This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/itgrIp1NxpdNbAgMEeQKpbEmf5o.roa
File:                     itgrIp1NxpdNbAgMEeQKpbEmf5o.roa (raw, json)
Hash identifier:          Js4lM2igXS9YqpQe0RjS4UXqcJs8/ISJx7M/fH+77eg=
Subject key identifier:   8A:D8:2B:22:9D:4D:C6:97:4D:6C:08:0C:11:E4:0A:A5:B1:26:7F:9A
Certificate issuer:       /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial:       019BD6150B5B796E0270F3121857D624A178
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/itgrIp1NxpdNbAgMEeQKpbEmf5o.roa
Signing time:             Mon 19 Jan 2026 11:47:41 +0000
ROA not before:           Mon 19 Jan 2026 11:47:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211439
IP address blocks:        45.134.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:15:0b:5b:79:6e:02:70:f3:12:18:57:d6:24:a1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
        Validity
            Not Before: Jan 19 11:47:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ad82b229d4dc6974d6c080c11e40aa5b1267f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:2b:6d:dd:34:f9:53:7f:22:46:aa:23:02:
                    ca:3c:ea:75:46:3e:05:00:05:b4:8f:99:85:58:bd:
                    47:ff:c2:00:07:be:c6:35:b2:40:34:46:3b:1c:fb:
                    07:15:de:30:2b:71:0d:31:98:1f:aa:a1:e5:13:a6:
                    ad:93:9e:fe:24:51:01:51:23:e0:9d:64:96:c6:3f:
                    85:12:7f:95:b1:6b:91:e6:b6:0e:b0:b4:4b:4e:30:
                    57:c0:f1:86:aa:80:80:16:1c:5c:00:ab:a2:05:7a:
                    4d:16:bc:43:50:fc:50:84:da:3e:4f:ed:9b:32:f0:
                    3a:2b:7b:58:e0:2e:08:07:eb:bd:ec:21:1c:6c:27:
                    86:56:ec:63:93:94:a9:e2:7b:03:fe:49:47:a0:0d:
                    83:4c:35:6f:d1:42:0d:08:a8:bf:54:35:25:e3:1b:
                    6c:ac:fd:ef:6a:03:26:f1:7d:19:4b:3c:94:49:30:
                    fb:e5:13:25:be:a2:00:2b:3e:40:80:4d:de:6c:f5:
                    6e:1e:c6:9e:4f:c9:64:b2:d4:60:0c:70:8a:3f:7a:
                    2f:22:06:2f:49:99:1e:d3:89:c5:25:f6:68:38:08:
                    ba:3f:50:2d:1f:c9:88:49:23:bb:97:88:04:82:77:
                    18:c3:3e:4b:d7:63:ae:32:fd:42:f9:b4:e1:3c:74:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D8:2B:22:9D:4D:C6:97:4D:6C:08:0C:11:E4:0A:A5:B1:26:7F:9A
            X509v3 Authority Key Identifier:
                keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/itgrIp1NxpdNbAgMEeQKpbEmf5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:5a:08:23:50:fa:72:83:c7:bf:83:26:1e:71:ad:29:37:a3:
         f6:37:63:4d:6c:fc:c4:64:77:2f:18:0c:e3:5f:9b:bc:c3:b9:
         18:a6:93:74:05:1f:32:1e:c6:bd:f2:ba:a0:e5:71:27:40:5b:
         85:27:52:d1:11:46:4b:39:bb:71:94:1f:0d:10:ba:2b:8d:c7:
         60:3d:24:27:6f:ce:01:e8:a0:bc:c9:9e:7c:4a:8f:b8:08:b9:
         a7:53:a3:cb:6c:bd:31:1b:0c:f4:bf:ad:07:ce:5e:80:8c:fb:
         9c:2b:6f:bb:51:5d:5d:d2:2c:3b:6a:b0:25:b3:0d:74:3a:54:
         61:f0:27:4a:23:03:0c:11:bd:fb:01:97:21:f5:68:85:64:ad:
         cc:e5:31:89:66:fb:20:fe:bb:59:8c:77:7d:ab:a9:98:3b:2b:
         49:b4:2a:9a:27:55:d5:12:14:35:fe:06:31:fd:41:3f:17:f8:
         d3:a7:93:c7:38:0a:67:c2:58:57:b9:ab:91:4d:e8:b3:4a:1c:
         c5:ad:3a:0e:c7:ef:ce:f1:ee:e7:4e:3c:02:e9:8d:a7:89:56:
         ee:02:a7:50:84:8e:0e:fb:76:b1:0c:7e:a4:f8:08:2d:d4:9e:
         aa:bc:4e:50:40:70:0c:86:7a:aa:c9:55:ca:7f:bb:83:bd:e4:
         20:40:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:08:28 2026 by rpki-client