This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/o-d6O05K7BPSIDagH_dA7QNFluU.roa
File:                     o-d6O05K7BPSIDagH_dA7QNFluU.roa (raw, json)
Hash identifier:          e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=
Subject key identifier:   A3:E7:7A:3B:4E:4A:EC:13:D2:20:36:A0:1F:F7:40:ED:03:45:96:E5
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       019B7A5B2A0083740D82BD9ACF3A4BC0E0B0
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/o-d6O05K7BPSIDagH_dA7QNFluU.roa
Signing time:             Thu 01 Jan 2026 16:19:13 +0000
ROA not before:           Thu 01 Jan 2026 16:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204544
IP address blocks:        45.129.36.0/22 maxlen: 22
                          45.129.36.0/24 maxlen: 24
                          45.129.37.0/24 maxlen: 24
                          45.129.38.0/23 maxlen: 23
                          45.129.38.0/24 maxlen: 24
                          45.129.39.0/24 maxlen: 24
                          185.53.140.0/22 maxlen: 22
                          185.53.140.0/23 maxlen: 23
                          185.53.140.0/24 maxlen: 24
                          185.53.141.0/24 maxlen: 24
                          185.53.142.0/23 maxlen: 23
                          185.53.142.0/24 maxlen: 24
                          185.53.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:2a:00:83:74:0d:82:bd:9a:cf:3a:4b:c0:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Jan  1 16:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a3e77a3b4e4aec13d22036a01ff740ed034596e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:5d:09:ca:14:2a:7a:c8:33:13:66:8e:3a:
                    e8:45:85:b3:4b:86:12:d8:be:0c:ba:bf:22:6a:4f:
                    eb:9c:ab:37:26:7b:6a:8c:e5:0e:67:70:94:8a:dd:
                    61:3b:32:17:09:e9:a3:3e:12:60:44:11:5d:0c:ef:
                    e8:cb:a4:b1:3d:09:86:e0:aa:0b:da:cd:26:30:9a:
                    03:d4:7a:95:ed:9e:a6:cc:fc:61:59:e7:9c:d0:4b:
                    0e:2a:55:71:75:91:51:3d:81:e4:fa:3d:2c:c9:c6:
                    6d:2d:c4:66:46:ab:3f:7d:8d:60:c7:28:d4:ee:f5:
                    de:8d:e5:82:63:6d:39:a8:06:10:82:4c:72:33:51:
                    2a:0f:35:10:db:f7:36:00:6e:6e:ce:3d:cc:2f:2a:
                    f5:1d:d9:33:03:df:96:23:19:72:9a:af:88:92:f4:
                    0e:fa:5a:7e:fc:ab:04:c6:e7:3a:8f:e3:18:48:a3:
                    9b:fa:01:e4:1e:e7:39:c1:56:80:f6:10:46:39:d2:
                    28:da:94:24:31:59:29:14:a3:78:55:eb:59:7a:c3:
                    8e:fe:52:a8:70:e3:e4:bd:3c:8f:ee:bf:79:52:01:
                    d0:f0:bd:1f:e1:9b:e5:a9:b8:f4:19:d1:26:af:6b:
                    8d:56:75:c3:fd:fa:c2:56:bc:ea:20:69:ab:73:8c:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:7A:3B:4E:4A:EC:13:D2:20:36:A0:1F:F7:40:ED:03:45:96:E5
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/o-d6O05K7BPSIDagH_dA7QNFluU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.129.36.0/22
                  185.53.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:c7:52:cd:8b:d3:0e:5e:c3:75:f4:04:95:f4:46:3f:3e:b9:
         52:88:45:82:af:43:a9:88:e4:14:0a:b3:2c:53:2d:a6:2e:0f:
         c3:8b:60:f5:b5:51:ca:cd:32:98:44:a5:85:46:1b:5e:b2:b5:
         6e:f9:63:dc:aa:62:68:0a:f0:96:fa:79:70:76:23:44:55:4e:
         c8:b7:1b:de:18:b2:b2:51:b9:00:27:8d:2d:38:0e:5b:ec:8b:
         58:30:f9:52:9b:bc:0b:34:69:1d:e4:65:47:07:16:45:11:d7:
         af:c8:f7:25:91:8c:57:fb:8b:04:10:2c:67:73:f3:49:ca:17:
         9f:00:d0:a1:22:45:61:ef:a6:85:06:e5:6d:69:62:7b:b3:d7:
         ba:8a:6d:13:b4:bc:a1:08:ec:03:4c:58:14:13:6d:c6:90:6b:
         88:9b:16:35:b6:60:a0:6e:0f:18:41:f2:c2:f4:ff:6b:5e:96:
         90:07:11:32:98:34:e6:09:7a:be:8d:1e:8c:2f:ac:67:4d:cc:
         b3:ef:75:9f:09:b3:52:ba:04:d0:48:12:0d:91:82:fc:92:b2:
         72:0d:e8:96:c2:c4:10:4a:81:19:a2:f8:a1:59:7f:7e:65:a8:
         51:5f:00:95:18:cd:c7:ea:24:95:24:ba:47:bf:1e:d9:8e:a7:
         fb:05:ab:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:44:09 2026 by rpki-client