This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/lqFIHDOKWfjez8ELJu3XLGjpYE0.roa
File:                     lqFIHDOKWfjez8ELJu3XLGjpYE0.roa (raw, json)
Hash identifier:          BWI1NgS7m4ZPp0jqlgfDtsRsb1pHtceC/NxxNdPr728=
Subject key identifier:   96:A1:48:1C:33:8A:59:F8:DE:CF:C1:0B:26:ED:D7:2C:68:E9:60:4D
Certificate issuer:       /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial:       019BE0B13C61C9A5AEEF51647B388A88D764
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/lqFIHDOKWfjez8ELJu3XLGjpYE0.roa
Signing time:             Wed 21 Jan 2026 13:14:30 +0000
ROA not before:           Wed 21 Jan 2026 13:14:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215305
IP address blocks:        45.151.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:b1:3c:61:c9:a5:ae:ef:51:64:7b:38:8a:88:d7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
        Validity
            Not Before: Jan 21 13:14:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=96a1481c338a59f8decfc10b26edd72c68e9604d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:40:cd:79:de:90:d5:8b:5c:9a:62:05:ef:
                    d5:0c:12:32:38:fa:51:4f:30:7c:50:54:17:26:52:
                    86:a5:76:cb:c1:e5:42:25:3b:6d:b3:ba:8b:d4:8b:
                    74:d2:6a:38:f9:4e:ac:f9:73:8e:be:69:96:07:ef:
                    a0:f2:93:ec:be:1e:29:0c:a4:63:56:39:9f:0f:86:
                    49:26:67:b1:9e:5d:68:da:a8:ba:2d:33:37:87:7a:
                    05:0e:03:99:46:03:a7:01:83:f8:45:10:09:c6:14:
                    c6:aa:7c:09:92:e9:fa:d2:9b:ac:1d:0e:14:e2:d1:
                    69:b3:ef:29:2b:57:aa:9e:58:01:ce:b7:a2:a3:6d:
                    6d:09:70:24:38:c5:f5:ff:06:11:23:e5:0a:6b:75:
                    e5:04:fa:d6:76:3e:ce:64:a9:b8:c3:6b:6b:bf:c5:
                    96:20:63:de:94:90:e0:f0:83:78:92:b9:ea:96:a4:
                    25:82:a9:02:6f:68:e5:b3:49:5d:78:7f:35:3f:af:
                    18:8c:8b:00:09:c0:b2:5b:1c:77:1b:2a:3d:b1:7f:
                    ae:e5:0b:b9:9a:53:7c:49:ff:0c:9c:53:e3:03:a8:
                    16:30:6d:de:78:5d:c8:da:19:ee:ff:57:05:00:12:
                    3c:28:cf:e7:72:b8:85:4d:c8:81:4c:8c:5f:f7:fc:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A1:48:1C:33:8A:59:F8:DE:CF:C1:0B:26:ED:D7:2C:68:E9:60:4D
            X509v3 Authority Key Identifier:
                keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/lqFIHDOKWfjez8ELJu3XLGjpYE0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:b4:8e:f4:8b:cf:e9:c5:e8:5d:50:50:fa:4e:4a:e7:5a:
         0d:69:6d:58:b5:9f:5b:6a:3c:4a:cc:ca:27:48:99:b9:45:f5:
         20:56:79:fa:60:09:d2:8b:51:63:f6:4f:bc:85:26:2b:06:ce:
         6a:d0:c7:2c:3b:31:a1:db:2e:82:c0:1a:d7:4f:96:b7:a9:79:
         f9:0b:13:ac:b4:42:a0:bf:fa:90:5c:85:44:44:a4:5a:d1:b6:
         22:cf:fb:7b:13:f5:4c:6b:a7:9e:2a:8b:87:d6:53:ad:24:c4:
         03:42:30:4e:7a:b6:5c:f8:42:d8:b4:c1:54:bb:da:4b:1f:51:
         15:d6:f0:80:19:ac:61:1f:18:5c:77:f7:0c:24:9e:9e:bf:d3:
         ce:09:59:76:93:45:df:8b:87:3d:69:03:03:77:47:e3:0f:2f:
         d9:27:2f:0e:40:5e:34:61:92:4d:7b:3e:0e:6c:6a:35:d5:4f:
         4a:da:62:bb:c6:fd:85:b7:2d:f6:c7:e7:6a:de:8c:da:84:ed:
         77:80:de:fb:26:a9:53:2c:d0:7b:d3:9c:41:be:67:d8:6b:f2:
         68:7c:a5:fb:39:df:00:c1:52:54:73:aa:41:da:d8:9a:00:b4:
         a1:f7:15:b1:7d:fb:64:88:3e:79:d8:22:d3:59:13:2e:a2:0a:
         4c:67:9f:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZvgsTxhyaWu71FkeziKiNdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDVkM2M2YTViMDUxMjY4MmNkZmRmMzYzYjE5YTljNTY3
ZjFmNmMwHhcNMjYwMTIxMTMxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmExNDgxYzMzOGE1OWY4ZGVjZmMxMGIyNmVkZDcyYzY4ZTk2MDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGpAzXnekNWLXJpiBe/VDBIyOPpR
TzB8UFQXJlKGpXbLweVCJTtts7qL1It00mo4+U6s+XOOvmmWB++g8pPsvh4pDKRj
VjmfD4ZJJmexnl1o2qi6LTM3h3oFDgOZRgOnAYP4RRAJxhTGqnwJkun60pusHQ4U
4tFps+8pK1eqnlgBzreio21tCXAkOMX1/wYRI+UKa3XlBPrWdj7OZKm4w2trv8WW
IGPelJDg8IN4krnqlqQlgqkCb2jls0ldeH81P68YjIsACcCyWxx3Gyo9sX+u5Qu5
mlN8Sf8MnFPjA6gWMG3eeF3I2hnu/1cFABI8KM/ncriFTciBTIxf9/xZiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJahSBwziln43s/BCybt1yxo6WBNMB8GA1UdIwQY
MBaAFEcF08alsFEmgs3982OxmpxWfx9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAt
MGRmYTZiMjJlZmYyLzEvbHFGSUhET0tXZmplejhFTEp1M1hMR2pwWUUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAtMGRmYTZiMjJlZmYy
LzEvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZe3MA0G
CSqGSIb3DQEBCwUAA4IBAQABb7SO9IvP6cXoXVBQ+k5K51oNaW1YtZ9bajxKzMon
SJm5RfUgVnn6YAnSi1Fj9k+8hSYrBs5q0McsOzGh2y6CwBrXT5a3qXn5CxOstEKg
v/qQXIVERKRa0bYiz/t7E/VMa6eeKouH1lOtJMQDQjBOerZc+ELYtMFUu9pLH1EV
1vCAGaxhHxhcd/cMJJ6ev9POCVl2k0Xfi4c9aQMDd0fjDy/ZJy8OQF40YZJNez4O
bGo11U9K2mK7xv2Fty32x+dq3ozahO13gN77JqlTLNB705xBvmfYa/JofKX7Od8A
wVJUc6pB2tiaALSh9xWxfftkiD552CLTWRMuogpMZ5+Y
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:37:06 2026 by rpki-client