This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/RijzbLPJNYBBaQUNmuNuIQrf5Xw.roa
File:                     RijzbLPJNYBBaQUNmuNuIQrf5Xw.roa (raw, json)
Hash identifier:          v10XXGdmUOPRJJS1MaufQ22rkW2n2zH/GaaX/HJobRg=
Subject key identifier:   46:28:F3:6C:B3:C9:35:80:41:69:05:0D:9A:E3:6E:21:0A:DF:E5:7C
Certificate issuer:       /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial:       019B7BA546C70BD4C4BC37EFBD8D0C9511AD
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/RijzbLPJNYBBaQUNmuNuIQrf5Xw.roa
Signing time:             Thu 01 Jan 2026 22:19:47 +0000
ROA not before:           Thu 01 Jan 2026 22:19:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200617
IP address blocks:        45.145.36.0/24 maxlen: 24
                          2a13:5840::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:46:c7:0b:d4:c4:bc:37:ef:bd:8d:0c:95:11:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
        Validity
            Not Before: Jan  1 22:19:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4628f36cb3c935804169050d9ae36e210adfe57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:c4:52:6c:6d:66:27:fb:a3:e9:0b:0a:d2:
                    59:2b:0e:61:bb:d9:fc:10:4f:f5:c7:56:19:cd:73:
                    99:3a:10:42:ea:a1:65:21:83:d3:c7:0f:aa:ac:d7:
                    e1:9c:9d:c8:63:f9:2a:1b:82:06:9a:6f:02:20:ad:
                    25:9c:f5:06:69:6c:ca:51:cc:e9:eb:79:a7:63:69:
                    81:72:21:b0:c9:cf:cc:85:5f:9d:d6:e7:01:20:3b:
                    59:18:fc:2c:46:57:dd:db:7d:8b:2d:94:81:3a:c9:
                    9f:08:d7:a6:27:9b:9e:ad:d6:8d:fd:ae:e0:c9:59:
                    59:19:04:98:e1:84:68:af:b0:b1:8b:be:0c:81:e0:
                    f8:38:1a:34:f7:12:24:f8:cb:19:69:c2:62:74:20:
                    25:b7:d5:f4:9d:c1:70:85:31:46:1c:d2:68:ea:70:
                    1f:6b:01:58:9a:17:0c:89:a7:c0:ca:3a:0f:25:66:
                    99:74:8e:0f:ef:99:e0:05:92:de:00:49:0e:f6:ee:
                    3c:66:84:34:b9:3e:2f:ff:00:bb:b5:50:3d:99:e2:
                    4a:46:be:e5:b4:46:c7:48:11:c9:b3:8a:d7:fd:9c:
                    80:f0:ae:d6:80:2d:76:0e:6a:5f:3e:c7:52:8f:1f:
                    c3:6e:19:74:34:8f:d9:c3:97:b0:97:5e:c4:67:b4:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:F3:6C:B3:C9:35:80:41:69:05:0D:9A:E3:6E:21:0A:DF:E5:7C
            X509v3 Authority Key Identifier:
                keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/RijzbLPJNYBBaQUNmuNuIQrf5Xw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.36.0/24
                IPv6:
                  2a13:5840::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:68:21:98:89:9c:7f:4c:4a:bb:16:ed:4c:f0:58:b9:96:c5:
         dd:bf:8f:7a:66:4f:b3:6c:b7:a3:0d:58:b5:66:9b:59:d4:bf:
         af:c8:0c:34:f4:a8:f9:93:52:90:a1:76:14:06:b2:84:c0:72:
         8a:5d:fc:c1:e4:0f:7c:09:f1:0a:a1:7e:aa:bd:08:86:c0:d1:
         bf:ed:4f:82:2c:5d:72:a5:ce:8e:8f:0b:af:c6:f5:cb:54:08:
         b5:09:9c:ae:70:5e:d2:ee:6f:f9:5e:1f:cf:d3:b5:93:f9:15:
         e8:ba:54:e7:62:13:d1:36:27:7e:b0:68:a8:96:60:fe:db:47:
         88:fd:18:04:cd:2b:fd:04:e5:68:35:b7:b7:19:c9:47:8e:09:
         a3:6a:c7:8b:e6:07:66:61:d3:0a:77:ad:26:67:55:25:ae:7a:
         60:67:0e:6d:61:65:7f:3a:4b:e7:91:a4:10:ea:05:44:2a:9a:
         ef:ac:30:4b:fc:a5:c4:33:1e:de:c7:58:8e:5e:c3:ea:6e:2e:
         a7:e1:15:1e:a6:21:f5:c6:46:bd:a9:99:3c:85:50:3b:2f:e7:
         83:67:3e:91:56:8e:4e:5b:74:85:61:9a:0a:9c:09:ae:82:58:
         34:58:25:34:3f:8f:37:f3:53:bd:42:bf:00:b4:92:12:70:e2:
         12:8f:87:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:32 2026 by rpki-client