This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/hvlodMoZ_EvenDx3VxmAU18Wnx8.roa
File:                     hvlodMoZ_EvenDx3VxmAU18Wnx8.roa (raw, json)
Hash identifier:          Oww/Qt/2oCWmnACYWiT153tGlPLNJWSbqBAMG9e8IQc=
Subject key identifier:   86:F9:68:74:CA:19:FC:4B:DE:9C:3C:77:57:19:80:53:5F:16:9F:1F
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019B7BA497AEA2339DA33474F912325117CB
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/hvlodMoZ_EvenDx3VxmAU18Wnx8.roa
Signing time:             Thu 01 Jan 2026 22:19:02 +0000
ROA not before:           Thu 01 Jan 2026 22:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55286
IP address blocks:        45.153.48.0/24 maxlen: 24
                          92.119.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:97:ae:a2:33:9d:a3:34:74:f9:12:32:51:17:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jan  1 22:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=86f96874ca19fc4bde9c3c77571980535f169f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b2:19:b0:01:e8:69:06:4a:8d:e3:16:d7:ea:
                    40:c1:81:2f:35:22:8d:30:d0:fa:0f:2d:22:d4:c1:
                    e4:07:c5:73:41:4e:96:c1:2b:7e:71:2c:c3:06:27:
                    d5:7d:71:29:cf:71:0c:d9:ab:c1:46:ec:8c:6e:e4:
                    37:e3:a4:67:ac:cd:53:7a:26:7f:dd:e5:ae:9a:5e:
                    9d:79:9f:7a:10:7c:e9:36:73:ab:3d:13:b2:c6:cf:
                    e8:ab:f9:a4:26:ba:f0:14:cf:f3:73:fb:61:2c:f6:
                    d2:fe:56:27:b7:eb:c6:56:80:23:aa:f7:bd:28:69:
                    0d:d5:2a:3d:d0:ba:46:ee:c0:ff:d1:1f:8f:a9:1c:
                    e2:d7:30:bf:93:49:db:6a:e1:16:62:19:e7:42:b2:
                    5e:7c:f0:d0:c4:3a:8b:f6:31:24:00:78:36:1c:2c:
                    5b:a2:dd:1a:27:e6:00:a4:15:71:0a:33:15:9c:7c:
                    32:c1:d2:56:88:8a:8c:4d:28:89:3b:3e:87:12:64:
                    c3:f3:98:6d:a2:32:97:1e:a3:61:7f:57:ba:3d:a7:
                    44:e0:f5:a8:18:d7:2e:33:bf:06:f4:a1:1e:ee:cc:
                    d7:b5:61:11:ec:a1:fa:9f:f9:ce:98:e9:9d:4f:77:
                    55:9b:53:b5:93:ff:ad:36:c5:7a:55:83:de:ba:16:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F9:68:74:CA:19:FC:4B:DE:9C:3C:77:57:19:80:53:5F:16:9F:1F
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/hvlodMoZ_EvenDx3VxmAU18Wnx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.48.0/24
                  92.119.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:dd:bb:5a:00:0a:6d:88:d7:2f:10:14:6d:c9:f7:cf:fc:
         88:46:18:44:3e:da:6e:f2:1a:88:62:11:6d:e4:b4:1f:41:a5:
         dc:1b:45:63:92:1b:f4:f7:f3:22:c8:a2:37:10:07:0e:41:54:
         ce:6a:98:fc:83:ae:93:8b:c2:3f:79:0e:f7:48:96:f9:6e:11:
         97:d5:82:cf:d0:90:ba:dc:59:64:d3:f3:a4:86:95:e8:7a:3a:
         7c:dc:b5:9d:e8:1e:1b:22:06:36:f1:14:b6:04:83:2d:28:70:
         aa:e3:00:ff:2d:a8:3d:de:96:23:49:8e:48:77:07:39:b1:56:
         d7:3e:ac:5c:f1:ab:06:d3:6a:09:44:92:8c:08:79:41:b1:bc:
         eb:8a:90:86:47:f7:54:c4:cf:3b:53:b7:04:ab:d5:0f:5d:e9:
         9a:27:8f:6f:7a:d2:aa:7d:c4:ca:16:f6:ea:b4:16:6a:2d:df:
         f8:bb:14:59:f1:1a:8a:3c:2c:d4:78:9a:12:42:ca:ab:4a:59:
         25:1f:b5:0c:26:e8:63:eb:f3:43:35:6e:9e:f1:5f:e1:4e:1d:
         57:18:da:6d:a2:89:be:e4:ab:a3:ba:cd:d4:d7:c2:e0:1d:4b:
         c0:80:cd:64:0d:a0:c4:66:67:a2:a1:54:98:ce:26:38:2d:fa:
         37:0d:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:39:55 2026 by rpki-client