This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V6buM46oTkuzY7NwYxWxAbQckt0.roa
File:                     V6buM46oTkuzY7NwYxWxAbQckt0.roa (raw, json)
Hash identifier:          E8NZ4wtYWkW4BcIUOswsxRnMKDUz5vq6hnHyCmSgulc=
Subject key identifier:   57:A6:EE:33:8E:A8:4E:4B:B3:63:B3:70:63:15:B1:01:B4:1C:92:DD
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       019B7F82E1174B5B2C27D2C7E4554A58942B
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V6buM46oTkuzY7NwYxWxAbQckt0.roa
Signing time:             Fri 02 Jan 2026 16:20:42 +0000
ROA not before:           Fri 02 Jan 2026 16:20:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214383
IP address blocks:        45.81.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:e1:17:4b:5b:2c:27:d2:c7:e4:55:4a:58:94:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 16:20:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57a6ee338ea84e4bb363b3706315b101b41c92dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:b2:c2:79:5c:31:49:bf:73:50:f1:0d:7e:
                    4a:64:52:81:2f:ed:4a:9c:1d:b8:31:5f:4f:72:d9:
                    c8:a5:02:51:69:ef:82:1a:f2:e2:b6:78:a5:03:65:
                    c9:95:c1:ce:f6:88:13:99:a7:70:d6:b7:93:08:f9:
                    34:1b:cb:7a:df:f5:63:41:ef:57:c5:79:b8:93:6f:
                    c4:ae:56:16:5b:0d:83:c1:43:b7:30:ea:db:cc:9a:
                    16:bd:e3:84:d4:08:0f:a8:75:e0:3b:d8:eb:f1:d1:
                    7d:04:5a:75:c5:c7:61:ef:91:9e:04:cc:de:a0:7b:
                    64:be:d4:93:ba:d8:43:8a:2e:ba:44:38:68:e0:58:
                    e0:c2:e1:c5:fa:74:09:00:99:a8:07:36:c5:49:4a:
                    e8:dc:ae:0e:8c:fd:bc:bb:90:83:93:c6:e2:b5:a3:
                    a5:15:0f:23:75:b4:ea:fb:30:42:82:cf:0e:9c:df:
                    fb:18:2c:8a:3a:a2:aa:aa:c6:64:f0:43:05:24:63:
                    6c:12:98:ee:11:a8:07:04:3b:2a:bb:2b:1a:51:01:
                    3b:dc:c6:ed:01:cf:94:8e:1e:16:68:e9:46:96:33:
                    e4:c4:64:51:e9:d5:27:d2:22:34:f9:ac:9c:87:17:
                    44:6f:93:0b:8b:50:dc:d1:69:86:94:a5:56:2a:12:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:EE:33:8E:A8:4E:4B:B3:63:B3:70:63:15:B1:01:B4:1C:92:DD
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V6buM46oTkuzY7NwYxWxAbQckt0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b3:0c:1f:0f:f8:0c:a3:74:b9:21:f0:9c:1f:24:df:97:1e:
         a8:0a:ea:ca:7f:e1:58:f8:18:f5:59:1a:c9:2e:ca:71:b4:c5:
         98:12:d4:a7:ac:e1:b5:9d:5d:a7:92:e5:1f:69:ab:e9:5f:86:
         33:19:b7:f7:12:2c:e2:cf:23:10:52:db:8e:12:fd:99:01:25:
         8e:46:08:e6:9e:ce:31:00:62:3d:fe:0a:95:19:42:e4:2b:30:
         2d:f4:ef:69:65:bd:53:de:d1:b6:f4:81:3e:74:39:b7:a6:cf:
         12:c9:4f:59:8d:f0:93:2f:56:c3:78:3d:97:e2:89:30:43:e6:
         ec:5b:01:3b:6e:e3:05:5c:46:fb:44:f9:50:1f:6f:0e:ba:52:
         d8:bd:5b:50:27:79:5f:ca:cb:1a:a6:e4:58:41:1e:52:25:7b:
         58:07:69:18:83:69:94:cf:f1:4b:01:9c:89:e5:b0:80:2b:8d:
         32:25:f9:c4:3e:6e:6b:a0:e3:c4:47:9c:2e:db:f0:4d:9e:d6:
         a0:f8:58:6b:c7:0b:c6:ae:ae:68:a3:d5:c0:4f:ed:f6:5d:04:
         b6:03:5d:56:a4:9e:4b:5a:a5:27:b5:f0:46:4c:6f:7d:80:43:
         db:4e:2e:18:37:2a:c1:13:f9:4a:ed:07:c8:13:1f:b2:c6:ee:
         55:8c:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 15:21:17 2026 by rpki-client