This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m5HPl0UDxdheaq_yabID2tNu3_Y.roa
File:                     m5HPl0UDxdheaq_yabID2tNu3_Y.roa (raw, json)
Hash identifier:          DBgvSz+WzO4cUtQU/1S44LInTrS1p7MQpnpGq6l9LWU=
Subject key identifier:   9B:91:CF:97:45:03:C5:D8:5E:6A:AF:F2:69:B2:03:DA:D3:6E:DF:F6
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019B7DCBA86A5F3CE79C3927D3DEBFD144A5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m5HPl0UDxdheaq_yabID2tNu3_Y.roa
Signing time:             Fri 02 Jan 2026 08:20:57 +0000
ROA not before:           Fri 02 Jan 2026 08:20:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     273612
IP address blocks:        151.243.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:a8:6a:5f:3c:e7:9c:39:27:d3:de:bf:d1:44:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan  2 08:20:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b91cf974503c5d85e6aaff269b203dad36edff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:40:02:f1:d1:55:5c:00:49:74:a3:92:0f:
                    a8:97:f9:16:56:c0:d7:30:6e:ca:9a:2b:c7:c9:b3:
                    21:04:37:53:b3:1e:2e:51:cb:6f:97:2a:30:63:80:
                    1b:84:ab:b1:7d:9e:40:96:57:75:e8:4a:b8:ae:e9:
                    27:27:43:52:59:93:a6:f1:bc:96:c3:ad:6f:00:d6:
                    22:2d:b2:35:96:11:1f:d5:22:71:6e:bc:35:53:8b:
                    38:5f:9b:6b:dd:15:57:da:e4:72:a8:59:76:be:d0:
                    53:ec:40:32:d1:cc:fd:bc:2d:e4:52:40:bc:17:42:
                    47:2f:39:fb:bd:18:69:66:71:7a:6a:12:fa:fc:a1:
                    e4:0e:3c:a2:61:5a:c4:74:00:82:93:51:cf:aa:fb:
                    b9:a2:7b:5b:8a:07:8a:69:58:0a:90:96:0f:e8:c3:
                    a1:8e:78:9c:e1:06:d6:f8:1a:c6:24:c9:e9:50:a0:
                    d3:16:27:8d:05:35:46:b5:98:37:19:0b:40:78:d8:
                    94:6d:42:58:16:de:cf:41:20:88:4e:aa:90:6b:5a:
                    db:83:de:46:7c:a8:7f:b8:b9:4a:80:8d:83:2a:a5:
                    e5:a3:2b:cc:9c:21:78:25:cc:02:e3:57:5d:bb:c5:
                    2e:ca:13:0b:79:aa:56:bb:60:84:9f:4f:7e:f6:aa:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:91:CF:97:45:03:C5:D8:5E:6A:AF:F2:69:B2:03:DA:D3:6E:DF:F6
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m5HPl0UDxdheaq_yabID2tNu3_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.243.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c4:5a:c5:41:af:0e:09:5a:46:d0:12:31:e5:88:72:c3:8c:
         08:74:3d:55:8d:eb:57:f2:b7:34:c4:1d:ee:8b:96:ee:e3:59:
         98:0a:d7:53:ed:33:21:56:5c:38:27:39:c3:48:1f:f3:ea:88:
         be:03:1f:90:57:a5:68:a7:46:03:ec:f2:42:95:e0:6d:ee:29:
         ab:59:4d:84:c2:96:28:b9:e9:5b:54:f3:ec:73:35:1d:30:b8:
         2a:6f:72:c0:3a:6f:10:76:a6:f6:79:91:37:20:1c:5e:f9:3d:
         41:b9:ab:4b:24:07:13:2f:ba:8e:48:d7:dc:5d:94:0c:e4:38:
         67:e2:0c:3d:59:2b:27:1a:03:47:60:ac:15:6c:d1:9b:83:d3:
         54:a3:c8:c7:38:e3:42:e5:8d:a8:e3:30:a6:fd:b9:2c:83:be:
         79:6c:ff:cd:4f:bf:c5:d2:a4:1c:33:bd:17:a1:16:6e:cd:3e:
         17:18:45:1c:e3:21:a5:10:49:ee:6c:15:f3:c3:f8:9d:a8:f6:
         3f:04:ef:ab:d2:c9:cf:3e:9a:58:bb:6a:15:de:30:3c:7a:da:
         0b:a0:84:31:c0:fa:8e:45:36:b4:02:ca:31:d4:4a:bb:17:8a:
         11:61:7b:45:09:60:a7:16:93:75:93:9f:d4:87:de:31:33:74:
         c6:60:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:30:32 2026 by rpki-client