This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/8mrRFShZe3jIWPC5rjWtkIF86Ow.roa
File:                     8mrRFShZe3jIWPC5rjWtkIF86Ow.roa (raw, json)
Hash identifier:          1eDONGdvpbePJA/RAEZxIbFZz7jJ9+He5LHXPoKLTvk=
Subject key identifier:   F2:6A:D1:15:28:59:7B:78:C8:58:F0:B9:AE:35:AD:90:81:7C:E8:EC
Certificate issuer:       /CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
Certificate serial:       019B7C800A4E416C1C58B82A7739ED7889B1
Authority key identifier: A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/8mrRFShZe3jIWPC5rjWtkIF86Ow.roa
Signing time:             Fri 02 Jan 2026 02:18:44 +0000
ROA not before:           Fri 02 Jan 2026 02:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208873
IP address blocks:        45.81.156.0/23 maxlen: 23
                          45.81.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:0a:4e:41:6c:1c:58:b8:2a:77:39:ed:78:89:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3020ae96b5f0c5b7339e6154dcec6f16cb63f5a
        Validity
            Not Before: Jan  2 02:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f26ad11528597b78c858f0b9ae35ad90817ce8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:4a:09:17:c8:36:f1:cb:a4:79:bc:d7:84:
                    7d:3c:c1:0c:f5:f3:8a:3d:7a:6a:93:ca:31:22:7e:
                    ed:a7:a3:58:f9:79:e4:5a:56:c6:ce:8e:98:fd:07:
                    d1:20:e5:fa:6d:6b:33:c0:ed:e6:75:87:b9:46:12:
                    2d:0d:5a:77:ee:e3:4c:b8:e2:c6:cd:a8:21:43:28:
                    27:b2:47:96:f2:0b:54:2a:6a:c0:6b:97:77:57:81:
                    77:c3:37:aa:40:01:9b:d4:8b:83:06:fe:62:81:38:
                    fe:40:e4:e5:7e:1b:98:42:da:e1:e9:28:63:df:dc:
                    97:f8:24:8e:2a:ee:0d:cd:3b:29:fc:e7:d2:3c:c7:
                    b4:22:85:04:20:f5:32:99:ff:b5:21:44:04:9a:80:
                    d8:05:db:58:73:de:cb:0f:d1:5a:8a:05:c1:b4:c0:
                    39:dc:26:ae:23:7a:fe:a4:4b:75:04:ba:2d:00:71:
                    e5:e4:ed:5b:22:48:15:b2:60:3e:a2:ee:22:9e:6f:
                    bf:10:b8:fb:ea:05:fd:6c:9b:b9:73:47:4e:44:bc:
                    42:54:2d:67:1c:cf:20:c0:8d:a6:70:8e:5f:c7:d6:
                    1c:4e:c6:77:dc:f3:fc:fd:d7:bf:6d:2a:05:a8:95:
                    bc:80:c2:73:19:0f:58:3e:c9:b8:86:99:4e:c2:0d:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6A:D1:15:28:59:7B:78:C8:58:F0:B9:AE:35:AD:90:81:7C:E8:EC
            X509v3 Authority Key Identifier:
                keyid:A3:02:0A:E9:6B:5F:0C:5B:73:39:E6:15:4D:CE:C6:F1:6C:B6:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owIK6WtfDFtzOeYVTc7G8Wy2P1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/8mrRFShZe3jIWPC5rjWtkIF86Ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c6e972-4ed1-4526-a320-3b7c126725d5/1/owIK6WtfDFtzOeYVTc7G8Wy2P1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:97:c2:63:1e:90:e6:e3:b7:fc:28:b0:68:d8:e5:ff:d9:fc:
         79:a6:25:f0:cf:90:84:35:3c:e3:90:79:1a:58:0c:55:88:67:
         42:af:a0:0a:9e:be:2c:1f:c1:cd:81:b6:cc:09:08:bc:9e:66:
         c5:d0:7e:44:b3:3f:43:aa:86:7e:f8:09:52:50:b7:5c:9d:6b:
         2d:35:db:f9:ce:8e:b6:95:47:30:25:89:2f:c9:4a:fd:65:11:
         9b:bf:6a:42:9c:0a:7e:9f:9f:3a:e3:21:3c:4f:50:34:e4:5e:
         1d:a8:6d:e3:94:44:8a:ce:19:60:9f:07:a0:b7:41:9b:51:e6:
         97:bb:ed:64:c3:46:d8:96:d9:27:f1:03:c8:c9:77:5f:82:98:
         70:1e:27:6d:10:bc:1c:74:5b:6d:4e:16:d3:d0:47:aa:df:15:
         6a:ea:28:e8:4e:a8:a6:eb:6d:2f:77:df:d9:c1:c4:66:41:96:
         55:03:56:e1:1a:14:1d:b1:87:d7:c7:35:f8:1f:ad:08:e5:6f:
         60:18:68:53:9a:57:cd:bb:d1:73:1b:c6:82:01:44:b9:e1:44:
         81:4f:20:49:7f:40:12:4a:a7:f0:58:1e:e3:28:cf:e5:34:6a:
         ee:80:1c:c7:30:c6:1d:a4:8c:ae:0a:29:ab:f2:b8:a3:9c:9f:
         90:ac:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:29:49 2026 by rpki-client