This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TWpamm9kXLeon_yVeMrqIYlrHbo.roa
File:                     TWpamm9kXLeon_yVeMrqIYlrHbo.roa (raw, json)
Hash identifier:          lg1hOhEW8ynjVsguf4215rkzOZSY/wXaLptvJFKsFPk=
Subject key identifier:   4D:6A:5A:9A:6F:64:5C:B7:A8:9F:FC:95:78:CA:EA:21:89:6B:1D:BA
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DEB664FDB544A6FAF6657D5AF92A1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TWpamm9kXLeon_yVeMrqIYlrHbo.roa
Signing time:             Thu 01 Jan 2026 12:17:33 +0000
ROA not before:           Thu 01 Jan 2026 12:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43641
IP address blocks:        45.135.180.0/24 maxlen: 24
                          89.35.131.0/24 maxlen: 24
                          93.115.172.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          202.71.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:eb:66:4f:db:54:4a:6f:af:66:57:d5:af:92:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d6a5a9a6f645cb7a89ffc9578caea21896b1dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:51:20:ed:d2:d1:9c:8f:ce:ff:e9:0f:f5:
                    b0:7e:b5:fe:0c:3e:99:77:83:3c:45:26:c0:36:2d:
                    7d:29:66:73:1c:5d:42:2f:b1:c1:e1:f3:83:20:a6:
                    ce:73:e4:11:79:d9:0b:37:13:da:48:19:94:4a:0c:
                    82:66:44:48:9c:ed:c6:a7:9b:cd:df:8f:8a:d7:1f:
                    6f:db:82:7a:7b:39:55:81:e2:f1:7a:41:b9:11:71:
                    0f:5e:8f:ea:94:8a:c5:00:de:7f:99:c4:7a:6c:55:
                    e6:df:b4:69:46:b1:e7:b5:cd:5b:30:5b:4d:71:5d:
                    22:50:9b:28:2d:ae:92:f8:6f:05:05:64:f6:e8:40:
                    f9:b1:e3:6e:3e:2a:d5:f6:9d:51:35:fc:eb:30:13:
                    71:8a:51:ae:07:14:5b:2b:cd:10:39:cd:19:55:65:
                    dc:9f:4d:f5:1d:5a:08:6e:a4:86:e2:a5:c8:ae:9f:
                    ff:d8:a8:53:90:b4:38:f3:d1:18:1b:09:c6:16:db:
                    de:a9:73:6b:48:88:39:bb:26:c3:7c:b0:7a:01:06:
                    5f:90:8d:ab:c4:d3:90:b1:d3:fb:c3:e3:8a:73:0b:
                    67:85:bb:6e:64:0b:00:25:3e:b4:d2:ae:16:db:ce:
                    fb:00:b1:a5:88:29:9c:31:1a:af:22:52:42:2e:00:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6A:5A:9A:6F:64:5C:B7:A8:9F:FC:95:78:CA:EA:21:89:6B:1D:BA
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TWpamm9kXLeon_yVeMrqIYlrHbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.180.0/24
                  89.35.131.0/24
                  93.115.172.0/24
                  194.58.47.0/24
                  202.71.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:26:57:09:28:3a:8e:68:d1:86:ef:dc:0a:a9:75:6e:12:e3:
         64:d8:b5:7e:32:23:18:e3:0e:b7:6e:99:97:44:0c:f1:41:e3:
         72:09:91:2f:3b:5b:bb:86:04:48:29:d3:ac:c6:0b:e7:ac:5d:
         e8:cd:ff:bc:f1:33:be:67:7c:ba:5f:2a:0b:32:8e:16:ef:82:
         e5:e7:68:e0:30:78:e6:f3:92:5d:e0:38:02:c5:bc:63:81:6c:
         9a:bb:2d:d0:40:3f:fa:9e:f9:48:be:5b:63:25:2a:1f:ca:a9:
         9b:b7:87:fc:e0:ff:85:0f:cf:c7:44:59:d6:d1:79:6d:ba:a9:
         ea:84:67:ea:95:f5:30:4f:21:36:45:fe:c8:c1:5e:9a:c2:2a:
         34:78:fb:db:5d:66:54:8e:f2:50:73:51:89:86:84:ad:4c:84:
         16:d4:f1:7b:6b:e3:ef:eb:ed:f5:1f:56:08:d6:d5:6b:5b:75:
         00:17:75:1b:20:8a:be:6f:a1:15:f3:75:12:e3:19:19:07:dd:
         19:6c:b7:a0:90:53:c0:95:78:64:80:68:83:2b:62:31:3c:eb:
         3d:b2:36:18:0f:aa:ec:a1:4c:2c:ca:18:f8:6e:2a:20:0f:36:
         26:fd:0d:7d:ce:86:84:af:6e:d6:8b:b9:1f:8c:9d:9e:6d:d6:
         be:c8:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:23:52 2026 by rpki-client