This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ElgFDiuFJ69k81EViaoKdimWii0.roa
File:                     ElgFDiuFJ69k81EViaoKdimWii0.roa (raw, json)
Hash identifier:          vH/Gl8FmnuQcMuHJNXm7DwH6UJxli5lPah4lngAmhDk=
Subject key identifier:   12:58:05:0E:2B:85:27:AF:64:F3:51:15:89:AA:0A:76:29:96:8A:2D
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       019B7DCA27FCE88F24129EFAF10A75BF4B17
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ElgFDiuFJ69k81EViaoKdimWii0.roa
Signing time:             Fri 02 Jan 2026 08:19:18 +0000
ROA not before:           Fri 02 Jan 2026 08:19:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49505
IP address blocks:        45.130.187.0/24 maxlen: 24
                          45.140.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:27:fc:e8:8f:24:12:9e:fa:f1:0a:75:bf:4b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jan  2 08:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1258050e2b8527af64f3511589aa0a7629968a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:8c:a4:bd:ba:82:72:f4:88:df:ae:16:1c:
                    77:ec:75:ce:a0:fd:73:c3:ed:9d:cc:25:fd:ce:dc:
                    a7:7a:59:17:2d:cc:93:6c:ca:ad:f6:31:b1:11:da:
                    16:4b:fb:97:c7:b7:86:36:ba:eb:73:54:44:a6:d2:
                    c3:46:09:30:9b:c4:fe:51:d0:0e:f5:99:0e:67:d7:
                    b2:8a:91:eb:f1:96:bb:f2:5f:4e:f3:c9:b2:ca:40:
                    62:a9:28:a2:9a:c6:e7:f0:56:60:5c:82:fc:90:85:
                    8a:3c:af:ac:d0:3c:d5:c1:5e:da:e0:c3:5c:8c:e1:
                    e5:c9:89:bd:71:cc:e0:c0:05:60:b7:32:bc:7d:30:
                    7b:6e:0b:7d:aa:50:84:b0:73:17:96:ac:65:4d:ea:
                    b5:3c:10:fe:ac:4d:b6:6f:17:b9:fa:9a:c5:a4:05:
                    03:c1:e0:07:a1:43:dd:ec:61:d4:74:9c:bb:54:96:
                    e1:2b:4e:fc:06:eb:61:ea:0e:3c:5e:9f:b1:35:32:
                    52:49:cc:be:c3:00:70:7d:ff:25:de:63:b9:74:eb:
                    3b:d1:b6:dc:03:bf:91:26:05:fc:d4:24:4e:a7:36:
                    41:53:03:8f:68:b8:37:1b:ac:37:4e:db:f8:d5:60:
                    79:48:04:bf:2a:3d:e9:a4:fb:e6:7e:8d:15:a2:0d:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:58:05:0E:2B:85:27:AF:64:F3:51:15:89:AA:0A:76:29:96:8A:2D
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ElgFDiuFJ69k81EViaoKdimWii0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.187.0/24
                  45.140.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:b6:00:de:06:81:21:64:59:51:f3:f9:92:aa:74:d4:7f:
         13:91:c9:51:fe:0b:b9:a9:c3:83:b8:48:d6:a6:d5:d0:49:c6:
         09:59:fd:48:c1:50:58:97:e0:2e:14:92:29:5b:a2:08:d0:b0:
         0f:90:75:f2:54:ae:c4:ac:41:f8:09:d6:21:3f:62:04:03:04:
         13:32:52:f9:12:4a:a0:24:be:88:1c:f1:8e:6a:1d:a4:98:d6:
         4c:ed:71:da:f7:77:f4:72:11:68:41:a0:70:9f:8a:a8:b4:17:
         ad:9a:5a:1a:18:23:84:4d:90:8c:22:14:59:fe:2a:a0:4a:b4:
         4a:a4:60:80:2f:ea:b6:28:a0:7c:e6:07:a5:1d:2e:19:54:7a:
         86:2a:df:50:a2:a6:4e:96:86:5d:17:0a:0a:2a:42:24:dc:31:
         d7:8e:38:ad:1b:d8:b3:66:f6:8c:07:e7:23:e4:98:ae:f5:ce:
         94:30:7d:c2:8b:63:f9:7c:04:07:51:c9:88:e8:ee:c8:1e:e4:
         cf:4e:a0:ff:e7:07:6a:9c:dd:b3:9d:1a:5d:9e:cf:ae:30:c8:
         75:23:50:36:46:0e:5d:56:16:14:94:26:40:77:f4:9f:e0:33:
         05:d4:16:41:c2:fb:79:7f:26:98:1a:27:af:3b:ed:54:39:95:
         c3:b7:41:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:24:32 2026 by rpki-client