This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa
File:                     Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa (raw, json)
Hash identifier:          odpOex+bLP44T2CZB4hEU633jHaa81Iak+Z1Bzzr7eM=
Subject key identifier:   46:0A:36:C4:41:83:B7:09:75:02:AB:FA:96:76:77:5B:D0:B8:42:F9
Certificate issuer:       /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial:       019B7759472FE58183F23B1DBD53180FB09F
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa
Signing time:             Thu 01 Jan 2026 02:18:18 +0000
ROA not before:           Thu 01 Jan 2026 02:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35482
IP address blocks:        45.66.180.0/24 maxlen: 24
                          45.66.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:47:2f:e5:81:83:f2:3b:1d:bd:53:18:0f:b0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
        Validity
            Not Before: Jan  1 02:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=460a36c44183b7097502abfa9676775bd0b842f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0b:94:f2:40:d8:5e:72:4a:ec:b9:51:89:1e:
                    30:51:46:ba:ba:f5:a3:b5:c1:4f:25:f1:3a:12:93:
                    f1:fd:47:7a:5b:37:83:eb:50:3e:77:a2:50:0f:de:
                    84:4d:5c:6b:d6:bd:b1:63:41:d2:66:2c:1c:d5:30:
                    92:e3:a3:0d:c4:ff:4e:db:2f:be:4f:22:b3:a6:75:
                    3f:6b:e5:15:ca:a6:e3:98:10:71:e0:40:a3:d3:2b:
                    ca:f7:ec:76:f9:f1:54:ea:56:fc:29:3a:c5:9c:81:
                    46:b4:05:46:f9:83:38:33:05:e8:2d:15:5e:be:13:
                    02:ae:4f:85:c5:61:06:17:0d:65:24:2d:79:e2:76:
                    7a:e9:81:4c:65:f1:7a:11:4f:1f:8f:71:70:07:a7:
                    22:12:be:72:a9:ed:29:36:d8:20:68:33:7e:b6:68:
                    05:08:29:56:08:bf:b6:41:ec:df:89:2a:31:6b:8b:
                    f0:e7:8a:90:ad:01:95:a3:90:27:01:52:2c:ad:b1:
                    2f:98:2a:85:4b:cf:61:95:75:90:52:ba:83:97:59:
                    4f:04:4b:a3:b1:cb:b4:96:10:fd:a7:75:25:d2:2a:
                    bf:20:6f:e2:15:8f:3a:58:4c:06:f6:6f:1d:1e:13:
                    b1:41:59:e3:b6:25:9e:21:e4:fc:09:38:96:12:aa:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0A:36:C4:41:83:B7:09:75:02:AB:FA:96:76:77:5B:D0:B8:42:F9
            X509v3 Authority Key Identifier:
                keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:c1:df:43:ac:be:29:8d:ae:d9:1d:7e:a9:f0:e7:c7:2a:4f:
         df:53:7f:39:d2:f4:9c:fc:39:0b:38:af:66:a6:0a:cd:f1:00:
         cf:91:cc:5c:67:9f:95:09:2a:5e:4e:95:6a:13:d7:6e:81:10:
         18:36:a3:68:76:81:da:ba:16:e0:e8:fe:db:b3:89:d9:3f:f9:
         df:fa:97:4a:49:61:c0:e1:aa:44:81:ed:77:88:fb:f8:57:6a:
         e3:2a:1b:0f:85:11:3f:e5:9b:f0:38:35:56:8c:3d:4f:a1:11:
         48:d9:f3:0f:85:d8:08:ac:ce:06:22:87:0b:80:d5:38:05:03:
         bb:1d:ee:83:f8:c7:41:c3:19:20:4a:95:27:14:97:e3:2e:12:
         27:a6:7f:4b:3c:11:15:3e:3b:84:9a:54:95:2b:52:3b:06:33:
         d0:16:53:0f:8d:58:89:4b:71:ea:ac:30:01:f4:17:f9:42:0a:
         b1:0e:4e:e9:9c:df:3a:e3:fb:1f:2e:df:5b:10:3f:ec:7d:99:
         33:f5:8e:22:9b:d4:76:5e:3d:7a:33:41:34:56:2b:87:95:0b:
         83:a4:01:d4:7f:0f:7f:55:f9:e5:f3:b8:fd:a2:ce:00:32:50:
         7b:20:25:2c:6d:14:9d:6c:5a:bb:44:77:20:b7:a6:cf:da:0d:
         4f:fb:f9:4a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt3WUcv5YGD8jsdvVMYD7CfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjQwMGU2M2NiMjYyYzIwMDBlMDcxY2U5MGFhNzJlZjY5
M2U2YTIwHhcNMjYwMTAxMDIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjBhMzZjNDQxODNiNzA5NzUwMmFiZmE5Njc2Nzc1YmQwYjg0MmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wuU8kDYXnJK7LlRiR4wUUa6uvWj
tcFPJfE6EpPx/Ud6WzeD61A+d6JQD96ETVxr1r2xY0HSZiwc1TCS46MNxP9O2y++
TyKzpnU/a+UVyqbjmBBx4ECj0yvK9+x2+fFU6lb8KTrFnIFGtAVG+YM4MwXoLRVe
vhMCrk+FxWEGFw1lJC154nZ66YFMZfF6EU8fj3FwB6ciEr5yqe0pNtggaDN+tmgF
CClWCL+2QezfiSoxa4vw54qQrQGVo5AnAVIsrbEvmCqFS89hlXWQUrqDl1lPBEuj
scu0lhD9p3Ul0iq/IG/iFY86WEwG9m8dHhOxQVnjtiWeIeT8CTiWEqplmQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEYKNsRBg7cJdQKr+pZ2d1vQuEL5MB8GA1UdIwQY
MBaAFPv0AOY8smLCAA4HHOkKpy72k+aiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fUUE1anl5WXNJQURnY2M2UXFuTHZhVDVxSS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvOWIzZjZmLTk3NTQtNDU4Zi1iNWI0
LWY5NTg1NWYxMDc2My8xL1JnbzJ4RUdEdHdsMUFxdjZsblozVzlDNFF2ay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvOWIzZjZmLTk3NTQtNDU4Zi1iNWI0LWY5NTg1NWYxMDc2
My8xLzEtX1FBNWp5eVlzSUFEZ2NjNlFxbkx2YVQ1cUkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtQrQw
DQYJKoZIhvcNAQELBQADggEBABvB30OsvimNrtkdfqnw58cqT99TfznS9Jz8OQs4
r2amCs3xAM+RzFxnn5UJKl5OlWoT126BEBg2o2h2gdq6FuDo/tuzidk/+d/6l0pJ
YcDhqkSB7XeI+/hXauMqGw+FET/lm/A4NVaMPU+hEUjZ8w+F2AiszgYihwuA1TgF
A7sd7oP4x0HDGSBKlScUl+MuEiemf0s8ERU+O4SaVJUrUjsGM9AWUw+NWIlLceqs
MAH0F/lCCrEOTumc3zrj+x8u31sQP+x9mTP1jiKb1HZePXozQTRWK4eVC4OkAdR/
D39V+eXzuP2izgAyUHsgJSxtFJ1sWrtEdyC3ps/aDU/7+Uo=
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:28:24 2026 by rpki-client