This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/RGOjYoze1Z36pUofQspXYn895OM.roa
File:                     RGOjYoze1Z36pUofQspXYn895OM.roa (raw, json)
Hash identifier:          SkDtCGO0AbxWkfuhT5fMOAcqi341bwEZ0ngYnmwx30U=
Subject key identifier:   44:63:A3:62:8C:DE:D5:9D:FA:A5:4A:1F:42:CA:57:62:7F:3D:E4:E3
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019B7F854E21981C90B51DA28EF354A2BF5C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/RGOjYoze1Z36pUofQspXYn895OM.roa
Signing time:             Fri 02 Jan 2026 16:23:21 +0000
ROA not before:           Fri 02 Jan 2026 16:23:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209961
IP address blocks:        45.150.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:4e:21:98:1c:90:b5:1d:a2:8e:f3:54:a2:bf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Jan  2 16:23:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4463a3628cded59dfaa54a1f42ca57627f3de4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a8:1b:89:51:c4:85:76:67:33:b6:4c:49:ce:
                    db:5f:5d:57:cf:84:f5:54:82:51:95:e9:cb:34:6c:
                    a9:17:1f:3e:a0:0c:a4:38:1f:bc:e1:e7:3d:33:5b:
                    4a:a0:1e:0f:7a:0e:eb:39:23:78:f0:0f:ea:bd:a7:
                    0e:00:ad:98:45:52:e8:ee:3d:eb:b9:7a:24:e5:62:
                    82:af:cf:86:dd:b5:92:8b:48:60:d5:dc:6c:08:97:
                    f9:10:e5:c3:02:d7:5a:1e:40:8a:b7:9b:64:b0:34:
                    b0:10:04:ac:55:5c:2b:bd:b0:8f:55:16:99:65:9d:
                    0f:f5:42:32:ed:e3:bd:f2:0e:97:7c:0f:8a:08:bc:
                    3c:67:9d:01:3e:bc:d9:2d:a7:6b:11:9e:de:b1:50:
                    fe:85:2a:fa:d8:25:51:33:ed:82:a8:67:bd:94:0e:
                    06:22:4e:4e:85:fd:02:0c:d8:8a:50:ce:ff:a0:ad:
                    2f:f7:c0:ef:a1:0a:40:3d:d7:75:0c:a1:8d:62:b8:
                    9c:00:48:5b:05:58:02:1c:e5:43:6f:42:3d:44:61:
                    6c:c7:b5:d9:a5:ee:0b:bf:cd:ab:92:d1:b4:80:6f:
                    cb:9a:f4:ed:cd:24:e3:42:1f:bb:4e:92:56:58:b8:
                    fc:ba:8c:24:59:c5:f2:cc:c7:5f:b8:d8:a0:61:14:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:63:A3:62:8C:DE:D5:9D:FA:A5:4A:1F:42:CA:57:62:7F:3D:E4:E3
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/RGOjYoze1Z36pUofQspXYn895OM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:26:23:86:1d:ef:e0:83:65:43:b1:a6:39:c6:33:96:e6:7a:
         f9:16:bf:d0:98:13:e4:63:6c:a3:f3:8e:a8:43:00:5b:e6:57:
         3a:08:86:52:8b:07:96:32:f2:92:6b:11:d6:35:8a:65:9d:3a:
         d2:d0:57:d3:95:22:f5:03:c2:51:95:79:55:fa:5e:25:a0:b6:
         9a:e1:d1:0c:ff:19:1a:12:91:f8:f2:0d:1e:af:b4:96:55:8d:
         82:9d:37:9d:60:03:59:81:02:97:8c:e6:96:84:ba:e2:43:e6:
         27:66:32:ab:12:54:28:45:7d:ef:66:59:7e:36:ad:89:ae:e6:
         42:7e:52:14:97:f7:d2:3b:35:cb:88:09:5a:4c:9d:f6:5e:9e:
         47:68:90:aa:44:32:89:36:1e:23:4a:fb:5a:f1:9c:a1:d6:50:
         de:0e:f1:b7:b0:6a:27:c0:cc:f5:9b:bf:52:98:0c:7f:0d:5f:
         71:08:ab:e4:13:16:71:c7:a3:4c:b7:12:9a:20:be:51:7c:76:
         7b:8a:49:06:08:4a:b4:6c:73:9e:10:65:24:69:37:1e:f9:12:
         ad:b6:13:0d:1b:0d:30:ba:70:dd:71:b6:1d:16:62:84:49:0d:
         d2:7b:7b:b9:8a:fd:fa:ca:0a:5b:47:df:f8:77:c2:3e:e2:e1:
         b9:2c:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:27:20 2026 by rpki-client