This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TeK-x4LGsLDK22_d2Kmr75nl0sI.roa
File:                     TeK-x4LGsLDK22_d2Kmr75nl0sI.roa (raw, json)
Hash identifier:          RUAegepGcCqLuTPjNGFYhCjiBA4fMXMdlsGPBtj6R3k=
Subject key identifier:   4D:E2:BE:C7:82:C6:B0:B0:CA:DB:6F:DD:D8:A9:AB:EF:99:E5:D2:C2
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C134C53B50A8979A59ED8F553E7D23B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TeK-x4LGsLDK22_d2Kmr75nl0sI.roa
Signing time:             Fri 02 Jan 2026 00:19:58 +0000
ROA not before:           Fri 02 Jan 2026 00:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     274032
IP address blocks:        45.130.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:4c:53:b5:0a:89:79:a5:9e:d8:f5:53:e7:d2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4de2bec782c6b0b0cadb6fddd8a9abef99e5d2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:ff:a3:e4:ee:c8:75:2f:a5:b2:0b:9b:5f:
                    d2:61:68:67:53:39:3a:5f:8f:88:91:be:92:e0:a8:
                    2f:64:8e:a3:3b:7d:82:64:0f:37:22:d6:cf:f4:64:
                    23:e8:ab:b4:0c:bd:81:9f:83:4d:d9:7d:ea:87:de:
                    88:a0:b8:03:d1:e6:d1:ef:a4:b7:8b:52:ed:93:25:
                    5d:30:99:e4:95:28:79:09:7f:3a:0c:06:66:85:d2:
                    40:09:a1:b6:fd:c4:c4:75:57:00:ae:36:b0:61:78:
                    1d:7b:5d:30:69:0b:81:af:2f:41:37:df:c8:3e:47:
                    9e:c5:25:54:d0:91:f9:a9:63:82:df:4a:d2:e9:2e:
                    f3:2e:31:ca:35:d6:82:d5:c3:d0:99:76:f6:9b:35:
                    ae:84:90:ac:9a:80:41:89:25:05:97:02:ca:c9:d5:
                    a6:13:3f:7b:2f:61:ea:2b:06:5f:c8:2b:98:e7:2e:
                    e2:d6:8f:b0:59:37:c8:66:44:6d:51:de:eb:88:05:
                    89:dd:fd:f9:cd:48:5b:44:8e:73:16:25:19:ce:ed:
                    51:0b:9f:c9:c9:83:8b:25:01:c0:d4:24:d0:88:0a:
                    87:41:19:18:0d:13:de:84:e5:d3:23:87:15:ad:48:
                    f8:28:aa:d3:ae:2c:42:bf:2f:5a:40:0f:ed:59:e2:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:BE:C7:82:C6:B0:B0:CA:DB:6F:DD:D8:A9:AB:EF:99:E5:D2:C2
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TeK-x4LGsLDK22_d2Kmr75nl0sI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:e7:0e:3b:a4:30:18:de:09:ad:dc:68:03:00:07:f9:c3:12:
         cc:85:45:5b:3a:db:78:9e:31:36:23:a3:99:4f:5b:17:28:38:
         99:71:ed:40:07:3f:8d:2f:2b:aa:e8:e1:6d:b3:c4:21:af:9c:
         03:9c:1c:84:fc:8e:f1:39:20:be:f4:0d:ae:0e:fb:15:f1:6a:
         4a:f2:70:a9:2d:ef:35:6f:60:bd:4b:d2:3b:d0:3a:e5:ec:5f:
         3f:e9:bc:95:38:6e:ab:99:12:8e:f6:83:2d:cf:ea:f1:66:fb:
         c1:55:ef:ca:0a:1f:a1:63:83:f3:26:05:b3:2f:f4:93:3a:c7:
         b1:ba:3c:fa:6b:1a:8b:6b:43:a8:ae:61:53:03:da:45:5c:8e:
         2b:3d:e3:74:e1:b1:53:33:02:7b:14:a2:12:b9:09:d2:e3:3e:
         e4:2e:9c:3d:09:d4:aa:24:3c:b4:54:33:8c:08:2f:38:31:46:
         18:ed:ef:bb:9b:6e:84:3f:27:5c:27:0a:d4:b1:ca:c9:3f:9e:
         a7:5e:b5:21:e0:14:5d:6c:1c:fc:a8:35:6b:3e:92:ed:00:fd:
         c9:a5:54:8c:f3:6d:b2:ca:b4:b8:12:f9:1a:67:01:f5:01:c8:
         90:b5:9b:47:95:20:0f:b1:70:c3:a6:91:5c:e6:73:c6:b4:83:
         e1:c8:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:36:22 2026 by rpki-client