This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/leefmemMjsnYBH_PRIls4mGDQQg.roa
File:                     leefmemMjsnYBH_PRIls4mGDQQg.roa (raw, json)
Hash identifier:          H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=
Subject key identifier:   95:E7:9F:99:E9:8C:8E:C9:D8:04:7F:CF:44:89:6C:E2:61:83:41:08
Certificate issuer:       /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial:       019B7A5AAC44812E30AA196F11DD0A13112B
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/leefmemMjsnYBH_PRIls4mGDQQg.roa
Signing time:             Thu 01 Jan 2026 16:18:41 +0000
ROA not before:           Thu 01 Jan 2026 16:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55201
IP address blocks:        45.140.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:ac:44:81:2e:30:aa:19:6f:11:dd:0a:13:11:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
        Validity
            Not Before: Jan  1 16:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=95e79f99e98c8ec9d8047fcf44896ce261834108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a0:9b:6d:48:cc:3c:f7:a3:99:64:54:06:c6:
                    aa:29:21:bd:38:e1:e9:a2:7f:5b:10:59:98:a5:ef:
                    83:a9:43:d6:89:2f:03:d3:a3:1c:73:eb:65:0e:ac:
                    0e:0a:e1:3c:7e:6d:4d:57:88:a5:6c:7a:c4:7f:15:
                    c1:ba:4c:78:08:4b:81:14:52:25:55:b5:4f:7f:e2:
                    e2:9c:98:bf:e8:34:a4:5d:d2:71:75:3d:a0:29:b8:
                    2c:f7:1f:06:a9:75:7d:a8:ac:f8:92:9b:44:eb:54:
                    ff:6d:61:a3:9f:58:89:ef:b0:31:3e:22:c0:53:18:
                    f5:83:31:a0:a1:a7:06:26:77:ad:4b:22:f4:3f:75:
                    31:d6:75:a3:69:fa:cd:c2:81:82:d5:60:2f:26:dc:
                    2b:b5:7e:5f:97:06:47:f2:28:74:07:d5:05:e6:2a:
                    57:4f:d7:2e:57:88:d4:d5:2f:83:eb:f2:72:f7:72:
                    69:e4:b3:7b:6e:09:c7:b9:a8:7b:40:e9:f7:b6:ee:
                    96:02:3e:e7:d1:31:c0:6d:b3:af:42:d1:2f:b2:0b:
                    5a:ef:10:2c:3a:8d:c1:e0:1b:61:4f:6f:6c:50:97:
                    8a:7b:8d:44:d9:88:d7:df:6c:c0:10:f4:b7:a5:6b:
                    d0:ce:dc:bb:bb:58:8a:bb:f3:13:89:b6:38:2b:6c:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E7:9F:99:E9:8C:8E:C9:D8:04:7F:CF:44:89:6C:E2:61:83:41:08
            X509v3 Authority Key Identifier:
                keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/leefmemMjsnYBH_PRIls4mGDQQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:71:09:4d:8e:47:db:28:ff:1d:3c:82:d0:f5:74:ad:3a:8e:
         b3:4c:cb:f2:7e:75:9e:83:c3:6c:7f:8e:05:96:d1:5b:7f:c1:
         95:d4:99:53:10:7d:ee:10:d9:2c:eb:b0:f8:b3:05:dc:b3:1a:
         e4:c1:2d:7c:f9:fb:fd:eb:ba:85:7a:94:23:3f:14:99:90:c3:
         89:f1:d3:54:af:93:8b:78:0c:0b:2c:9d:2e:19:d4:9d:b9:af:
         8f:49:20:58:7c:3d:c6:ab:36:d6:e7:14:91:80:e0:3e:17:a2:
         c0:1e:47:d6:dd:96:f7:c0:48:72:b7:46:e1:c8:7f:11:04:96:
         17:e6:d1:41:42:48:2a:9e:cd:b5:4e:f3:4b:2a:a7:b1:e0:f9:
         18:da:ce:e9:fd:df:c0:55:39:b1:1b:65:68:92:85:73:d2:e0:
         92:58:77:71:6d:d7:fa:7b:f3:c7:1f:44:57:82:de:de:71:0a:
         87:54:bf:50:b7:c2:aa:c1:b8:a6:1a:5a:3c:5d:08:b7:5e:fd:
         d3:a6:7f:68:c6:1a:2c:94:b7:6c:5c:cc:b8:23:b6:93:c1:ce:
         23:15:d4:73:ec:ba:a0:d9:76:56:b2:4b:27:7b:52:e1:d0:7c:
         ab:da:74:29:06:c5:5d:b9:04:62:4e:e6:ec:4a:7e:cd:66:13:
         f3:2a:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 11:13:01 2026 by rpki-client