This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hM0KnSbGL5YIPkBiWFsQifDO0ws.roa
File:                     hM0KnSbGL5YIPkBiWFsQifDO0ws.roa (raw, json)
Hash identifier:          AtisJ2m9ZKIN0vglh5L6u6PQdFGr2dFMzFl70GeYwMU=
Subject key identifier:   84:CD:0A:9D:26:C6:2F:96:08:3E:40:62:58:5B:10:89:F0:CE:D3:0B
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019B7CEDEB7544449E5CB97125A6071305EF
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hM0KnSbGL5YIPkBiWFsQifDO0ws.roa
Signing time:             Fri 02 Jan 2026 04:18:45 +0000
ROA not before:           Fri 02 Jan 2026 04:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211484
IP address blocks:        176.57.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:eb:75:44:44:9e:5c:b9:71:25:a6:07:13:05:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  2 04:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=84cd0a9d26c62f96083e4062585b1089f0ced30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:13:73:9b:a2:52:fb:93:73:c9:31:d6:4a:
                    d1:c8:e7:f4:d3:53:a4:b3:53:05:fd:37:b5:c2:77:
                    73:e0:c8:59:2c:6d:f5:93:3c:3f:0d:28:79:07:e5:
                    dc:52:15:fe:20:fb:e4:b4:ba:7c:81:50:6a:3d:bd:
                    7f:46:a0:22:df:6f:a8:c5:ca:dc:70:92:9d:2b:c5:
                    c8:b8:ec:e9:0e:7b:83:92:f2:bb:a9:bf:23:6d:38:
                    47:81:d9:fc:9d:12:5d:9e:34:80:47:bf:02:36:76:
                    83:e7:de:20:3e:6f:34:3b:5f:d3:bc:8e:9e:c0:bc:
                    27:91:4d:2f:22:c9:05:7d:81:0e:01:49:55:3e:5d:
                    52:df:3e:d3:b8:2d:33:cf:4e:10:ba:9c:09:2a:12:
                    cb:70:04:ba:85:9d:e2:7c:46:30:34:8f:60:c7:05:
                    92:fd:57:63:2b:64:a9:1f:c3:33:ba:c7:91:9d:f1:
                    7d:a6:66:0c:2d:ef:05:0f:2d:0c:0b:57:5d:56:86:
                    65:95:07:8d:4d:55:0c:32:68:8f:1f:7d:92:cb:ea:
                    1b:8c:d7:3a:12:51:a6:ba:c0:68:32:00:d7:81:d1:
                    e4:3b:58:9c:42:c2:81:eb:a5:c3:e6:70:27:ae:14:
                    36:9b:bd:8e:13:50:7e:a1:fa:3b:d9:b9:bf:94:10:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:0A:9D:26:C6:2F:96:08:3E:40:62:58:5B:10:89:F0:CE:D3:0B
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/hM0KnSbGL5YIPkBiWFsQifDO0ws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:55:f1:70:fe:d0:33:c5:42:b8:47:c2:6f:dc:b5:eb:7f:de:
         28:63:c6:60:19:6f:07:1d:69:9a:ef:ca:3b:ca:ef:91:39:99:
         dc:9f:e3:01:9b:e7:38:d0:2e:a9:c4:27:f5:23:e3:00:c4:a4:
         2d:81:2a:95:b0:e3:46:7a:38:b9:7b:67:cf:da:1c:8c:5b:b4:
         c4:aa:68:99:69:05:6f:2d:db:4a:f2:d8:ee:5c:95:6e:3a:96:
         f2:5c:ca:8c:e8:28:60:cc:3c:a0:bd:7d:44:86:c4:fe:bd:8d:
         1b:5b:61:20:55:04:35:cb:5c:64:d2:7e:77:92:a4:48:c0:ad:
         ff:7f:0b:f3:a6:09:41:0f:2e:c4:b6:7c:c1:e9:3c:4d:56:04:
         63:6d:30:46:04:b4:75:c2:6d:08:bf:4e:97:6b:41:14:66:2a:
         28:05:68:1d:c7:54:d0:b3:00:dc:87:38:fd:39:7c:29:67:ad:
         73:c0:7a:9c:1f:cf:e6:e5:e9:15:0d:85:df:6c:58:3b:c6:dc:
         57:3b:77:69:ca:db:c6:2a:79:99:24:dc:a0:46:ed:02:ad:c7:
         39:21:b3:3f:5a:22:99:b3:78:dc:28:b4:32:59:7a:5d:de:e5:
         ea:5d:dd:db:0a:cc:b8:a7:2c:91:06:ab:ce:c8:bb:7e:75:4e:
         38:d9:77:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 17:57:29 2026 by rpki-client