This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nEE0ppUjEHmZIr9DgMafJixJaFY.roa
File:                     nEE0ppUjEHmZIr9DgMafJixJaFY.roa (raw, json)
Hash identifier:          Rd8ka19RmUk5c6v5BAM4eok/A9f6IwgzBmV+G5a8Akg=
Subject key identifier:   9C:41:34:A6:95:23:10:79:99:22:BF:43:80:C6:9F:26:2C:49:68:56
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019B7DCB6AC128F6F874BFA006722F8A0180
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nEE0ppUjEHmZIr9DgMafJixJaFY.roa
Signing time:             Fri 02 Jan 2026 08:20:41 +0000
ROA not before:           Fri 02 Jan 2026 08:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205548
IP address blocks:        151.243.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:6a:c1:28:f6:f8:74:bf:a0:06:72:2f:8a:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Jan  2 08:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9c4134a6952310799922bf4380c69f262c496856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ff:6f:ef:3c:7c:2b:a9:05:4a:82:77:46:7a:
                    f8:9a:97:51:1a:1a:7b:2b:33:e3:da:35:67:a4:8c:
                    f4:1c:d7:39:e8:73:cc:8f:02:3d:3f:66:99:1b:fe:
                    9c:0c:42:af:35:76:16:25:f1:69:47:81:9e:9b:8e:
                    99:26:e7:f5:04:a2:82:0c:69:58:34:68:81:f2:64:
                    ab:34:8e:49:b9:9a:74:d4:c5:e0:22:27:6e:28:1b:
                    06:b7:96:b7:5b:4d:2e:11:f0:9f:46:f5:d8:6b:33:
                    6e:26:96:e1:ab:c7:bc:e6:9f:e6:c4:de:03:05:c3:
                    f3:5b:bb:76:1a:ae:af:88:99:11:3e:e3:23:a4:9d:
                    f1:fe:68:2b:fd:dd:54:2e:15:28:da:a4:e1:fa:29:
                    42:f2:f8:29:d9:9b:f8:4c:7e:25:38:33:87:39:05:
                    00:fd:9f:be:37:ac:a9:15:35:fe:2d:fc:0b:39:8a:
                    90:5a:ad:bb:3f:15:55:11:82:c1:f0:96:fe:9f:8a:
                    c0:28:ce:6d:17:f9:ed:0a:1d:d2:4e:42:cb:6b:36:
                    a8:ec:f5:96:5d:ee:8e:fe:a5:b5:3b:ed:bb:19:ea:
                    1b:92:42:a2:b5:db:e3:22:96:71:12:99:ba:95:b8:
                    92:f2:fa:19:e0:64:72:a1:8f:33:70:cc:d1:c4:79:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:41:34:A6:95:23:10:79:99:22:BF:43:80:C6:9F:26:2C:49:68:56
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nEE0ppUjEHmZIr9DgMafJixJaFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.243.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:db:7d:43:1a:9a:60:0b:9c:76:9e:d5:29:37:03:ed:65:ca:
         35:11:8d:b1:2a:9c:fd:bb:bd:49:55:d7:9c:c5:a0:4a:20:8e:
         fd:65:f5:cd:77:8d:60:83:de:57:63:9f:2d:0b:fc:9f:11:1e:
         8d:fa:c7:05:a8:1e:28:ea:9e:5c:a4:17:92:ef:23:69:37:7a:
         e3:84:37:63:ae:0f:69:91:36:94:2e:6f:93:eb:8c:f2:0c:3b:
         bd:bb:a9:b7:88:7c:ad:c9:c3:bd:78:28:73:e8:d7:e6:ac:47:
         8e:65:10:65:92:5e:d7:f2:11:d8:6d:c0:11:78:da:5f:bd:31:
         9a:d5:5c:d0:4d:a7:0d:17:81:24:b5:9f:e5:74:99:0c:e1:24:
         3e:9f:5d:c6:64:5e:7d:3d:ce:a1:ab:60:a7:d4:73:71:0a:c1:
         40:57:16:86:6d:49:a9:da:3d:92:6b:55:55:84:80:e9:87:ca:
         69:8b:65:77:32:65:29:fe:18:2a:fe:ae:be:5d:58:e3:e1:1f:
         96:6d:2d:d0:dc:d3:e8:39:4d:0a:83:36:01:6b:73:a4:91:bb:
         a4:cd:14:2c:00:b0:6f:b9:63:91:6f:58:c5:9d:4e:0c:fb:30:
         6a:7d:79:82:f2:57:80:bd:1d:a2:38:b0:07:e1:fa:d6:bb:25:
         f9:e2:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:28:46 2026 by rpki-client