This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1-xvFQsYF1ACrkwFkYXh3ZXCwRkA.roa
File:                     1-xvFQsYF1ACrkwFkYXh3ZXCwRkA.roa (raw, json)
Hash identifier:          QLzY+LmmnbVQIrKZK8QkWqBQkK5BSlk4zEcv9wc7iYc=
Subject key identifier:   FB:1B:C5:42:C6:05:D4:00:AB:93:01:64:61:78:77:65:70:B0:46:40
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       019B7B3602F230C6395409491FD6E479DBC9
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1-xvFQsYF1ACrkwFkYXh3ZXCwRkA.roa
Signing time:             Thu 01 Jan 2026 20:18:15 +0000
ROA not before:           Thu 01 Jan 2026 20:18:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59643
IP address blocks:        45.155.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:02:f2:30:c6:39:54:09:49:1f:d6:e4:79:db:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  1 20:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fb1bc542c605d400ab9301646178776570b04640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:4a:95:4a:db:b6:6a:79:99:51:cb:bc:fe:
                    d5:eb:9e:41:29:69:f2:4e:7f:37:cc:1a:e1:41:73:
                    f4:dc:8f:05:90:17:45:72:bd:28:28:8c:06:d6:8b:
                    b2:b8:5c:47:bb:1b:0b:e4:18:ed:4f:fd:55:e4:6d:
                    97:8b:9e:1c:e1:87:48:e4:15:1f:07:f9:da:94:cd:
                    c6:7e:de:c4:65:ba:18:e2:48:da:37:16:c0:4f:7e:
                    bf:db:c3:6e:9b:bc:73:da:b5:61:12:d9:99:f1:1a:
                    61:1e:76:a8:de:19:cd:2b:a9:29:41:66:a5:7d:51:
                    5f:d6:5b:13:8a:bd:d8:1b:26:67:63:23:a7:96:fe:
                    b6:7d:a4:4d:64:69:e9:b5:16:03:e9:6f:2a:26:cd:
                    a7:bf:c8:93:06:b9:00:a1:49:ed:6b:48:56:4e:d4:
                    04:71:50:d4:b5:f6:52:b1:35:94:a0:3b:0b:63:2f:
                    d1:d7:7f:7e:1d:80:47:5c:a4:7c:9a:5f:86:be:18:
                    6b:f8:ff:94:5a:1b:8c:38:d4:0f:b9:bf:5b:f7:95:
                    89:a7:7c:dc:c8:a9:4d:21:f4:7c:ef:15:09:58:f5:
                    7f:fe:f5:06:0a:31:da:55:38:5c:4f:aa:9a:0f:2a:
                    c8:55:3b:1c:32:43:95:f0:c8:e0:4c:71:49:02:6c:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1B:C5:42:C6:05:D4:00:AB:93:01:64:61:78:77:65:70:B0:46:40
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1-xvFQsYF1ACrkwFkYXh3ZXCwRkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:4b:6f:56:5e:19:4e:ca:06:26:fc:2e:1e:64:1d:10:db:b8:
         9b:44:75:98:03:21:eb:f9:7f:f7:cb:09:bb:8a:7d:61:de:d7:
         3c:16:5c:14:cb:45:5b:36:d3:7f:07:99:09:d9:22:ef:e5:8d:
         6c:5b:2a:3d:b7:a2:16:48:6c:26:90:68:be:d8:02:0b:e5:ce:
         e4:65:93:e2:c2:be:23:fd:5c:f4:78:53:9c:f1:46:32:21:cb:
         29:da:98:6a:8d:c8:1d:12:a0:02:f2:4e:16:83:d0:b5:10:bb:
         4c:c7:49:de:1f:47:52:bb:c0:7d:9f:cd:57:35:f2:47:53:23:
         8f:6b:20:6e:cf:13:7a:b2:5b:e3:71:75:68:7f:ad:9e:ef:91:
         60:07:94:10:69:42:4f:60:f3:fb:b4:06:45:87:a7:2e:c5:ba:
         7c:4c:eb:99:25:5b:96:69:26:d7:9b:c6:65:91:0b:97:2a:c2:
         13:a5:82:b4:71:56:1e:1b:89:24:4d:c1:5f:43:e1:cc:bd:d7:
         1b:51:2a:1a:79:62:56:7b:de:8f:f0:31:24:cd:a6:65:63:53:
         64:44:20:ee:0e:dc:74:4b:c3:b2:cd:d5:9e:61:0a:0b:5d:85:
         ab:17:72:f0:ab:da:76:3a:18:bd:49:7f:23:11:38:a4:b1:6b:
         9d:ed:ec:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:23:28 2026 by rpki-client