This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/V07mGw5IuUe1lArmjInM3dewiyU.roa
File:                     V07mGw5IuUe1lArmjInM3dewiyU.roa (raw, json)
Hash identifier:          6ZDXPctKrH0mrFpYtMhgCvwK+IpshXj6nPlo90PwSS4=
Subject key identifier:   57:4E:E6:1B:0E:48:B9:47:B5:94:0A:E6:8C:89:CC:DD:D7:B0:8B:25
Certificate issuer:       /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial:       019B7BA3FB25D9F83081A306BE1FAA35FC96
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/V07mGw5IuUe1lArmjInM3dewiyU.roa
Signing time:             Thu 01 Jan 2026 22:18:22 +0000
ROA not before:           Thu 01 Jan 2026 22:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        45.86.44.0/24 maxlen: 24
                          45.86.45.0/24 maxlen: 24
                          45.86.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:fb:25:d9:f8:30:81:a3:06:be:1f:aa:35:fc:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
        Validity
            Not Before: Jan  1 22:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=574ee61b0e48b947b5940ae68c89ccddd7b08b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:46:2d:d8:96:6c:83:08:72:bf:8a:e2:fb:
                    5d:fa:b6:3e:85:3c:76:7e:43:45:70:e3:a0:ba:a2:
                    ee:11:6c:cd:07:79:52:1a:56:60:98:59:38:b0:47:
                    57:d6:a3:47:dd:dc:d1:1d:7e:9c:a9:91:c7:69:ec:
                    a1:f2:53:75:5d:b2:a8:e5:91:0e:3f:33:20:ec:8a:
                    e8:32:d1:ac:aa:a7:ac:6e:ab:1d:b9:0a:12:0c:8c:
                    6c:a6:1d:48:9f:20:a0:db:07:c4:15:fb:1f:d6:95:
                    83:0d:6a:68:74:58:9e:7c:cb:96:57:e3:19:ea:c3:
                    cf:ac:63:e7:c5:fd:4b:18:c3:39:42:0b:aa:cf:50:
                    a8:c2:0c:97:f8:d4:ee:ac:bc:0f:40:d5:17:69:ad:
                    c9:f8:8c:a9:83:01:87:d9:90:5b:5b:96:23:13:1d:
                    da:7a:47:d8:b8:9d:6f:5a:25:33:67:07:28:c5:31:
                    24:76:42:ed:7c:d1:66:db:9d:3d:ad:3b:7a:1e:da:
                    21:88:9c:63:ad:07:9b:7d:29:ff:93:00:65:e2:c0:
                    52:3b:c1:03:8e:15:40:ca:3b:89:2b:f3:77:00:8d:
                    7c:71:fc:78:ac:fe:d7:4e:f7:e3:c1:75:a4:61:62:
                    d6:5f:19:96:76:2c:06:f0:cf:18:f5:df:9a:ae:cb:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4E:E6:1B:0E:48:B9:47:B5:94:0A:E6:8C:89:CC:DD:D7:B0:8B:25
            X509v3 Authority Key Identifier:
                keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/V07mGw5IuUe1lArmjInM3dewiyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.44.0-45.86.46.255

    Signature Algorithm: sha256WithRSAEncryption
         08:00:70:5b:7c:71:eb:fc:e0:fc:91:03:2f:97:f9:28:31:ed:
         8f:07:78:d9:82:10:27:c0:3b:b6:af:c8:3d:a7:1a:7c:5a:d0:
         1d:fb:0a:e1:d0:d8:67:13:51:4b:87:e7:26:dc:60:de:24:68:
         a3:24:20:23:59:91:3a:ca:b0:74:fd:2f:d6:6a:0d:e0:e8:1b:
         15:37:bf:05:c6:86:79:23:4a:ba:8e:80:34:73:d3:43:53:11:
         7e:7e:d4:38:32:d0:a6:15:ed:f6:12:ef:94:26:39:29:47:4b:
         46:23:b1:e5:84:d3:d3:3b:7f:c3:16:3d:c3:f2:df:30:6f:80:
         bb:17:88:68:8a:ed:57:d9:ef:6d:57:2b:fc:0e:08:e3:1f:d8:
         f3:04:c0:3b:aa:9e:1f:83:fd:cb:b9:63:8a:f1:d5:3b:31:11:
         4a:86:7b:f7:78:2c:f7:bc:fe:8e:95:b7:b3:4d:d6:be:09:7a:
         b1:7c:72:de:eb:14:8c:4a:e5:81:a7:fe:89:c3:c3:4c:be:37:
         e6:11:f3:7b:18:ee:3a:b3:10:73:d3:d4:15:df:12:9c:e8:df:
         28:b2:c3:52:9c:3c:da:05:68:b8:d9:82:e9:17:98:aa:58:25:
         f9:9d:9e:4d:23:3b:20:88:ee:26:e7:81:66:6d:be:2b:e5:4b:
         21:12:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:29:44 2026 by rpki-client