This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/_rbSY2gPT0MHS4OQ3Oes28jwilM.roa
File:                     _rbSY2gPT0MHS4OQ3Oes28jwilM.roa (raw, json)
Hash identifier:          7+DFm6vbzUgaPp9ouPsNur38TKBXHwlKh8+YM/neRCo=
Subject key identifier:   FE:B6:D2:63:68:0F:4F:43:07:4B:83:90:DC:E7:AC:DB:C8:F0:8A:53
Certificate issuer:       /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial:       019BF4D3A7678F7AF877B4ABA2586B608C05
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/_rbSY2gPT0MHS4OQ3Oes28jwilM.roa
Signing time:             Sun 25 Jan 2026 11:04:30 +0000
ROA not before:           Sun 25 Jan 2026 11:04:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208233
IP address blocks:        45.130.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d3:a7:67:8f:7a:f8:77:b4:ab:a2:58:6b:60:8c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
        Validity
            Not Before: Jan 25 11:04:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=feb6d263680f4f43074b8390dce7acdbc8f08a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:8e:71:e3:06:3c:52:75:89:9d:8a:a6:21:
                    af:59:02:8a:d3:e8:27:80:6c:95:e0:c0:26:6f:39:
                    e8:6c:88:e9:2c:23:c2:df:23:c3:a0:92:bc:f8:ee:
                    49:a1:9e:38:e7:73:31:9b:73:22:e8:33:9e:e5:44:
                    89:6c:ba:00:cd:5a:2c:e4:1a:c0:2a:f3:cd:21:a5:
                    d5:a6:69:0d:85:bd:d0:74:6a:d7:2b:45:70:6f:0b:
                    43:8c:17:97:fc:07:49:2a:93:ad:35:78:c1:ea:97:
                    56:e2:44:ca:ad:ac:f5:45:40:7f:0f:62:0e:e6:f2:
                    23:aa:57:b6:a6:fd:ba:2b:93:04:d3:11:54:b2:3c:
                    88:66:3e:89:1f:82:42:81:69:c7:af:4f:2d:d2:af:
                    d6:48:2c:d4:b2:93:6b:1f:10:8c:1b:02:45:c0:f9:
                    8d:2b:1d:6c:fe:a3:ea:3d:d2:7c:7f:61:2b:fd:35:
                    3d:38:7f:3e:54:f3:e8:06:97:a7:f6:03:7b:a4:de:
                    63:2d:94:6a:10:2d:87:a3:a3:d1:46:6f:d7:5c:5a:
                    12:16:18:f8:26:5e:88:74:96:f1:bf:26:94:91:84:
                    ed:db:0c:c4:37:91:72:e2:69:0b:38:9f:8a:73:f9:
                    01:71:d2:62:b5:3e:31:7c:98:87:8d:f1:5c:46:a9:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B6:D2:63:68:0F:4F:43:07:4B:83:90:DC:E7:AC:DB:C8:F0:8A:53
            X509v3 Authority Key Identifier:
                keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/_rbSY2gPT0MHS4OQ3Oes28jwilM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:3b:d8:fd:d5:38:e3:6d:2a:09:9c:02:ad:7f:3b:2d:0d:58:
         8c:6b:50:9f:fe:10:16:f4:99:32:3d:7f:b6:d1:13:6e:28:86:
         99:92:d5:82:74:fa:4c:cd:6d:f8:e8:c2:85:b5:3d:97:b6:28:
         cf:50:ce:3d:e2:9d:64:80:55:f0:81:ef:93:0f:23:3e:14:e0:
         e7:8c:80:5b:ba:20:95:bf:04:fb:da:a1:b0:1c:2f:6a:0f:57:
         ab:11:0b:be:f9:f9:95:a3:c7:db:9a:7f:b0:63:64:91:ea:f3:
         f3:4d:56:8c:44:99:97:a6:8f:88:13:ea:a5:ab:c5:ae:20:bb:
         60:59:14:36:d5:a0:07:39:a5:6a:e6:32:d2:98:b5:b6:00:1e:
         69:38:0c:c1:c5:3d:3d:2b:0d:43:fa:ca:a6:a7:00:3a:c0:9a:
         4d:51:ee:c1:61:b3:34:05:2b:0f:2e:7b:cc:41:8b:43:1f:eb:
         1c:bb:3b:26:1d:36:8a:77:a6:08:d0:e8:c1:be:f0:ad:cc:20:
         e6:9c:22:1f:ab:ba:0f:f5:3b:f1:90:3d:a9:10:c9:98:b5:c0:
         a5:ed:0f:05:05:d7:aa:f3:2e:28:11:7e:aa:2a:90:dc:0b:16:
         34:5c:ae:4e:e3:d1:ab:91:84:5b:1b:f3:82:ae:5f:04:de:9b:
         93:ec:9e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:07:39 2026 by rpki-client