This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/15CUOGL2FJc4NFMLFki_kL0CjhE.roa
File:                     15CUOGL2FJc4NFMLFki_kL0CjhE.roa (raw, json)
Hash identifier:          NRfPNsFdg/IFVE3xwdzbdbl6oOZsz8uVGy01eAf6YJ0=
Subject key identifier:   D7:90:94:38:62:F6:14:97:38:34:53:0B:16:48:BF:90:BD:02:8E:11
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       019BBA21DA37C34F085226DDF8C707312A04
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/15CUOGL2FJc4NFMLFki_kL0CjhE.roa
Signing time:             Wed 14 Jan 2026 01:32:19 +0000
ROA not before:           Wed 14 Jan 2026 01:32:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25198
IP address blocks:        45.150.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ba:21:da:37:c3:4f:08:52:26:dd:f8:c7:07:31:2a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Jan 14 01:32:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d790943862f614973834530b1648bf90bd028e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:53:1e:79:27:00:37:69:b4:c9:10:34:d0:
                    f0:8e:97:72:62:ef:78:01:04:9c:8e:4c:8a:ac:a6:
                    db:89:48:d1:b7:69:81:cc:9d:46:a7:ac:d9:ae:cb:
                    58:ad:f7:00:0e:bd:96:0f:ee:da:03:2b:7a:48:2a:
                    5b:a0:7a:82:fa:e0:57:5e:98:a5:49:0e:eb:10:5e:
                    5c:5f:f5:83:52:ea:39:99:b4:7f:46:79:57:8e:1f:
                    50:c6:be:83:63:78:ba:70:57:8e:c0:71:7c:2d:d2:
                    4c:8e:ec:0e:c4:24:aa:97:42:6a:91:09:b4:78:0a:
                    a1:7f:cf:15:36:4f:36:1e:49:10:d8:94:b1:73:74:
                    58:1b:ce:29:fb:1f:d5:7a:ec:63:20:97:16:d9:f1:
                    19:b6:ab:7c:11:a7:8d:d1:91:b4:b5:11:e4:2c:60:
                    ee:ee:e7:84:ae:06:5a:14:7c:3b:28:be:46:44:97:
                    ca:61:66:af:05:90:c3:ef:94:a5:27:7d:84:04:63:
                    f0:7a:2f:c7:61:83:e8:27:ed:5e:c0:3e:57:40:f4:
                    aa:08:cf:77:d1:51:9a:85:78:88:4e:90:09:e6:e6:
                    46:f4:da:e9:02:b1:57:31:e5:d0:75:80:6a:d5:89:
                    59:27:f3:4c:9f:18:3d:7e:98:43:a1:1c:a5:01:d0:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:90:94:38:62:F6:14:97:38:34:53:0B:16:48:BF:90:BD:02:8E:11
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/15CUOGL2FJc4NFMLFki_kL0CjhE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:f6:2d:4a:1f:50:ac:4e:44:4a:09:cb:f7:f2:9b:0e:4d:39:
         1a:a8:5a:b3:55:e8:3b:89:22:d7:f9:c0:20:84:8a:16:19:b0:
         ee:82:97:8c:22:7c:7e:0b:8a:33:62:bb:22:dc:ea:6b:f6:7c:
         b9:7b:15:ec:db:ff:e3:e0:cc:d4:84:48:df:3e:aa:d7:36:60:
         0d:35:f8:28:7f:09:c1:13:29:8b:30:f9:70:f2:9c:ac:58:9a:
         89:93:44:a1:55:12:df:34:a4:a6:02:e3:41:06:09:75:86:d9:
         60:da:bd:c7:e0:bc:4c:a9:15:27:ab:08:73:b1:89:93:53:05:
         36:cc:69:11:69:23:53:0d:8d:87:56:cc:11:e4:66:d8:cb:29:
         82:be:a9:3e:9c:03:08:6c:77:1b:dc:56:44:fd:bc:d4:65:81:
         16:ea:98:4d:eb:f2:80:5b:ce:7e:56:d2:35:27:e7:a9:cf:71:
         2c:46:09:59:c8:95:8c:6c:1f:b5:db:8b:09:09:f1:a7:79:87:
         12:06:04:c0:5b:8e:04:d2:6c:e7:f3:b2:84:14:de:9a:12:6e:
         5b:f5:58:a4:81:76:2d:b8:4a:f4:3c:84:a8:2c:70:41:34:0f:
         5b:c9:97:fe:a4:be:c9:94:72:ff:de:13:f1:0e:83:81:03:f3:
         3d:1a:d2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:50:42 2026 by rpki-client