This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TZ5aouN4Ean6zc_NFzedVhZ3ZuI.roa
File:                     TZ5aouN4Ean6zc_NFzedVhZ3ZuI.roa (raw, json)
Hash identifier:          3wuouWiALLNImuD529kG9y1lRzJ0B4L4RXqnUZ3oW3Y=
Subject key identifier:   4D:9E:5A:A2:E3:78:11:A9:FA:CD:CF:CD:17:37:9D:56:16:77:66:E2
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019B7DCB375D60DDB0BEC554694D5C702917
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TZ5aouN4Ean6zc_NFzedVhZ3ZuI.roa
Signing time:             Fri 02 Jan 2026 08:20:28 +0000
ROA not before:           Fri 02 Jan 2026 08:20:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50338
IP address blocks:        151.243.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:37:5d:60:dd:b0:be:c5:54:69:4d:5c:70:29:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan  2 08:20:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d9e5aa2e37811a9facdcfcd17379d56167766e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:a1:dd:02:81:28:7f:2d:13:73:4a:5d:ee:
                    f3:88:2e:35:72:e8:3d:72:5f:60:b3:78:a4:43:3e:
                    98:a1:c8:00:28:43:e9:d5:16:3a:d8:99:22:10:5d:
                    82:86:e8:88:0a:d0:59:d7:2b:31:bc:f6:b2:ae:7b:
                    4b:a2:78:5a:d2:b4:b5:46:42:62:98:92:df:1a:27:
                    61:c9:bf:b3:93:f9:c4:6c:a9:01:51:98:c5:a7:16:
                    2f:ec:7a:c8:b9:c1:4d:74:85:84:de:b6:71:17:54:
                    07:b7:11:67:40:45:59:04:14:c5:f8:17:0a:47:20:
                    ca:c5:2b:3d:b8:76:94:82:54:69:dc:83:6f:f6:22:
                    e8:49:d0:ad:6f:58:7d:f6:35:4b:d4:89:1e:f6:3b:
                    e1:fb:94:cc:c4:cb:8f:27:64:66:81:b9:96:c2:8c:
                    9a:c0:38:3f:1b:36:51:8e:55:fc:b9:75:3d:a8:37:
                    b4:4e:fb:15:7b:d0:52:c2:b3:04:f9:41:81:5c:f3:
                    13:bf:4e:0e:fb:c0:b4:6e:31:46:86:b3:6b:b0:61:
                    23:32:c7:d6:dd:35:4e:e0:3a:80:f3:23:5e:f7:55:
                    59:2b:f8:37:67:1d:07:67:b1:4e:40:57:34:cf:b6:
                    ad:c8:f1:c2:b3:67:51:43:35:b4:38:2c:ed:25:5f:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9E:5A:A2:E3:78:11:A9:FA:CD:CF:CD:17:37:9D:56:16:77:66:E2
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TZ5aouN4Ean6zc_NFzedVhZ3ZuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.243.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:4c:ed:33:ee:1a:2b:78:cb:ca:ce:c2:c0:7a:41:22:45:b7:
         dd:bf:f1:3b:30:1d:52:43:a1:cb:26:a1:21:0d:d4:8b:95:23:
         ad:75:7d:e2:90:3e:bc:d2:b0:8d:76:e0:e5:45:f5:dc:e5:41:
         20:07:94:f9:6d:a3:b0:c4:0d:9d:82:fb:ef:c3:f6:39:6b:db:
         a8:b9:ed:95:58:a2:94:8b:05:5e:04:6c:44:e1:e0:de:3a:33:
         32:1f:5b:00:3c:2a:98:c2:3c:93:d7:fc:01:e6:a5:95:f8:2a:
         70:0b:6e:46:f9:17:31:6a:f4:41:3a:93:f3:b8:ab:42:65:52:
         82:94:42:39:6b:6f:de:c1:d3:68:a8:67:ad:9c:9c:38:33:20:
         40:10:55:55:41:c5:d0:d9:79:ff:6d:15:fb:4f:ab:ab:5b:a6:
         c9:e7:49:37:2d:f5:58:8b:f3:54:bb:fd:80:69:1f:d7:61:16:
         cb:8e:8c:4e:22:c8:47:11:07:24:10:4b:6f:a1:2d:65:f9:9d:
         8e:da:e9:0f:75:0d:ec:ea:26:6d:65:bb:f9:6a:8d:d7:1b:ec:
         58:42:77:8a:cb:c4:ea:57:7f:84:3e:4c:f2:fd:8d:7d:69:43:
         56:b7:e5:6f:16:05:99:92:e2:85:31:6f:7f:b5:95:32:40:e2:
         e7:c7:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:29:57 2026 by rpki-client