This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/w4ITWrVOd87_9Oz-MtY7slczBow.roa
File:                     w4ITWrVOd87_9Oz-MtY7slczBow.roa (raw, json)
Hash identifier:          /062+JMxPPoUdp7c8u+6Eta3MA3XDfRjmmRKaz0UrFg=
Subject key identifier:   C3:82:13:5A:B5:4E:77:CE:FF:F4:EC:FE:32:D6:3B:B2:57:33:06:8C
Certificate issuer:       /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial:       019B7F83E1D38FCECA20EAD58C605C3B6FF2
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/w4ITWrVOd87_9Oz-MtY7slczBow.roa
Signing time:             Fri 02 Jan 2026 16:21:48 +0000
ROA not before:           Fri 02 Jan 2026 16:21:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203714
IP address blocks:        45.134.60.0/23 maxlen: 23
                          45.134.62.0/23 maxlen: 23
                          45.134.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:e1:d3:8f:ce:ca:20:ea:d5:8c:60:5c:3b:6f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
        Validity
            Not Before: Jan  2 16:21:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c382135ab54e77cefff4ecfe32d63bb25733068c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:b1:f0:b1:32:4f:11:94:51:26:44:7c:c6:
                    03:66:af:ed:18:99:e4:45:81:88:e8:13:b3:28:cd:
                    d5:3e:79:e0:52:5d:c7:3f:52:d3:07:ca:8f:49:4a:
                    0a:a0:6e:7d:be:a6:af:e6:bf:00:c8:c6:43:9f:62:
                    43:83:bd:9d:42:8c:d2:72:98:5f:cd:d4:1d:22:48:
                    80:47:9e:49:cd:ee:a0:e5:f9:1b:16:34:b6:cc:c3:
                    fb:9e:e6:05:cc:5c:be:53:4a:ad:f1:91:ac:e4:d9:
                    af:55:5a:36:ef:c5:47:ef:4f:97:59:0f:4a:16:9c:
                    bb:4c:0b:4e:f4:7b:b7:67:ee:34:a9:82:57:09:01:
                    06:3b:64:b6:52:82:f8:b8:3f:45:ea:33:df:42:13:
                    04:fa:4f:8c:04:d8:01:e8:c6:74:d9:61:bb:c8:c7:
                    b4:14:b5:66:de:23:7d:91:d1:82:f2:10:ac:59:1e:
                    ec:89:12:24:dc:82:91:2e:c8:b4:23:0c:ed:76:48:
                    61:9f:35:f8:dd:f3:0e:4c:69:f3:ac:b6:ae:ff:1e:
                    ef:60:62:6f:9c:dd:24:e2:a3:9c:60:18:02:8b:00:
                    6f:af:8c:1c:07:5e:9e:c7:36:09:f2:05:3a:73:29:
                    a8:0d:c7:f7:d7:37:76:46:51:b2:38:fb:bb:cb:db:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:82:13:5A:B5:4E:77:CE:FF:F4:EC:FE:32:D6:3B:B2:57:33:06:8C
            X509v3 Authority Key Identifier:
                keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/w4ITWrVOd87_9Oz-MtY7slczBow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:b8:42:77:09:d3:03:8d:c8:b6:45:0a:1a:7c:88:b3:87:bd:
         1c:6d:84:b9:12:d4:55:91:40:1e:36:79:ae:70:2e:ac:64:09:
         bb:a0:4a:a7:4b:4a:e1:a2:03:97:a3:d7:0b:36:7c:d1:2a:f9:
         84:4b:e8:f5:4d:bf:5a:76:96:b5:08:d0:ec:f8:02:10:9e:9d:
         4a:dd:6c:c2:c1:ee:1e:06:ff:35:73:0c:d6:47:b3:28:a6:3c:
         ba:64:14:c3:c2:24:46:d5:85:61:06:6f:6a:c3:89:85:cf:b2:
         54:fb:67:d5:07:59:60:5a:72:1f:59:1e:8a:56:94:29:7d:73:
         92:9a:c6:90:8a:28:61:c0:b2:03:12:dd:75:e4:b0:68:a7:16:
         a7:f5:3d:0b:28:9f:0a:7b:9a:61:cd:23:98:ea:1a:55:be:5b:
         2b:a1:4f:71:69:cb:6d:ca:b6:56:3a:70:7b:32:54:96:ef:ae:
         ec:d3:4f:2f:90:3f:13:20:8b:27:63:60:cb:cd:d8:49:dd:09:
         32:e3:4c:b2:1a:e5:c3:8e:e3:e9:fb:5c:ee:6c:2a:56:b3:c4:
         26:ea:0d:b0:ba:2c:07:4a:cb:21:6a:0a:c5:3a:15:48:24:a2:
         c1:63:18:c0:85:ff:82:93:0b:04:c9:63:a6:17:d5:1d:08:3b:
         e7:10:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:43 2026 by rpki-client