This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/bLR2p3__awZBusTPsasm4YiUzOA.roa
File:                     bLR2p3__awZBusTPsasm4YiUzOA.roa (raw, json)
Hash identifier:          kbNkczFSH4sSNGYoqWKL5gjy1l744pKUP8ECezyOvL0=
Subject key identifier:   6C:B4:76:A7:7F:FF:6B:06:41:BA:C4:CF:B1:AB:26:E1:88:94:CC:E0
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       019B7D5C1D52F69283F87FED9DF45889B78E
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/bLR2p3__awZBusTPsasm4YiUzOA.roa
Signing time:             Fri 02 Jan 2026 06:19:07 +0000
ROA not before:           Fri 02 Jan 2026 06:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5650
IP address blocks:        45.134.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:1d:52:f6:92:83:f8:7f:ed:9d:f4:58:89:b7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: Jan  2 06:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6cb476a77fff6b0641bac4cfb1ab26e18894cce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:f8:15:ff:92:2d:2d:db:13:97:d9:82:67:
                    24:a0:cd:e5:90:90:1f:15:f8:6f:73:57:85:11:6e:
                    2c:a4:6a:c6:ee:8f:3a:33:08:4e:e7:c2:71:7b:38:
                    79:36:47:a8:26:33:56:93:b4:cd:55:3f:18:d7:85:
                    74:78:4d:46:16:2b:f2:c5:72:d8:b3:d8:db:5e:af:
                    e5:7a:2e:5f:bc:a0:7c:63:a2:7b:97:99:fa:d7:76:
                    23:1d:23:89:c0:8b:1b:2f:a7:40:d5:77:57:94:46:
                    3c:38:58:7c:85:8c:e3:90:66:93:aa:bc:6f:4a:3f:
                    26:2e:2e:c4:1b:5f:50:2a:eb:9d:ae:03:5b:7a:bd:
                    5b:9b:00:4c:c0:61:47:8c:dc:ac:e4:6a:f8:92:b9:
                    3b:5e:2b:23:4a:0c:1e:40:01:a0:89:a7:8b:8d:b5:
                    e1:0d:f8:3f:3b:b6:5f:8d:6c:97:e5:fe:8a:09:5e:
                    81:74:f2:66:9a:c4:81:19:99:ec:48:0b:21:ee:fb:
                    49:0e:13:f4:3f:cc:be:35:e2:89:4c:6c:bf:76:14:
                    57:ea:d9:29:d4:e4:6a:da:27:8a:97:62:d1:0d:84:
                    ed:91:53:9b:74:ec:a6:c3:de:3b:96:1d:28:44:81:
                    98:c7:40:bc:71:54:b9:40:93:bb:08:18:41:f4:a4:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B4:76:A7:7F:FF:6B:06:41:BA:C4:CF:B1:AB:26:E1:88:94:CC:E0
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/bLR2p3__awZBusTPsasm4YiUzOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:75:d2:40:19:35:86:be:f9:9b:a2:7b:c4:e1:0d:ae:bc:8d:
         52:7f:02:f8:fa:20:9f:81:ff:89:53:9c:0c:13:fe:9c:28:53:
         07:11:c5:59:2b:d2:6e:55:cb:8b:1f:8c:72:0f:05:01:fb:16:
         fb:25:49:67:1b:93:27:65:23:2e:12:e9:c6:01:77:cf:fd:4c:
         bc:1a:4d:49:77:7d:06:8a:40:a2:1e:83:20:d9:0f:a0:40:45:
         65:6a:0f:f2:55:81:2d:5c:fc:f2:bf:18:a2:ac:56:23:3c:e3:
         90:cf:9c:98:c0:30:a7:81:ad:de:d3:b0:4c:aa:f5:51:e1:1e:
         dc:be:16:e5:24:a4:e7:f0:c0:93:23:67:08:b0:f6:dd:e2:c0:
         a1:52:b5:96:2a:aa:58:e5:cd:07:fc:ce:23:52:2e:48:5c:4b:
         91:0e:fc:d7:fa:8a:7c:03:73:ba:05:aa:e0:27:96:af:6f:59:
         50:f9:74:25:56:c1:c3:e0:5f:56:df:51:83:00:0e:e8:71:0b:
         62:4e:7d:36:49:8e:d0:4a:7b:19:c8:a7:72:0f:7d:c3:80:27:
         7d:92:3c:ee:09:85:85:1c:5f:ca:e2:c3:6f:ee:11:e5:06:a1:
         52:42:72:7e:66:69:42:de:e7:ff:d7:54:cb:c4:96:38:93:c1:
         ea:3a:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:18 2026 by rpki-client