This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/an1Tdbj5z52i760TcgMy1zpUrg0.roa
File:                     an1Tdbj5z52i760TcgMy1zpUrg0.roa (raw, json)
Hash identifier:          hyqa/bZq2B5838z18985E46JOI+C3vApH4rsbyeF/Nk=
Subject key identifier:   6A:7D:53:75:B8:F9:CF:9D:A2:EF:AD:13:72:03:32:D7:3A:54:AE:0D
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       019C4CB5DEEB0342ACA4B0BB3F1C9F29891C
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/an1Tdbj5z52i760TcgMy1zpUrg0.roa
Signing time:             Wed 11 Feb 2026 12:38:33 +0000
ROA not before:           Wed 11 Feb 2026 12:38:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        45.83.238.0/24 maxlen: 24
                          45.150.196.0/24 maxlen: 24
                          45.150.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4c:b5:de:eb:03:42:ac:a4:b0:bb:3f:1c:9f:29:89:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Feb 11 12:38:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a7d5375b8f9cf9da2efad13720332d73a54ae0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:de:9c:f3:74:4c:bd:3c:9e:66:7b:63:01:
                    9a:d8:c2:08:ba:8f:e2:62:77:7d:a6:56:e0:fe:b9:
                    4e:8e:e1:ca:f0:cf:da:6d:b9:a8:63:da:dd:aa:3d:
                    94:03:78:52:94:11:3c:cc:a5:2f:b7:fe:1c:cd:4d:
                    a4:c0:99:b5:2f:8e:2e:22:01:3a:13:3d:50:5e:ef:
                    5d:f5:5c:cc:36:11:d2:4b:d9:e6:c5:c3:18:78:e2:
                    d2:81:37:41:50:80:70:30:bb:94:6b:97:68:0f:40:
                    b1:68:3e:ac:21:6e:72:b1:ca:ba:1b:2c:7b:dc:90:
                    18:c2:68:b6:c8:64:fd:3b:92:ce:bd:0c:71:c2:19:
                    34:14:d3:85:64:d4:33:e8:1c:80:7c:2e:f5:d1:3b:
                    f3:fd:73:56:92:c8:44:21:43:46:9d:ed:e7:1f:53:
                    c1:70:69:31:ab:4d:58:5b:3f:54:2e:0a:64:fd:1c:
                    54:20:50:1a:50:b5:18:e9:61:9e:01:b1:a3:b2:8e:
                    b8:7a:e8:bb:bf:9b:61:86:86:ce:09:06:2f:8d:e8:
                    1a:c4:d0:28:65:21:c0:e8:ad:54:69:62:6e:2c:ce:
                    fd:28:43:71:c1:a7:f7:a3:4c:aa:e7:a5:fd:70:bc:
                    94:0e:63:fb:11:53:1b:f3:66:e1:5c:7a:62:30:dc:
                    c6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7D:53:75:B8:F9:CF:9D:A2:EF:AD:13:72:03:32:D7:3A:54:AE:0D
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/an1Tdbj5z52i760TcgMy1zpUrg0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.238.0/24
                  45.150.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:59:87:b3:7f:85:55:02:3a:bb:51:e8:18:08:b8:90:40:66:
         86:fa:c5:e1:96:7b:01:19:65:eb:a1:af:15:97:f6:96:bc:be:
         44:ab:df:a1:f5:9a:82:3a:79:70:b7:27:bb:0f:20:38:04:be:
         a2:44:4d:8e:ef:4a:34:17:ed:fa:c2:64:1b:e7:f2:1c:e4:9c:
         23:2d:69:39:ac:07:5d:a1:1b:65:9a:a3:39:7e:8a:a1:9c:ca:
         4b:92:96:81:ee:c4:69:68:22:b2:6c:61:62:1b:cb:b1:83:31:
         9f:9a:78:02:47:c1:c2:20:88:0e:95:be:73:47:5e:72:81:84:
         38:65:6c:2a:7c:0d:e3:f7:8f:2e:ad:0e:f0:b8:f5:2e:eb:b0:
         85:49:55:88:17:92:b5:9d:87:b6:51:c3:b4:7d:05:73:f6:6a:
         e9:af:16:23:9f:1f:47:76:2a:25:9b:09:52:54:09:96:a9:d1:
         d0:71:81:20:3d:00:bc:bc:b8:1e:a6:22:c2:4f:e2:83:d1:0a:
         3c:c6:3a:d3:17:85:11:b2:26:fc:2f:e9:63:17:41:98:8e:5e:
         db:cd:b0:98:97:a1:88:56:39:b9:5d:28:79:90:9f:22:95:8f:
         f2:62:5c:f7:37:74:b9:d6:df:e2:40:6a:21:6a:32:e9:6d:fb:
         69:24:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:30 2026 by rpki-client