This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/54HsmLR_UKPkm_TCTo42ipm87TY.roa
File:                     54HsmLR_UKPkm_TCTo42ipm87TY.roa (raw, json)
Hash identifier:          3pMQX3BegRu9d4oZoSrihtauzn+P8II7ckWGMjV6n94=
Subject key identifier:   E7:81:EC:98:B4:7F:50:A3:E4:9B:F4:C2:4E:8E:36:8A:99:BC:ED:36
Certificate issuer:       /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial:       019B7758D9F761D7A4C4EAA5734B1B598BD2
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/54HsmLR_UKPkm_TCTo42ipm87TY.roa
Signing time:             Thu 01 Jan 2026 02:17:50 +0000
ROA not before:           Thu 01 Jan 2026 02:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198867
IP address blocks:        5.45.190.0/24 maxlen: 24
                          5.45.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:d9:f7:61:d7:a4:c4:ea:a5:73:4b:1b:59:8b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
        Validity
            Not Before: Jan  1 02:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e781ec98b47f50a3e49bf4c24e8e368a99bced36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:8f:fe:71:eb:67:cd:95:31:43:39:a4:de:
                    58:89:93:54:cc:26:3d:7e:aa:5a:6c:ad:5e:b8:a9:
                    16:cd:de:e8:cd:f5:5a:b5:51:a3:bb:0e:70:6b:c9:
                    ec:86:03:d5:52:6c:db:40:37:56:78:8a:18:a4:cd:
                    db:7c:6b:52:8a:a5:54:d3:60:68:81:c0:a6:f4:50:
                    d2:29:75:d4:1e:41:11:ba:1f:98:c2:58:b0:90:38:
                    0f:3a:f2:4d:45:b1:44:60:ec:62:1b:16:37:04:fd:
                    9e:f7:34:7b:5f:6e:12:0b:83:82:fd:e3:b1:29:91:
                    81:1d:7f:df:47:eb:35:75:5b:e7:96:9a:1a:d7:6f:
                    f1:c2:8a:dc:ea:5b:97:76:a1:00:8c:bf:b0:60:eb:
                    6c:2d:22:48:4b:1b:10:1f:73:27:f1:48:ab:65:74:
                    cd:e8:b2:6a:c3:47:f1:ab:e3:b0:b6:a0:0b:77:8c:
                    39:97:0d:92:ed:bb:27:0a:ee:41:cb:fd:b9:32:94:
                    41:73:0f:96:c4:1d:42:3f:3e:8d:56:9e:0a:3f:82:
                    f4:2a:fd:01:95:d6:cf:d0:6f:4f:d1:6f:b5:2d:8a:
                    28:55:a9:64:40:f0:e8:4e:cf:b0:e0:64:b3:19:d5:
                    2b:03:53:4c:32:9a:11:08:70:d6:69:78:6a:13:c3:
                    16:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:81:EC:98:B4:7F:50:A3:E4:9B:F4:C2:4E:8E:36:8A:99:BC:ED:36
            X509v3 Authority Key Identifier:
                keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/54HsmLR_UKPkm_TCTo42ipm87TY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.45.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:4b:be:e7:f0:fc:ad:51:b7:56:7e:d2:c1:89:74:b9:68:c5:
         eb:dc:58:45:ce:45:eb:e3:da:10:cc:b1:23:43:7c:59:7b:e4:
         b3:3d:38:c7:47:8a:2d:71:e6:e5:05:1e:28:37:43:87:7b:ad:
         50:e8:04:70:13:22:e6:4f:d2:6b:67:97:f1:e4:97:2d:ff:22:
         56:a5:f9:7f:1b:b8:ac:7e:6e:3b:56:db:d8:8f:c0:68:01:e6:
         ef:0a:ee:b6:8b:dd:00:e5:41:17:a4:ae:91:95:e3:51:14:ce:
         8f:ed:04:fa:82:0b:ba:27:79:2f:1e:ad:39:b9:13:d6:a9:9a:
         18:8c:12:54:8e:f7:3d:c1:f0:a0:2d:bc:1a:e5:ee:ef:db:31:
         c0:04:e2:59:31:8a:52:1b:e7:6d:c2:53:f6:02:1c:29:ab:73:
         57:45:f3:f9:f0:22:8b:26:57:9e:f9:32:b6:63:da:d2:65:38:
         5b:1b:d5:8d:92:29:6e:7b:ef:42:21:e3:4a:3c:f2:2f:70:5a:
         d0:37:ba:c6:fc:a9:b8:4c:31:4c:7e:53:f4:e3:95:c2:f1:fb:
         96:ce:0a:16:83:b8:9b:1d:28:d5:90:2e:da:b7:4f:cb:24:c4:
         50:35:a4:c2:3f:ae:9e:e5:b1:d4:1f:70:bb:54:b1:8b:38:be:
         fc:4b:4f:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WNn3YdekxOqlc0sbWYvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi
MDEwOTAwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzgxZWM5OGI0N2Y1MGEzZTQ5YmY0YzI0ZThlMzY4YTk5YmNlZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49KP/nHrZ82VMUM5pN5YiZNUzCY9
fqpabK1euKkWzd7ozfVatVGjuw5wa8nshgPVUmzbQDdWeIoYpM3bfGtSiqVU02Bo
gcCm9FDSKXXUHkERuh+YwliwkDgPOvJNRbFEYOxiGxY3BP2e9zR7X24SC4OC/eOx
KZGBHX/fR+s1dVvnlpoa12/xworc6luXdqEAjL+wYOtsLSJISxsQH3Mn8UirZXTN
6LJqw0fxq+OwtqALd4w5lw2S7bsnCu5By/25MpRBcw+WxB1CPz6NVp4KP4L0Kv0B
ldbP0G9P0W+1LYooValkQPDoTs+w4GSzGdUrA1NMMpoRCHDWaXhqE8MWFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeB7Ji0f1Cj5Jv0wk6ONoqZvO02MB8GA1UdIwQY
MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt
NjJjMWIxZmYzYTI2LzEvNTRIc21MUl9VS1BrbV9UQ1RvNDJpcG04N1RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2
LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBS2+MA0G
CSqGSIb3DQEBCwUAA4IBAQAUS77n8PytUbdWftLBiXS5aMXr3FhFzkXr49oQzLEj
Q3xZe+SzPTjHR4otceblBR4oN0OHe61Q6ARwEyLmT9JrZ5fx5Jct/yJWpfl/G7is
fm47VtvYj8BoAebvCu62i90A5UEXpK6RleNRFM6P7QT6ggu6J3kvHq05uRPWqZoY
jBJUjvc9wfCgLbwa5e7v2zHABOJZMYpSG+dtwlP2Ahwpq3NXRfP58CKLJlee+TK2
Y9rSZThbG9WNkilue+9CIeNKPPIvcFrQN7rG/Km4TDFMflP045XC8fuWzgoWg7ib
HSjVkC7at0/LJMRQNaTCP66e5bHUH3C7VLGLOL78S08p
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:16 2026 by rpki-client