This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xmvSP8pUB1Ym57D-0sGr9DdSye4.roa
File:                     xmvSP8pUB1Ym57D-0sGr9DdSye4.roa (raw, json)
Hash identifier:          UE38+8HRiUR1RdFDjV2njpRyloF1JsZqfYgliz8SXFE=
Subject key identifier:   C6:6B:D2:3F:CA:54:07:56:26:E7:B0:FE:D2:C1:AB:F4:37:52:C9:EE
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DEFA5DE0A82249C41C532F1F2CDD3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xmvSP8pUB1Ym57D-0sGr9DdSye4.roa
Signing time:             Thu 01 Jan 2026 12:17:35 +0000
ROA not before:           Thu 01 Jan 2026 12:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     52000
IP address blocks:        45.135.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:ef:a5:de:0a:82:24:9c:41:c5:32:f1:f2:cd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c66bd23fca54075626e7b0fed2c1abf43752c9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:af:51:f0:07:db:2c:23:a3:f4:00:bf:64:08:
                    c4:98:13:a9:9f:96:fc:ce:c5:e9:6c:7f:21:6e:eb:
                    6f:e0:2f:1c:c2:10:a0:57:6a:c0:1a:81:4c:78:e0:
                    a1:83:c8:f2:8a:3b:f9:a3:38:03:40:b2:b2:8b:7f:
                    c7:b9:46:38:37:e0:71:be:8b:03:df:f5:85:e0:12:
                    14:2d:69:2a:6d:a3:75:d9:4f:fa:80:80:cd:1b:95:
                    c2:b8:ce:d3:51:e8:90:20:d1:7c:c0:7d:13:3f:29:
                    e6:f2:2f:17:ac:5b:06:5d:95:b7:0a:00:0e:ce:b0:
                    dd:79:e3:21:bf:b4:2e:82:73:1a:e8:5f:2b:5e:49:
                    dd:16:f2:39:7f:4c:b1:4a:00:2d:b4:a1:e5:34:e0:
                    57:c8:dd:90:17:40:a8:76:c3:ee:60:2f:1f:37:5f:
                    13:82:a3:64:42:93:9e:c1:18:44:c1:12:7f:b4:03:
                    62:fc:86:c5:42:ad:fd:51:43:49:a0:6f:ba:c5:2c:
                    42:a1:ba:e3:62:78:90:83:67:e0:8b:9b:8e:21:f2:
                    5f:4b:62:bb:67:c9:13:bd:45:6b:b9:da:49:82:05:
                    92:d4:b2:64:ed:b2:84:de:95:07:00:59:a8:de:72:
                    35:87:04:b6:74:06:31:66:8b:48:cd:1d:f0:a7:b7:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6B:D2:3F:CA:54:07:56:26:E7:B0:FE:D2:C1:AB:F4:37:52:C9:EE
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/xmvSP8pUB1Ym57D-0sGr9DdSye4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ff:c6:93:33:a1:05:da:65:10:cb:61:5e:7c:b4:68:30:c6:
         ef:49:20:c7:06:b6:bc:8e:95:4a:03:33:a0:cd:8f:c2:ae:63:
         65:0b:be:bd:c6:12:47:5a:bf:75:98:e4:cc:73:0f:2d:ff:71:
         e9:c8:4a:7a:e8:b0:38:2f:bc:c1:0a:a1:55:d3:09:66:77:80:
         f0:d8:1a:a1:ac:dd:54:e7:99:79:ac:1c:6f:66:cb:49:44:65:
         04:19:f2:ab:c3:1a:36:27:7f:13:59:0b:5b:80:8a:a6:de:15:
         df:27:f9:8d:31:ea:ea:37:ea:7d:6c:52:23:ea:b7:31:82:c7:
         9a:75:ec:f7:ec:81:01:0f:d6:b7:aa:80:1e:e1:25:b1:02:4e:
         d9:bc:b4:bb:85:72:e4:8f:e2:74:81:04:e3:02:4f:44:77:a3:
         9d:57:7d:93:cb:a8:60:08:f1:f9:1c:b0:4b:ad:34:ca:60:dd:
         9b:04:35:3d:4b:64:e4:1b:2e:99:e0:ec:0e:97:7e:f3:c7:55:
         0c:f3:b8:8a:fa:1a:51:66:c2:f4:73:24:f0:eb:6e:9b:86:9d:
         8c:5e:57:e8:bf:df:0d:97:da:64:07:bb:31:df:0b:e5:38:59:
         1b:d7:bb:15:ce:98:23:13:c4:f1:87:2a:63:77:bb:44:eb:f1:
         c0:73:b9:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fe+l3gqCJJxBxTLx8s3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjZiZDIzZmNhNTQwNzU2MjZlN2IwZmVkMmMxYWJmNDM3NTJjOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh69R8AfbLCOj9AC/ZAjEmBOpn5b8
zsXpbH8hbutv4C8cwhCgV2rAGoFMeOChg8jyijv5ozgDQLKyi3/HuUY4N+BxvosD
3/WF4BIULWkqbaN12U/6gIDNG5XCuM7TUeiQINF8wH0TPynm8i8XrFsGXZW3CgAO
zrDdeeMhv7QugnMa6F8rXkndFvI5f0yxSgAttKHlNOBXyN2QF0CodsPuYC8fN18T
gqNkQpOewRhEwRJ/tANi/IbFQq39UUNJoG+6xSxCobrjYniQg2fgi5uOIfJfS2K7
Z8kTvUVrudpJggWS1LJk7bKE3pUHAFmo3nI1hwS2dAYxZotIzR3wp7f2MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMZr0j/KVAdWJuew/tLBq/Q3UsnuMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEveG12U1A4cFVCMVltNTdELTBzR3I5RGRTeWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYe1MA0G
CSqGSIb3DQEBCwUAA4IBAQBW/8aTM6EF2mUQy2FefLRoMMbvSSDHBra8jpVKAzOg
zY/CrmNlC769xhJHWr91mOTMcw8t/3HpyEp66LA4L7zBCqFV0wlmd4Dw2BqhrN1U
55l5rBxvZstJRGUEGfKrwxo2J38TWQtbgIqm3hXfJ/mNMerqN+p9bFIj6rcxgsea
dez37IEBD9a3qoAe4SWxAk7ZvLS7hXLkj+J0gQTjAk9Ed6OdV32Ty6hgCPH5HLBL
rTTKYN2bBDU9S2TkGy6Z4OwOl37zx1UM87iK+hpRZsL0cyTw626bhp2MXlfov98N
l9pkB7sx3wvlOFkb17sVzpgjE8Txhypjd7tE6/HAc7l5
-----END CERTIFICATE-----
Generated at Thu Jan 8 23:54:40 2026 by rpki-client