This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V5CzmbIx8-gHfnzPC49E7HqhlMo.roa
File:                     V5CzmbIx8-gHfnzPC49E7HqhlMo.roa (raw, json)
Hash identifier:          +ZjsvS6gpb2s6CNBhUyi8VPFe9owHps6IBAN21G6HVI=
Subject key identifier:   57:90:B3:99:B2:31:F3:E8:07:7E:7C:CF:0B:8F:44:EC:7A:A1:94:CA
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       019B7F82C7B1481B237E372F12FC9B81A956
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V5CzmbIx8-gHfnzPC49E7HqhlMo.roa
Signing time:             Fri 02 Jan 2026 16:20:35 +0000
ROA not before:           Fri 02 Jan 2026 16:20:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204615
IP address blocks:        45.81.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:c7:b1:48:1b:23:7e:37:2f:12:fc:9b:81:a9:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 16:20:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5790b399b231f3e8077e7ccf0b8f44ec7aa194ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:65:46:b0:88:43:43:1f:f4:f2:d5:c4:f5:fd:
                    13:56:b8:7c:03:1c:87:22:79:60:6e:f1:6a:40:e5:
                    af:75:fc:10:bc:bc:52:ca:df:75:51:da:11:45:e6:
                    0c:8a:d0:40:53:8a:aa:3f:d8:39:13:4c:66:40:ee:
                    02:bc:c8:de:1a:94:d6:f8:54:67:9b:d0:81:b0:09:
                    d6:58:ae:44:98:14:22:a7:9f:52:cd:66:cd:a8:72:
                    c3:a3:0f:01:68:e7:75:fb:1e:74:b2:f3:bc:94:2d:
                    f9:0a:4e:56:f3:cb:cc:00:64:42:17:2a:f8:ba:31:
                    e8:81:b6:2e:12:38:e6:b4:5a:84:80:eb:5c:51:1c:
                    24:6e:03:49:48:75:4d:74:b2:90:6b:8b:b7:18:66:
                    da:2f:1f:c0:b9:4f:23:3a:bb:d7:dc:50:1f:63:76:
                    5a:94:4e:bc:94:03:57:ee:04:91:1f:24:e3:dd:53:
                    3e:a9:9b:60:eb:77:97:19:8b:c4:4f:ed:f6:2a:60:
                    51:3e:1b:b0:d4:ca:65:87:5d:18:83:84:4d:9b:b5:
                    3f:a9:93:c9:ed:3d:59:79:5c:15:a2:5d:57:01:b6:
                    3d:46:a0:64:1d:f2:e2:82:65:2c:d6:8e:f1:cc:6a:
                    68:57:49:34:64:8d:84:bd:07:4f:70:ee:c2:f9:bb:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:90:B3:99:B2:31:F3:E8:07:7E:7C:CF:0B:8F:44:EC:7A:A1:94:CA
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V5CzmbIx8-gHfnzPC49E7HqhlMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7f:ff:c6:85:f0:41:07:01:fb:fc:70:b5:74:0e:c0:b7:bb:
         00:cf:b6:a7:21:bf:3c:01:dd:69:97:54:c9:d5:d5:2c:a3:6d:
         03:e9:6d:3b:76:91:3b:57:bb:5f:a3:15:ff:ac:22:94:6c:3a:
         48:9c:f8:15:19:02:25:9c:86:8f:2c:d1:ec:02:ef:95:08:82:
         68:17:66:f3:b9:97:5a:d7:77:30:5b:6a:bc:46:25:11:98:69:
         28:52:fe:dc:b3:65:a0:0d:1e:4e:b8:43:17:f8:4f:2f:ad:02:
         59:16:69:2e:a0:e3:6b:53:e6:14:4d:8a:c4:de:45:85:fb:87:
         31:f6:2d:93:ac:85:fc:24:e6:fd:e2:e2:fe:52:fe:54:25:16:
         b2:ea:2f:40:47:56:fa:f8:fb:64:09:7a:44:03:0b:f4:98:ea:
         ff:e3:0b:1f:59:bb:6e:f9:61:3f:73:c1:f7:ec:12:e2:cd:e7:
         69:98:14:1c:3f:69:09:12:4d:31:fd:18:03:ea:15:ad:8a:75:
         ae:a1:25:62:dd:a0:eb:5c:cc:90:e3:6a:24:7a:de:13:17:5f:
         21:37:f6:13:9f:25:44:be:46:1b:52:49:3c:8d:13:bd:41:62:
         5d:30:1a:c7:f9:77:30:14:85:8d:a0:77:d9:3e:ab:8b:de:0c:
         24:da:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 15:19:04 2026 by rpki-client