This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/R1xyaSed409mlHP3QJLRSbbZNRc.roa
File:                     R1xyaSed409mlHP3QJLRSbbZNRc.roa (raw, json)
Hash identifier:          88CtSKW5zpDKQtfqK5gg4MiHAAeJcjKNeubHZtoAxzw=
Subject key identifier:   47:5C:72:69:27:9D:E3:4F:66:94:73:F7:40:92:D1:49:B6:D9:35:17
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019C088662BF331FB6DC49A974CF2F8B5C16
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/R1xyaSed409mlHP3QJLRSbbZNRc.roa
Signing time:             Thu 29 Jan 2026 06:52:30 +0000
ROA not before:           Thu 29 Jan 2026 06:52:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62013
IP address blocks:        45.67.118.0/23 maxlen: 24
                          185.181.40.0/23 maxlen: 24
                          185.181.42.0/23 maxlen: 24
                          185.181.48.0/23 maxlen: 24
                          185.181.50.0/23 maxlen: 24
                          194.213.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:08:86:62:bf:33:1f:b6:dc:49:a9:74:cf:2f:8b:5c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Jan 29 06:52:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=475c7269279de34f669473f74092d149b6d93517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cd:03:d1:5b:7d:0b:b9:5a:ed:eb:a9:56:b2:
                    f9:cf:0e:52:f9:58:76:18:6b:fd:71:87:15:75:4a:
                    65:52:1a:a9:ec:2f:42:41:3f:00:f6:a7:2f:d6:11:
                    88:45:d7:47:7a:84:d7:c3:db:8e:1e:67:a7:3b:18:
                    d3:e2:20:77:97:1e:fb:20:ce:e5:43:01:12:bd:13:
                    be:cb:b4:13:7c:68:34:80:89:ac:6f:81:ad:60:61:
                    24:81:4a:b0:ee:7d:d8:b8:7a:ea:f1:4c:0f:cb:51:
                    e5:b2:ed:9e:84:8c:c2:4f:1e:c3:07:e8:a7:cc:9e:
                    e2:6a:b8:27:08:4e:ca:cc:03:0a:8b:2b:38:2e:de:
                    55:c2:7d:f2:c1:17:32:fb:8b:c7:b0:0c:af:6c:1b:
                    06:0b:a0:d8:0d:86:55:66:e5:20:25:fc:ff:71:e0:
                    05:4a:6a:13:c6:eb:c4:6e:5d:a8:10:15:be:2d:07:
                    b4:12:6d:5f:e7:73:01:ea:94:3b:07:d6:20:77:87:
                    6e:ea:cb:a0:c6:c6:b1:2b:92:4d:9d:85:02:a9:ab:
                    06:6a:e7:58:91:90:58:da:13:20:39:ee:7c:27:0d:
                    d5:07:15:ea:10:c5:f2:65:44:fa:ce:0f:80:25:5b:
                    7a:86:56:4b:1a:62:f5:20:84:76:14:a3:68:61:ca:
                    fb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5C:72:69:27:9D:E3:4F:66:94:73:F7:40:92:D1:49:B6:D9:35:17
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/R1xyaSed409mlHP3QJLRSbbZNRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.118.0/23
                  185.181.40.0/22
                  185.181.48.0/22
                  194.213.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a5:3e:1c:1c:76:95:2d:e7:7b:00:b1:87:2f:75:da:cb:81:
         7e:b1:5c:45:b0:4b:55:c1:62:4f:85:9e:3a:8e:44:13:81:f6:
         3c:29:36:13:96:67:d0:2e:2e:15:99:25:70:18:71:6c:6c:63:
         b1:a0:4a:81:b8:13:13:65:13:b3:ee:26:fb:1b:47:09:ac:ad:
         a8:b8:b0:61:05:d7:58:9c:2a:32:e6:7e:24:03:03:0a:e0:1a:
         3f:d0:45:bd:a3:d7:95:95:26:f5:32:8f:2d:8b:b8:d6:d3:72:
         31:81:5d:df:c4:5f:2e:ea:bf:6f:ea:0b:1c:ec:a4:6d:8f:ba:
         3f:e8:3a:e0:a0:06:a0:1b:10:5e:a8:15:40:d1:2f:0b:bd:7e:
         cb:13:71:9a:ae:c1:c8:96:a3:4b:1f:4e:aa:45:78:27:c5:31:
         6f:82:c8:f3:1e:5d:8a:9b:a2:ae:ee:df:49:8f:78:7a:a6:d8:
         23:f2:d9:6b:a4:24:06:5c:d2:d8:ba:df:0e:cd:f0:de:92:38:
         54:f3:da:28:47:9a:6a:f4:27:39:c4:1f:c1:92:23:19:d1:ed:
         bf:c2:64:88:1d:2e:fa:e4:cd:bc:04:d7:95:c3:3a:64:fb:a1:
         bf:50:bd:2d:33:72:36:5e:3a:4a:b0:f8:60:96:4b:e4:0e:ef:
         8a:72:c0:b3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZwIhmK/Mx+23EmpdM8vi1wWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwMTI5MDY1MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzVjNzI2OTI3OWRlMzRmNjY5NDczZjc0MDkyZDE0OWI2ZDkzNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M0D0Vt9C7la7eupVrL5zw5S+Vh2
GGv9cYcVdUplUhqp7C9CQT8A9qcv1hGIRddHeoTXw9uOHmenOxjT4iB3lx77IM7l
QwESvRO+y7QTfGg0gImsb4GtYGEkgUqw7n3YuHrq8UwPy1Hlsu2ehIzCTx7DB+in
zJ7iargnCE7KzAMKiys4Lt5Vwn3ywRcy+4vHsAyvbBsGC6DYDYZVZuUgJfz/ceAF
SmoTxuvEbl2oEBW+LQe0Em1f53MB6pQ7B9Ygd4du6sugxsaxK5JNnYUCqasGaudY
kZBY2hMgOe58Jw3VBxXqEMXyZUT6zg+AJVt6hlZLGmL1IIR2FKNoYcr7LQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEdccmknneNPZpRz90CS0Um22TUXMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvUjF4eWFTZWQ0MDltbEhQM1FKTFJTYmJaTlJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLUN2AwQC
ubUoAwQCubUwAwQAwtUIMA0GCSqGSIb3DQEBCwUAA4IBAQCCpT4cHHaVLed7ALGH
L3Xay4F+sVxFsEtVwWJPhZ46jkQTgfY8KTYTlmfQLi4VmSVwGHFsbGOxoEqBuBMT
ZROz7ib7G0cJrK2ouLBhBddYnCoy5n4kAwMK4Bo/0EW9o9eVlSb1Mo8ti7jW03Ix
gV3fxF8u6r9v6gsc7KRtj7o/6DrgoAagGxBeqBVA0S8LvX7LE3GarsHIlqNLH06q
RXgnxTFvgsjzHl2Km6Ku7t9Jj3h6ptgj8tlrpCQGXNLYut8OzfDekjhU89ooR5pq
9Cc5xB/BkiMZ0e2/wmSIHS765M28BNeVwzpk+6G/UL0tM3I2XjpKsPhglkvkDu+K
csCz
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:09 2026 by rpki-client