This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/V6V_NlUP57LahAmPSdJLWOxrfrk.roa
File:                     V6V_NlUP57LahAmPSdJLWOxrfrk.roa (raw, json)
Hash identifier:          PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=
Subject key identifier:   57:A5:7F:36:55:0F:E7:B2:DA:84:09:8F:49:D2:4B:58:EC:6B:7E:B9
Certificate issuer:       /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial:       019B78A339DA2DB9FC1CD2F1FA56F162F529
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/V6V_NlUP57LahAmPSdJLWOxrfrk.roa
Signing time:             Thu 01 Jan 2026 08:18:41 +0000
ROA not before:           Thu 01 Jan 2026 08:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134351
IP address blocks:        45.147.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:39:da:2d:b9:fc:1c:d2:f1:fa:56:f1:62:f5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
        Validity
            Not Before: Jan  1 08:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57a57f36550fe7b2da84098f49d24b58ec6b7eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:7d:e3:d0:f5:03:05:dc:21:ab:1f:10:8e:
                    fb:ce:66:41:b9:df:83:f7:c0:88:90:f3:e0:df:77:
                    82:48:d3:e6:d4:fb:92:bb:2c:71:71:20:41:c0:17:
                    b2:96:c2:78:0a:5f:f6:01:64:92:e2:b3:71:9a:35:
                    a5:e1:f9:83:11:4e:d3:15:63:67:c7:f7:86:1c:a8:
                    c6:81:ac:5f:86:f3:87:ec:3e:b3:be:c6:63:72:59:
                    44:ec:1d:c8:91:89:52:73:d4:67:1b:31:89:f2:05:
                    92:a5:77:ed:50:b6:ba:c9:59:b5:0d:10:2a:be:e4:
                    f7:be:8b:d1:a1:c6:f9:5f:9d:8f:0e:69:19:49:f1:
                    26:dc:1b:85:7a:4f:26:c0:8d:07:2c:af:af:56:36:
                    fe:b1:e4:90:8d:d0:44:21:64:1a:38:86:0c:cd:46:
                    37:2d:ae:89:b0:dc:aa:80:dc:83:f0:42:9f:3a:ca:
                    31:ab:63:dc:ab:e7:ba:f7:f6:ca:cb:d7:83:bf:f8:
                    d7:53:83:66:7c:a2:d3:6a:a7:eb:9c:42:97:ae:fb:
                    8c:4e:2f:ea:0e:8c:70:14:19:fe:c0:26:7c:16:92:
                    8a:9a:0e:c2:56:26:fd:dc:c9:2d:4a:05:1c:af:83:
                    c0:ec:71:2b:72:75:98:f4:76:5e:65:48:b4:2f:8a:
                    e8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A5:7F:36:55:0F:E7:B2:DA:84:09:8F:49:D2:4B:58:EC:6B:7E:B9
            X509v3 Authority Key Identifier:
                keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/V6V_NlUP57LahAmPSdJLWOxrfrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:9f:8f:fa:3a:a8:1c:c3:fe:38:88:d1:c0:26:f7:2a:e8:
         0e:a1:63:55:d3:32:13:40:f3:51:d8:e6:92:bd:e3:af:53:9b:
         c8:0b:e5:d7:c7:36:19:ca:ad:21:5c:b6:77:e4:38:22:a5:c1:
         84:43:5f:51:97:09:52:79:b7:d6:29:cf:da:2d:8c:d1:08:5d:
         c0:6e:17:2a:88:e8:ed:08:28:fe:d1:34:22:2c:88:10:3c:d6:
         53:c4:61:fe:d0:af:ca:2c:75:71:dd:50:70:9a:9d:cb:3c:da:
         67:75:54:02:81:f4:28:5b:f9:9a:de:4b:9a:4f:d6:60:b5:e0:
         d1:ec:0e:1c:e5:d4:e9:af:08:30:d9:3f:6d:34:2b:bc:f3:85:
         b8:90:1e:88:07:c7:5c:24:05:fa:a1:98:42:1c:7c:67:a2:f5:
         68:f3:38:e4:f4:78:f9:02:94:a1:f2:50:13:35:e3:32:21:d7:
         80:d5:7d:2b:25:8e:75:11:a1:6b:e5:64:af:98:72:0f:bf:60:
         30:11:46:b6:99:14:9b:e1:d9:b9:4d:bb:28:65:52:bf:29:c0:
         eb:e6:85:b6:74:81:51:eb:30:d5:01:b2:15:59:af:3b:19:d2:
         80:4b:7c:bd:04:ad:f5:91:46:b1:50:19:26:35:99:09:6b:68:
         d7:33:ed:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:28:36 2026 by rpki-client