This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/r30a_HSpEMxu4ml0DY6HnohMS3c.roa
File:                     r30a_HSpEMxu4ml0DY6HnohMS3c.roa (raw, json)
Hash identifier:          5aekVe+t3S9A1hcR3BgA46v7PVY1wUswoYPrIwPg0Ag=
Subject key identifier:   AF:7D:1A:FC:74:A9:10:CC:6E:E2:69:74:0D:8E:87:9E:88:4C:4B:77
Certificate issuer:       /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial:       019B79ED202EB4396C0592F0985C414021C2
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/r30a_HSpEMxu4ml0DY6HnohMS3c.roa
Signing time:             Thu 01 Jan 2026 14:19:01 +0000
ROA not before:           Thu 01 Jan 2026 14:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48873
IP address blocks:        45.142.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:20:2e:b4:39:6c:05:92:f0:98:5c:41:40:21:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
        Validity
            Not Before: Jan  1 14:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=af7d1afc74a910cc6ee269740d8e879e884c4b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4e:b9:ee:45:45:e3:96:84:3f:43:b7:5e:27:
                    ee:0a:7a:fd:d5:a9:05:6f:5a:70:8b:36:aa:2a:1e:
                    81:ed:7d:16:81:92:63:fd:81:3c:6f:1e:d9:f3:8a:
                    48:f4:7d:90:25:e9:34:1d:12:67:3a:91:e7:da:a2:
                    48:24:e8:ae:14:9a:4e:a9:c2:36:7a:46:a0:ee:70:
                    67:99:3c:c9:e2:9b:93:7c:3e:ee:cd:c5:ed:47:9b:
                    34:5c:8f:4b:f8:83:a0:79:33:89:87:f0:21:1a:b6:
                    38:84:f8:de:65:0b:22:a1:1e:87:54:00:e1:94:5e:
                    01:c7:c5:89:fa:5d:24:ef:71:80:89:8b:8d:be:ed:
                    4b:44:c2:b7:d7:2f:c5:f7:77:07:c7:b7:f6:6e:63:
                    d1:99:39:25:f3:de:62:29:af:1f:39:39:d5:4b:6d:
                    27:e5:7e:06:c0:c9:9a:83:d3:1f:53:1c:2d:90:b6:
                    04:dd:e6:60:f9:5a:38:11:99:4a:ef:39:c2:ff:a2:
                    5f:60:e2:82:cb:54:e2:e6:f2:38:4d:ee:fa:cb:e6:
                    58:d2:e9:59:ca:d3:5f:36:0a:23:38:d5:f9:82:a7:
                    5b:21:9a:35:fd:d1:5b:a1:f1:f4:9a:41:b9:36:be:
                    7c:0c:91:b3:37:95:68:e3:a5:b1:94:6c:50:aa:16:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:1A:FC:74:A9:10:CC:6E:E2:69:74:0D:8E:87:9E:88:4C:4B:77
            X509v3 Authority Key Identifier:
                keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/r30a_HSpEMxu4ml0DY6HnohMS3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:ae:8c:68:7b:31:79:01:11:1e:24:0e:7e:a2:a4:63:c3:
         9f:8a:2f:0c:1e:55:63:fd:76:37:eb:82:bb:09:40:18:71:b5:
         cf:70:97:a5:da:9d:ee:5c:58:4e:9e:00:9e:b5:23:86:0b:19:
         2d:7a:33:cf:25:b4:63:e6:a0:77:35:4f:11:87:0f:b8:b2:4c:
         f3:6c:8a:82:0c:d2:e1:c4:f7:52:6d:20:a6:50:6b:87:3f:e9:
         92:c7:8f:a6:62:2b:a2:32:a0:0f:cf:3d:45:e4:17:dd:c6:6d:
         86:a4:0f:8c:f2:db:86:91:62:25:00:c1:cc:67:6a:13:b6:7a:
         28:3e:8d:fb:31:73:2c:86:8f:39:bc:db:26:04:12:f0:f3:6c:
         14:32:b8:33:37:40:fd:c9:35:c9:70:5c:ed:ca:67:a0:cc:96:
         5e:8c:d8:7f:11:b2:b6:f6:b3:2e:67:24:d6:04:c3:b5:09:93:
         e1:0d:81:1f:cd:88:1e:de:f4:9a:aa:9c:e0:60:15:ad:b9:b9:
         f2:c0:0d:2f:7c:1c:a1:b6:a4:6c:8f:80:87:20:15:0c:bb:12:
         e1:0d:62:ac:7e:fe:e4:e8:d2:7c:35:c4:d9:8d:5e:c7:8d:dd:
         0b:de:b9:52:d8:05:02:22:fe:e5:7b:a1:ec:dc:6d:3b:e0:31:
         4f:48:bb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:01:58 2026 by rpki-client