This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/agNWFJ6lYT9cYM9QENETvOLZPI0.roa
File:                     agNWFJ6lYT9cYM9QENETvOLZPI0.roa (raw, json)
Hash identifier:          F2addx2SByXtigLyYiMUDmpNtycaXyju8G/xXyoPRII=
Subject key identifier:   6A:03:56:14:9E:A5:61:3F:5C:60:CF:50:10:D1:13:BC:E2:D9:3C:8D
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       019B7D5B3B4408E4CF5828FB764EE2AF3FD6
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/agNWFJ6lYT9cYM9QENETvOLZPI0.roa
Signing time:             Fri 02 Jan 2026 06:18:09 +0000
ROA not before:           Fri 02 Jan 2026 06:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43641
IP address blocks:        45.81.149.0/24 maxlen: 24
                          185.202.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:3b:44:08:e4:cf:58:28:fb:76:4e:e2:af:3f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: Jan  2 06:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a0356149ea5613f5c60cf5010d113bce2d93c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:85:1b:b2:b8:73:42:11:5d:36:93:15:f0:
                    fe:35:d8:46:80:0f:e6:3a:ab:e4:15:0a:69:86:28:
                    1d:66:84:38:fd:bc:37:8f:fa:e2:94:c1:be:b9:05:
                    da:2c:77:55:68:fb:d7:75:a2:2c:7d:e7:0a:04:28:
                    0d:9d:97:6b:ab:7f:dc:27:ec:4c:48:f5:d2:06:86:
                    5c:78:46:5b:bc:bb:70:ea:ca:d2:d1:99:d6:03:61:
                    2e:34:bd:75:94:f8:01:6e:57:7b:24:e9:cc:d7:f4:
                    d4:af:06:3e:0c:f1:9d:81:a9:bb:da:dc:a7:9e:a6:
                    cb:d0:8c:e5:1b:d0:c2:ba:47:2c:4a:49:e2:52:29:
                    d3:54:5e:09:24:b5:33:41:8b:90:12:04:7c:94:ff:
                    7e:b8:68:7a:9d:c0:e6:73:05:c7:be:8a:39:81:33:
                    cb:94:18:c2:3b:08:bf:e4:32:f4:a4:bf:03:e9:99:
                    74:fd:a9:e6:cf:bd:a7:ac:da:b6:1f:84:3f:df:69:
                    5e:a9:46:98:4e:bd:53:b2:92:c0:c2:cb:94:fd:1a:
                    a8:a8:a3:70:99:e0:61:26:48:f3:b3:13:0c:42:7c:
                    fb:7c:3d:5a:66:30:b3:fc:e7:b3:3a:9b:25:30:7f:
                    47:67:44:1d:cb:3f:d9:a2:88:a3:f4:65:78:66:ab:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:56:14:9E:A5:61:3F:5C:60:CF:50:10:D1:13:BC:E2:D9:3C:8D
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/agNWFJ6lYT9cYM9QENETvOLZPI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.149.0/24
                  185.202.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:7c:b5:f6:e2:4b:d2:84:96:17:a3:ae:f3:f6:2a:87:1e:f7:
         af:dd:90:af:ab:2a:6b:9a:78:8a:a1:27:a7:2c:b2:a3:3e:07:
         f6:ad:b4:de:5c:33:81:5e:59:a4:87:39:18:e6:8a:dd:56:5c:
         ac:22:36:02:fc:2a:c4:43:d2:7d:a7:7f:c1:f5:cb:a9:8a:d9:
         81:64:a9:98:ab:d6:65:66:79:21:99:88:08:a7:2a:1e:af:3d:
         7e:4d:dc:d6:40:a9:64:6a:6d:95:94:2b:a4:85:5c:e4:79:45:
         c1:bc:ab:89:98:51:2f:22:e7:7c:a8:e2:11:d2:35:3f:1d:25:
         b6:3d:1a:32:1c:14:6f:d4:d7:a0:38:08:1b:eb:e8:db:f0:be:
         d7:b3:f0:5f:39:27:77:1d:96:d3:f6:92:a6:b9:38:f3:c5:8a:
         2b:a0:b8:be:c1:65:c8:3c:df:73:74:e7:e5:e0:3c:6c:e0:bf:
         c3:04:e3:f2:d2:5f:83:70:96:cc:9c:7f:f8:5e:85:b2:d2:79:
         30:61:2e:b9:a1:a5:81:35:fa:55:71:df:13:b4:0c:70:7c:52:
         0a:2a:8d:8b:1f:d5:21:d0:97:fa:1b:7c:1a:bd:1b:48:78:96:
         83:2e:5b:02:41:38:f2:be:03:3e:8e:9e:16:7a:f5:50:04:6b:
         74:61:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:44 2026 by rpki-client