6:5f:16:83:89:d6:23:5c:b8:c0:
         db:4d:5f:37:34:60:8e:71:82:68:a1:2c:ce:ae:79:95:68:71:
         fd:59:62:c3:73:01:5e:a1:e6:ec:fa:58:cd:c8:fa:d1:77:e1:
         62:ba:84:3d:48:11:04:4c:fe:22:c7:a6:26:c7:23:b2:39:db:
         2c:0f:65:5c:cc:40:b5:cf:49:36:b9:3f:64:ed:63:2f:8a:18:
         81:37:27:d5:93:43:e8:6e:4e:98:ab:53:d6:a1:5a:ab:43:67:
         4d:ab:bc:ef:a8:4b:b1:df:e6:60:3a:c1:f7:76:71:6d:0e:44:
         2e:dc:6b:41:cf:b1:67:7a:7b:8e:ff:52:62:0f:a9:7b:53:a4:
         6f:f6:20:cc:55:55:54:24:f5:bc:14:7a:35:89:e5:6f:8c:08:
         0e:c4:43:34:37:36:2f:9e:2d:ac:e5:b9:43:1f:a7:e2:af:3b:
         bc:ff:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 20:49:59 2026 by rpki-client