This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/rJY5TcCiuq04IdP2xEDQUAGD_Vc.roa
File:                     rJY5TcCiuq04IdP2xEDQUAGD_Vc.roa (raw, json)
Hash identifier:          Rb/TbhBXQKzjnpKo+twePuPCv4XuT1hR1nvFOWeVlNc=
Subject key identifier:   AC:96:39:4D:C0:A2:BA:AD:38:21:D3:F6:C4:40:D0:50:01:83:FD:57
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       019B7D5C1DCE87F73F5427CF1D5B456EEE80
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/rJY5TcCiuq04IdP2xEDQUAGD_Vc.roa
Signing time:             Fri 02 Jan 2026 06:19:07 +0000
ROA not before:           Fri 02 Jan 2026 06:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6830
IP address blocks:        45.90.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:1d:ce:87:f7:3f:54:27:cf:1d:5b:45:6e:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: Jan  2 06:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac96394dc0a2baad3821d3f6c440d0500183fd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:75:7e:c2:4a:9d:b1:6d:a5:5d:3d:cf:08:
                    76:17:a2:60:26:8b:21:d3:09:f3:bf:e7:be:99:6f:
                    07:85:ed:eb:b5:25:6f:0b:23:06:ff:3f:b2:47:8e:
                    d1:59:0a:bb:f0:0b:9d:a8:97:e3:b3:33:15:69:10:
                    1f:4b:8d:ff:f3:3c:9a:ff:d4:9b:4a:24:b9:20:bd:
                    85:3a:0e:86:09:38:1b:fd:8b:72:e1:cf:18:c2:fd:
                    3d:89:36:45:dc:e5:c6:3d:1a:80:b6:09:c9:de:72:
                    b9:d9:86:86:94:24:d7:14:2e:67:95:ed:3c:02:38:
                    73:93:b3:a3:cc:5d:81:50:0f:99:b4:60:20:de:51:
                    b6:ab:cb:c8:50:c3:aa:de:26:e6:61:53:e3:55:4e:
                    3f:f8:94:96:41:ba:db:5a:1e:18:09:90:ae:75:13:
                    91:df:67:ed:af:67:45:5c:e7:fd:35:a5:f4:7f:ce:
                    d9:9e:84:ed:df:8e:c9:d2:ad:a4:5e:8e:35:1d:08:
                    2a:04:7f:d4:04:85:4c:15:63:7d:8d:f9:4b:86:e7:
                    08:ac:90:fe:02:de:2d:c0:c7:56:c1:67:73:a2:bf:
                    d9:76:67:72:bb:63:68:b6:9f:87:d4:51:c5:83:9b:
                    5b:3d:38:e3:b5:00:9c:82:4e:fc:47:9c:b8:25:8f:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:96:39:4D:C0:A2:BA:AD:38:21:D3:F6:C4:40:D0:50:01:83:FD:57
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/rJY5TcCiuq04IdP2xEDQUAGD_Vc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:cd:b3:6a:2c:12:91:aa:c7:76:79:a3:df:bb:88:c3:3a:
         34:d9:a1:de:c9:d2:93:19:5d:44:c2:39:ea:2f:7b:a2:36:78:
         0f:b3:2e:f6:15:92:ed:9b:41:c8:4d:82:d4:70:81:1e:bf:1b:
         99:88:35:30:bb:9a:7a:70:73:72:63:ee:2c:2e:b1:67:bf:56:
         19:a6:f5:ab:4e:a2:24:eb:4a:4f:b5:aa:80:7e:a7:97:f0:5e:
         84:51:d0:93:f9:8f:2a:0e:e9:dd:1b:9a:bb:7a:71:97:df:70:
         d3:ff:82:24:dd:e7:d5:b8:b8:0d:97:c0:dc:70:79:bf:b9:fb:
         f8:40:92:eb:6d:bf:de:4a:b5:d5:41:d0:6c:eb:c6:e5:69:66:
         af:23:52:3b:60:8e:3e:16:6f:e6:d7:fe:66:d8:9e:0d:b2:80:
         44:1c:cf:cf:fa:8a:e9:dd:60:3f:d1:8d:fd:5d:74:4d:26:0b:
         d2:81:51:8b:b8:00:bc:d3:8b:5e:55:94:3a:40:92:8f:d0:d9:
         18:37:52:20:b9:c9:38:b3:2a:2d:ca:0c:27:03:d9:87:a1:a5:
         60:4c:62:c9:ed:4d:ff:c1:d8:6c:58:67:79:ff:a0:47:1f:60:
         34:19:49:4f:19:cb:3c:1e:2b:f0:3d:68:4e:e4:9d:19:f9:2b:
         b8:9a:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:57:53 2026 by rpki-client