This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/OLXdaRnPL02tpUrPnA4UQT327ZI.roa
File:                     OLXdaRnPL02tpUrPnA4UQT327ZI.roa (raw, json)
Hash identifier:          69DMOZCkRKYhOnwSb4NrAHe7DKlnYxQTGmcTJihgeio=
Subject key identifier:   38:B5:DD:69:19:CF:2F:4D:AD:A5:4A:CF:9C:0E:14:41:3D:F6:ED:92
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       019B7AC7F5065B4712335E7B631A9A4307F8
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/OLXdaRnPL02tpUrPnA4UQT327ZI.roa
Signing time:             Thu 01 Jan 2026 18:18:03 +0000
ROA not before:           Thu 01 Jan 2026 18:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48037
IP address blocks:        145.10.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:f5:06:5b:47:12:33:5e:7b:63:1a:9a:43:07:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 18:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=38b5dd6919cf2f4dada54acf9c0e14413df6ed92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:68:e7:ac:41:89:66:a5:a8:4c:e5:e4:b6:e0:
                    4a:05:30:87:aa:85:44:73:14:54:ae:35:ac:45:11:
                    6a:c8:5c:fe:9d:0f:28:8a:08:8d:6c:62:bb:44:fc:
                    b6:6c:ae:be:d5:6d:da:04:2e:7d:b9:2b:9c:76:22:
                    c5:c8:6c:05:b6:c2:56:e0:b2:11:37:39:60:29:06:
                    2d:9f:f9:b9:a2:85:5c:b4:af:d2:93:d1:2a:3e:3e:
                    c5:38:53:1a:05:ca:be:5c:06:e8:63:c1:70:60:ec:
                    22:d6:bc:28:bf:fa:85:ad:54:24:00:55:c2:95:71:
                    80:c0:7d:ee:99:ae:0f:77:33:b7:37:cd:44:a4:5d:
                    ee:14:9c:56:b6:f7:ca:a4:80:4d:62:24:13:aa:b3:
                    30:fc:2e:fd:ca:46:9c:45:d3:e6:89:a7:e2:5d:9c:
                    d6:5a:d5:2c:94:25:7b:c0:dd:7f:43:a6:dc:eb:6a:
                    61:56:52:84:34:22:be:4e:c5:6a:73:0d:08:ab:7b:
                    c9:40:cd:41:4a:07:ce:1f:36:b6:12:3d:b1:83:c2:
                    13:5e:2d:17:44:46:a7:23:1b:49:3c:0f:25:72:a5:
                    79:07:22:8d:a5:d6:bf:7c:b3:5c:57:6c:2c:45:90:
                    8a:59:09:b1:45:e7:92:d2:00:45:11:53:02:27:80:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B5:DD:69:19:CF:2F:4D:AD:A5:4A:CF:9C:0E:14:41:3D:F6:ED:92
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/OLXdaRnPL02tpUrPnA4UQT327ZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:11:9d:27:85:c5:df:be:c5:25:f7:9d:3c:19:c0:6e:9e:df:
         36:a3:be:2e:2c:3f:ac:49:df:6e:fb:e1:9b:11:37:68:01:80:
         44:64:8a:df:4b:2d:ac:3d:6b:ef:34:0c:2b:08:78:16:ac:22:
         97:c5:d2:3d:df:2e:24:ad:c5:89:b6:42:c9:5a:fa:d6:40:f6:
         d9:8d:58:48:1e:4a:99:99:8f:63:b5:8a:69:9e:d1:dd:f9:ae:
         eb:46:d1:e1:6c:e0:a2:48:ee:81:34:a7:f1:a6:93:3b:e1:67:
         a0:ea:22:bc:72:c3:d0:38:94:8c:42:10:d2:7d:a9:e0:c2:9e:
         ad:5d:04:90:45:ab:8c:7a:ef:1f:98:b4:55:2c:40:ca:c4:c6:
         e5:2c:54:f4:e7:26:bf:fb:25:21:eb:d8:45:27:b0:da:ff:92:
         45:b7:c1:28:3c:9d:fb:1b:82:45:f6:c2:2e:a0:a5:2c:a7:49:
         09:92:4c:0f:b2:51:c6:a5:39:8d:35:3f:fd:19:6e:07:5d:da:
         52:e9:43:db:bf:86:13:66:f2:76:b6:45:57:ef:47:66:de:6f:
         32:8e:3a:00:16:4b:cf:96:60:9b:de:74:14:67:9b:3c:70:09:
         30:f3:97:65:ef:d0:85:7b:cf:71:45:7e:a0:e9:7f:a3:a7:4f:
         ea:7c:48:84
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZt6x/UGW0cSM157YxqaQwf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGI1ZGQ2OTE5Y2YyZjRkYWRhNTRhY2Y5YzBlMTQ0MTNkZjZlZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WjnrEGJZqWoTOXktuBKBTCHqoVE
cxRUrjWsRRFqyFz+nQ8oigiNbGK7RPy2bK6+1W3aBC59uSucdiLFyGwFtsJW4LIR
NzlgKQYtn/m5ooVctK/Sk9EqPj7FOFMaBcq+XAboY8FwYOwi1rwov/qFrVQkAFXC
lXGAwH3uma4PdzO3N81EpF3uFJxWtvfKpIBNYiQTqrMw/C79ykacRdPmiafiXZzW
WtUslCV7wN1/Q6bc62phVlKENCK+TsVqcw0Iq3vJQM1BSgfOHza2Ej2xg8ITXi0X
REanIxtJPA8lcqV5ByKNpda/fLNcV2wsRZCKWQmxReeS0gBFEVMCJ4BbOwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFDi13WkZzy9NraVKz5wOFEE99u2SMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvT0xYZGFSblBMMDJ0cFVyUG5BNFVRVDMyN1pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkQowDQYJ
KoZIhvcNAQELBQADggEBAI0RnSeFxd++xSX3nTwZwG6e3zajvi4sP6xJ32774ZsR
N2gBgERkit9LLaw9a+80DCsIeBasIpfF0j3fLiStxYm2Qsla+tZA9tmNWEgeSpmZ
j2O1imme0d35rutG0eFs4KJI7oE0p/GmkzvhZ6DqIrxyw9A4lIxCENJ9qeDCnq1d
BJBFq4x67x+YtFUsQMrExuUsVPTnJr/7JSHr2EUnsNr/kkW3wSg8nfsbgkX2wi6g
pSynSQmSTA+yUcalOY01P/0Zbgdd2lLpQ9u/hhNm8na2RVfvR2bebzKOOgAWS8+W
YJvedBRnmzxwCTDzl2Xv0IV7z3FFfqDpf6OnT+p8SIQ=
-----END CERTIFICATE-----
Generated at Tue Jan 20 07:46:27 2026 by rpki-client