This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/4t9SG8r_UQN0bIbjGjmh-w7-zT4.roa
File:                     4t9SG8r_UQN0bIbjGjmh-w7-zT4.roa (raw, json)
Hash identifier:          nVIZnWls1sIIik8WAyGLvHsDtoBb4V67LyqEiuL3hhM=
Subject key identifier:   E2:DF:52:1B:CA:FF:51:03:74:6C:86:E3:1A:39:A1:FB:0E:FE:CD:3E
Certificate issuer:       /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial:       019B7F83CD97A2D12837697E44B4F8B414A0
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/4t9SG8r_UQN0bIbjGjmh-w7-zT4.roa
Signing time:             Fri 02 Jan 2026 16:21:42 +0000
ROA not before:           Fri 02 Jan 2026 16:21:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59514
IP address blocks:        45.10.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:cd:97:a2:d1:28:37:69:7e:44:b4:f8:b4:14:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
        Validity
            Not Before: Jan  2 16:21:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e2df521bcaff5103746c86e31a39a1fb0efecd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:3e:0f:f7:d2:09:e0:c1:49:ce:2f:32:fa:
                    f5:43:53:d5:a5:c7:54:09:88:b5:11:8c:b5:67:cf:
                    1a:e2:ee:33:bd:ed:02:09:66:77:6f:e8:f0:16:55:
                    91:67:4f:5c:ac:cf:4e:65:2d:0e:94:97:70:e0:ff:
                    78:f1:a4:e7:dd:d5:7a:95:f6:49:c0:31:50:be:62:
                    c4:9d:83:a9:4d:e3:9e:01:4f:34:57:05:9d:df:e6:
                    1c:2c:8e:03:a0:1c:88:7b:04:49:cf:fe:99:89:8c:
                    6b:64:1f:1f:86:65:bf:d6:61:f2:28:20:86:79:dc:
                    97:b7:96:24:60:98:56:a6:6f:e0:4b:ab:86:65:6c:
                    61:49:0d:6b:4f:01:52:4a:27:79:55:f4:90:12:0a:
                    9c:8e:66:02:f5:01:58:d3:f1:3e:24:2a:02:a7:3f:
                    4c:6a:49:49:57:86:7c:d4:83:86:d4:cc:f8:5f:ed:
                    4f:5b:76:24:b7:bf:15:61:5d:d2:73:d7:a9:da:95:
                    65:3e:be:2f:2d:3a:e7:d9:e3:a9:ec:77:23:36:7f:
                    95:ef:fa:3b:a2:8e:c7:ac:85:ce:2b:17:91:cd:95:
                    8c:11:a0:de:02:18:93:bf:53:3b:45:fc:7c:91:c0:
                    2d:01:c1:c1:c4:8e:09:66:4f:81:d9:88:92:ca:39:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DF:52:1B:CA:FF:51:03:74:6C:86:E3:1A:39:A1:FB:0E:FE:CD:3E
            X509v3 Authority Key Identifier:
                keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/4t9SG8r_UQN0bIbjGjmh-w7-zT4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b7:b8:8d:2c:90:86:45:22:1f:01:2e:80:11:d6:8a:7f:c5:
         01:bb:0f:ad:f9:2c:07:e7:90:a9:3a:38:ea:12:ba:f9:64:fe:
         99:e2:2d:2f:b1:1a:97:5b:2c:80:13:93:7b:b0:0e:99:41:f8:
         7a:7e:b7:6f:52:40:c4:92:a3:79:87:a6:66:20:af:45:73:2b:
         6c:0a:c8:fd:9c:4c:9e:34:a4:c3:c5:30:35:0c:54:83:55:ee:
         4d:7d:b9:1a:c0:8a:a9:dd:56:4a:3f:d5:9b:c8:98:62:0c:db:
         a9:b2:d1:dd:b7:2f:81:8e:4e:4e:51:24:97:be:92:2d:d1:3a:
         50:9c:f8:5a:be:97:8a:56:ab:58:16:2f:a8:be:0f:04:c2:54:
         25:69:6c:f1:bb:50:22:5b:5c:26:61:d5:c8:c7:49:14:f0:08:
         7c:d2:47:77:9e:cf:d8:a8:78:51:86:b5:d2:3c:d5:3e:32:cb:
         b6:6a:f4:52:40:7d:23:9a:eb:35:93:c5:2c:1a:e0:db:f9:1d:
         8c:e9:8d:b2:e6:33:e9:4f:81:b8:3a:cd:d4:0d:61:0a:c7:1c:
         9b:5b:3c:cd:d3:3d:4f:b1:7a:63:21:01:18:08:52:51:44:1d:
         c6:38:71:f1:e2:29:56:51:b0:88:82:06:2e:e0:33:2b:91:44:
         ea:ef:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:50:49 2026 by rpki-client