This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/n8ve06NetjX3cW6GgX_HV5n6oks.roa
File:                     n8ve06NetjX3cW6GgX_HV5n6oks.roa (raw, json)
Hash identifier:          pimoPjnCHYZaHLokF/bqF6SVdAYfg1FaqRTM5gnZ2sY=
Subject key identifier:   9F:CB:DE:D3:A3:5E:B6:35:F7:71:6E:86:81:7F:C7:57:99:FA:A2:4B
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       019B7AC7C80166D013BCAD06D47080F3B483
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/n8ve06NetjX3cW6GgX_HV5n6oks.roa
Signing time:             Thu 01 Jan 2026 18:17:51 +0000
ROA not before:           Thu 01 Jan 2026 18:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9304
IP address blocks:        45.152.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:c8:01:66:d0:13:bc:ad:06:d4:70:80:f3:b4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Jan  1 18:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9fcbded3a35eb635f7716e86817fc75799faa24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:76:a9:a3:86:2d:24:ad:93:38:2e:61:a3:a6:
                    1b:49:61:9a:43:a1:11:24:89:ba:a5:55:ff:6d:3a:
                    8d:cd:61:3f:6a:f5:54:60:3f:90:cd:91:3e:0f:8e:
                    40:a3:63:31:89:c2:97:93:90:71:c6:9b:9f:f4:1f:
                    c6:07:dd:a8:62:dd:32:09:4f:82:ca:14:e2:34:a7:
                    1e:e5:28:65:2a:98:fc:5c:a7:96:fa:29:b6:b1:1e:
                    47:8b:6c:53:33:a0:22:46:35:fc:78:54:8b:3c:06:
                    77:04:9c:0f:04:b7:a9:ef:b3:c4:7a:07:dd:99:50:
                    d7:6d:ab:71:c2:5e:ab:f9:f8:f9:2c:d5:d3:d0:92:
                    91:6f:44:ba:7e:e6:aa:e4:7c:90:45:bc:03:48:ea:
                    6f:6b:cb:02:0b:0c:2c:63:17:a3:6a:7a:9d:88:5f:
                    be:c7:f1:34:10:cc:83:d2:8e:53:30:18:65:c7:de:
                    25:85:0c:bc:41:d0:c8:8b:2a:a9:4a:e4:88:0a:39:
                    dd:37:11:2c:bc:b3:da:00:5c:62:d3:97:06:df:ba:
                    93:11:2d:bf:35:67:ac:d2:34:62:9d:c7:a1:8e:d2:
                    79:1c:72:52:6e:db:8d:d9:4c:20:03:a9:d7:99:10:
                    3c:73:f0:50:21:61:66:8f:f1:49:4c:2b:1e:0e:88:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CB:DE:D3:A3:5E:B6:35:F7:71:6E:86:81:7F:C7:57:99:FA:A2:4B
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/n8ve06NetjX3cW6GgX_HV5n6oks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b0:c4:72:41:81:74:d1:9f:53:af:72:9e:26:52:91:46:72:
         c3:3e:c5:b5:07:ce:ee:6f:d9:c2:20:a2:ac:6b:42:aa:92:cd:
         f5:83:5b:3c:1d:91:12:a1:4d:35:6f:04:fe:0f:e0:99:9a:54:
         71:7f:52:91:d1:cd:65:7e:38:41:b9:2c:fb:13:67:95:d9:1e:
         44:46:ba:2e:c9:83:b0:a9:a1:e9:dc:0e:46:e5:ad:c2:da:9b:
         6a:df:b6:f9:5b:4f:19:14:cd:2a:4b:72:ef:86:1a:c2:d7:18:
         43:e4:8c:ca:4a:c4:fd:76:28:39:75:aa:10:89:96:fd:43:c3:
         44:73:b6:02:11:13:33:bf:8d:2d:49:c9:ba:98:ea:6b:3f:cb:
         03:1c:0c:c4:41:3f:75:14:a1:2c:c8:53:99:7e:76:02:6a:0e:
         ca:04:f3:18:a1:f7:1d:63:c6:cd:9e:5d:ff:e4:ea:12:06:b0:
         7c:51:3e:fb:ef:2e:fa:3f:21:59:fc:d0:7c:45:2b:a6:c0:22:
         6f:e8:7e:7e:86:0b:a6:88:ae:c1:ed:07:87:7a:3e:ee:8a:f2:
         25:5e:ec:27:5c:16:c3:f2:6c:79:59:db:c2:34:08:c3:28:03:
         82:2a:d5:99:ff:56:72:28:15:16:51:ba:0f:1a:81:a1:8a:7a:
         28:16:18:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:40 2026 by rpki-client