This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/lOdlGRTCbIpEqR9qatoRPkmZsSo.roa
File:                     lOdlGRTCbIpEqR9qatoRPkmZsSo.roa (raw, json)
Hash identifier:          puduhtYoMCBO2MogdQIQ/qqMbhZcm/6N0DD1bqrK4NU=
Subject key identifier:   94:E7:65:19:14:C2:6C:8A:44:A9:1F:6A:6A:DA:11:3E:49:99:B1:2A
Certificate issuer:       /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial:       019B7C7F35571440DEF808B1A2D5DA89DC2F
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/lOdlGRTCbIpEqR9qatoRPkmZsSo.roa
Signing time:             Fri 02 Jan 2026 02:17:49 +0000
ROA not before:           Fri 02 Jan 2026 02:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        90.155.112.0/24 maxlen: 24
                          90.155.113.0/24 maxlen: 24
                          90.155.114.0/24 maxlen: 24
                          90.155.115.0/24 maxlen: 24
                          90.155.116.0/24 maxlen: 24
                          90.155.117.0/24 maxlen: 24
                          90.155.118.0/24 maxlen: 24
                          90.155.119.0/24 maxlen: 24
                          90.155.120.0/24 maxlen: 24
                          90.155.121.0/24 maxlen: 24
                          90.155.122.0/24 maxlen: 24
                          90.155.123.0/24 maxlen: 24
                          90.155.124.0/24 maxlen: 24
                          90.155.125.0/24 maxlen: 24
                          90.155.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:35:57:14:40:de:f8:08:b1:a2:d5:da:89:dc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
        Validity
            Not Before: Jan  2 02:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=94e7651914c26c8a44a91f6a6ada113e4999b12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e7:b7:16:75:5c:b0:0a:23:ef:ca:61:5c:af:
                    02:6e:42:a4:a8:49:a9:66:8b:72:2f:d0:a6:2a:67:
                    97:71:d4:0f:8c:99:e8:e8:4e:bb:f9:a9:f5:52:c8:
                    61:ba:14:05:41:a9:cb:27:12:51:93:73:42:a5:4e:
                    20:30:49:4f:41:3a:22:47:c0:19:28:a2:9b:da:41:
                    5f:68:5e:ed:f7:75:6f:e5:fc:62:19:41:22:73:34:
                    a3:1b:9e:2a:02:1c:9c:6a:fd:d2:17:f7:c8:b6:59:
                    9e:06:74:6a:98:f9:a1:ac:35:63:70:bf:fb:2e:ba:
                    30:23:66:ad:4b:2b:8a:09:5c:c8:89:ca:90:0a:17:
                    97:fa:ce:b7:54:1b:f4:23:4e:c6:d8:35:f4:bf:2e:
                    45:dd:af:5d:02:66:16:dd:96:90:4f:28:b9:14:a5:
                    a3:1c:18:3b:e0:4a:ef:57:fa:76:e0:28:38:62:4f:
                    27:36:02:80:81:de:b2:87:9c:c9:ad:e1:87:b9:f9:
                    f6:fd:59:7f:68:58:ac:eb:0d:82:a0:b5:13:00:b1:
                    77:a5:8e:95:5e:e8:2d:f5:ee:3d:92:0a:25:cf:96:
                    ff:97:70:58:72:dc:57:36:64:2f:78:6a:72:4f:14:
                    ba:84:37:d1:e1:d7:3a:6b:8a:24:0e:c1:92:96:78:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E7:65:19:14:C2:6C:8A:44:A9:1F:6A:6A:DA:11:3E:49:99:B1:2A
            X509v3 Authority Key Identifier:
                keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/lOdlGRTCbIpEqR9qatoRPkmZsSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  90.155.112.0-90.155.126.255

    Signature Algorithm: sha256WithRSAEncryption
         00:11:22:95:ed:6b:fb:d7:9f:72:fd:02:3b:a1:a8:50:17:eb:
         ab:94:de:6e:30:93:55:68:72:4f:e5:fa:fa:79:39:2c:b7:f3:
         a9:a3:ab:de:45:bd:a3:01:6a:1c:ed:8d:c3:71:c8:51:9a:9b:
         ac:10:77:62:66:b0:a1:0e:c1:98:ca:72:9c:79:3d:c1:6d:a0:
         12:32:89:f2:50:6c:20:71:14:ea:3e:e1:1a:48:89:14:3f:72:
         5a:67:4d:92:71:2b:d0:02:12:16:58:57:20:51:9b:61:98:23:
         a0:18:f2:df:a2:11:ee:e7:3e:96:22:16:ea:a8:c4:94:ae:a1:
         c9:6a:8a:58:d3:c3:f6:96:de:a1:06:15:ac:48:83:c4:77:66:
         3e:44:1b:66:d1:06:86:f8:9c:c9:a6:41:3d:12:a7:a8:be:2a:
         da:b0:71:09:4e:c4:b6:a8:2c:66:f3:a7:8d:ba:ad:21:eb:50:
         b4:af:9a:25:ce:b6:70:35:53:7b:56:13:81:9d:db:dc:64:c2:
         6f:b4:67:f6:70:fa:c6:90:75:66:05:c0:37:8f:c1:8d:f5:e7:
         e9:7a:49:a3:2b:5c:97:0d:08:e2:48:da:0b:19:c1:10:a8:89:
         83:68:b9:8b:cb:9c:a9:6b:1f:ea:85:b2:80:61:48:92:aa:68:
         74:19:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:20:55 2026 by rpki-client