This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rBYXc8G1XxED525JVevJQ3iH5uo.roa
File:                     rBYXc8G1XxED525JVevJQ3iH5uo.roa (raw, json)
Hash identifier:          CV44XC+KbEhQaAFtAYHtwOrPN2T4moaRoogbm6zP1I4=
Subject key identifier:   AC:16:17:73:C1:B5:5F:11:03:E7:6E:49:55:EB:C9:43:78:87:E6:EA
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C134535C8F145444749E51CA50E766E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rBYXc8G1XxED525JVevJQ3iH5uo.roa
Signing time:             Fri 02 Jan 2026 00:19:56 +0000
ROA not before:           Fri 02 Jan 2026 00:19:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     273189
IP address blocks:        45.67.246.0/23 maxlen: 23
                          45.67.246.0/24 maxlen: 24
                          45.67.247.0/24 maxlen: 24
                          45.89.82.0/23 maxlen: 23
                          80.80.90.0/23 maxlen: 23
                          80.80.90.0/24 maxlen: 24
                          80.80.91.0/24 maxlen: 24
                          185.225.246.0/23 maxlen: 23
                          185.225.246.0/24 maxlen: 24
                          185.225.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:45:35:c8:f1:45:44:47:49:e5:1c:a5:0e:76:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac161773c1b55f1103e76e4955ebc9437887e6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:ec:e9:94:1c:b9:4a:db:55:ce:c5:c7:c2:
                    7e:73:78:ab:50:1e:dc:28:c9:ed:72:f4:9b:36:76:
                    b9:49:76:39:a6:21:49:92:37:4b:81:07:3d:29:16:
                    29:6b:c5:27:b3:06:70:a2:e7:04:8c:58:03:c5:29:
                    24:17:ce:1f:70:30:2b:86:1c:c9:28:71:d5:a6:9e:
                    45:b6:13:fe:8c:de:f9:6a:ed:92:ec:6b:74:01:3c:
                    f8:90:96:2b:06:3a:1d:a7:e4:df:4b:9b:f5:d7:9f:
                    fd:28:b1:cd:dc:d1:6d:fc:39:d7:21:58:00:6b:08:
                    69:36:63:90:99:f2:5f:a8:09:19:8f:4e:ac:d5:5a:
                    a3:35:21:ff:4e:a6:d9:d6:31:d9:d2:e8:75:61:1c:
                    24:68:25:32:cb:cb:13:9c:9e:fb:15:91:4d:9e:b0:
                    f0:cb:8a:6f:51:91:87:98:2c:79:2d:d6:69:d5:e0:
                    0b:fe:b2:86:bd:88:b7:6c:77:55:28:fa:18:7e:bd:
                    9b:b9:05:7e:f7:f7:cc:7c:f6:af:b9:b4:9a:34:37:
                    ee:df:d8:d5:f6:22:8a:0d:be:8d:2f:a0:1f:0d:a0:
                    0d:af:28:4f:a5:5a:69:9e:88:6e:a2:b1:65:41:bb:
                    be:64:35:63:3f:39:dc:96:81:5d:7d:b0:17:c3:1b:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:16:17:73:C1:B5:5F:11:03:E7:6E:49:55:EB:C9:43:78:87:E6:EA
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/rBYXc8G1XxED525JVevJQ3iH5uo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.246.0/23
                  45.89.82.0/23
                  80.80.90.0/23
                  185.225.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:43:08:77:62:a9:d7:5c:86:c2:60:e1:0d:bd:54:72:40:4e:
         8c:dc:a1:53:48:c3:cf:ed:50:ab:b8:1d:b3:a1:ca:cf:25:6d:
         e7:d2:84:5b:d8:68:8a:32:13:72:44:f5:03:fa:5a:38:8e:18:
         31:87:64:e4:f4:bf:00:4b:b9:5b:2f:8d:88:7b:55:9e:a0:15:
         b3:27:a4:4d:2f:34:63:bb:1a:48:e2:bd:51:2e:fe:56:d1:26:
         06:c7:c6:8f:f8:b6:cd:69:37:c2:24:72:a0:1a:35:8d:7a:fa:
         08:b2:23:74:ae:e3:d6:d3:e0:a6:d3:6c:74:61:d0:09:b8:a6:
         6f:07:91:27:b8:96:37:30:9d:6f:11:6c:51:73:12:38:e7:41:
         11:6b:cd:05:3f:d5:69:2f:02:89:08:a9:d7:c9:0c:e6:66:49:
         09:50:85:a7:db:eb:37:1c:75:ae:c6:3d:3c:a7:b7:f1:d2:91:
         23:f8:d6:a1:cc:35:b1:e5:c5:c0:0d:1c:99:a8:db:9b:ed:35:
         75:4d:9d:3d:5e:fc:20:70:93:ed:e1:18:49:cc:f7:90:92:fa:
         8e:d3:2e:72:93:a6:68:e4:fa:86:ff:30:98:af:c7:fa:af:d7:
         95:3b:41:a3:62:48:bf:2e:ac:61:78:17:01:d7:3e:76:15:bc:
         40:05:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:37:06 2026 by rpki-client