This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/_Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa
File:                     _Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa (raw, json)
Hash identifier:          84bc4cZmGpgQymic02SrkDgsWwCytvG15eu2yEnR910=
Subject key identifier:   FD:6C:38:AD:80:5B:C5:B0:07:DA:05:02:90:34:50:D6:17:75:E5:60
Certificate issuer:       /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial:       019B7A5B17CC51F0E22098C82D3328708CE9
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/_Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa
Signing time:             Thu 01 Jan 2026 16:19:08 +0000
ROA not before:           Thu 01 Jan 2026 16:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59592
IP address blocks:        45.146.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:17:cc:51:f0:e2:20:98:c8:2d:33:28:70:8c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
        Validity
            Not Before: Jan  1 16:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd6c38ad805bc5b007da0502903450d61775e560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:f9:09:6c:be:54:99:a5:43:fd:a2:b6:2f:
                    d2:36:8c:1d:a0:70:1a:c4:d5:90:6e:9f:6f:8a:5d:
                    5a:ea:93:f6:18:20:9e:51:87:f2:03:fe:1c:20:57:
                    15:47:5a:03:c8:1d:69:28:18:12:c9:35:54:99:b1:
                    28:0c:ac:f3:8c:b9:16:d8:e8:e9:f4:97:53:85:a4:
                    1b:af:35:51:67:7d:4e:48:8a:33:07:ee:36:28:be:
                    39:78:58:f3:48:b0:84:cd:45:8f:70:44:95:9e:c2:
                    f2:26:b5:fc:0d:e5:c7:34:e6:b5:06:a2:4f:43:fe:
                    62:79:54:93:d9:d8:20:02:4c:b7:df:f2:35:a4:70:
                    0a:f5:67:26:c0:c2:e7:29:17:46:01:eb:74:3a:92:
                    21:6e:a2:c9:3e:f0:eb:ad:ca:7c:ec:db:d0:d5:64:
                    ce:d9:24:b6:d9:33:6c:97:db:6e:28:b1:e7:01:ae:
                    9d:3a:48:b1:79:0c:86:a9:11:ff:eb:eb:17:1c:dd:
                    27:94:39:56:30:a3:10:d2:1e:fd:db:91:57:69:b1:
                    41:86:d2:ce:7e:55:39:4a:49:0e:7c:b8:f9:a5:fe:
                    9b:c7:6c:35:34:d6:6d:6a:79:9f:1d:0f:26:87:ef:
                    a4:09:56:8f:59:a0:ef:9e:5a:00:f5:da:5c:fe:32:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:38:AD:80:5B:C5:B0:07:DA:05:02:90:34:50:D6:17:75:E5:60
            X509v3 Authority Key Identifier:
                keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/_Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:48:7a:84:ab:08:c7:fc:e3:a5:08:4a:22:18:43:40:ce:f8:
         98:13:aa:ab:59:23:06:38:c4:83:50:4d:07:cc:7f:6c:cb:b0:
         70:41:de:58:c0:b8:6a:f2:f2:47:58:06:20:f7:07:86:6e:fe:
         9a:d9:16:5e:7e:8a:4e:47:6f:ed:be:81:86:12:a4:94:f9:f4:
         9d:bf:60:44:60:3b:4a:3a:fc:02:dc:c3:24:ba:6e:1c:12:eb:
         f4:c7:32:04:76:18:73:05:06:91:46:00:03:ff:f7:a6:c3:76:
         f8:1f:75:2e:13:5a:7c:ba:cf:e1:60:cb:a8:cc:fa:95:d0:f0:
         24:ce:ca:94:69:69:8b:d9:bc:5d:ac:a5:84:f8:46:f9:4b:1c:
         d5:18:b8:84:1a:0e:a1:8b:1e:61:17:46:33:46:16:0b:25:9d:
         87:11:8a:2c:c6:d8:d9:36:90:04:f3:50:f0:f6:1d:64:16:e2:
         b1:53:dd:c8:cd:16:d2:3e:33:91:0c:b7:0e:97:2d:f9:fd:94:
         cf:d7:a1:03:bc:c0:9e:91:91:b9:4f:68:82:01:ce:b4:39:b9:
         10:89:f9:e5:51:1d:27:20:e1:53:ae:06:43:95:f5:78:64:6c:
         6c:57:5c:34:f9:32:d2:25:8f:06:c0:d5:d7:65:70:ed:7f:c5:
         da:f0:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:07 2026 by rpki-client