This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/HCc-JQq_ncyyMZgwbPkScWYwYoA.roa
File:                     HCc-JQq_ncyyMZgwbPkScWYwYoA.roa (raw, json)
Hash identifier:          tO96nEVj3QmKqJSTcBkgQB4nSdHREh8qiZML40xBMz0=
Subject key identifier:   1C:27:3E:25:0A:BF:9D:CC:B2:31:98:30:6C:F9:12:71:66:30:62:80
Certificate issuer:       /CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Certificate serial:       019B783469F938E0D84CE747349D3A9D6A25
Authority key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/HCc-JQq_ncyyMZgwbPkScWYwYoA.roa
Signing time:             Thu 01 Jan 2026 06:17:39 +0000
ROA not before:           Thu 01 Jan 2026 06:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215075
IP address blocks:        45.139.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:69:f9:38:e0:d8:4c:e7:47:34:9d:3a:9d:6a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
        Validity
            Not Before: Jan  1 06:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1c273e250abf9dccb23198306cf9127166306280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3e:91:d0:a6:5f:7f:9e:91:95:80:88:8e:e6:
                    46:9e:ab:3a:bd:98:60:66:e6:62:b6:68:02:84:2a:
                    00:36:bd:75:a2:9c:3b:ac:70:04:13:f2:c7:a8:5d:
                    51:4e:e8:ab:94:fa:e8:fd:81:6a:56:6c:db:2c:f1:
                    ab:9c:07:0f:3b:86:8e:b1:7b:7c:95:25:64:9d:28:
                    25:7e:20:70:77:01:d0:57:16:9e:4c:37:d9:42:77:
                    92:3d:ac:2b:99:54:df:b0:af:db:f6:46:88:e4:b1:
                    3f:6f:f2:9c:54:e7:6a:dd:41:7b:95:bb:4b:c4:ca:
                    a6:82:53:3d:0e:84:25:c8:6b:40:f5:7d:70:69:f2:
                    0e:b6:4e:0e:af:ad:f5:59:1b:ec:47:2d:a9:ac:a8:
                    d1:5a:34:82:fa:b7:6c:a9:71:eb:fb:7d:e6:ef:79:
                    e2:7f:98:d5:bd:65:6f:1e:ef:d3:08:19:6c:04:e7:
                    aa:e5:3f:2e:80:95:80:78:3a:cd:8e:85:e0:cf:f0:
                    25:34:a4:55:ea:ab:3e:f9:28:05:77:47:14:f7:0b:
                    fe:99:53:02:27:56:c2:39:e7:aa:46:43:8e:20:35:
                    db:a1:f2:29:78:0e:a9:30:bd:2f:22:b0:c8:ea:c0:
                    67:cf:cc:3a:f0:fb:cd:7e:6c:f2:99:24:8a:65:07:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:27:3E:25:0A:BF:9D:CC:B2:31:98:30:6C:F9:12:71:66:30:62:80
            X509v3 Authority Key Identifier:
                keyid:07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/HCc-JQq_ncyyMZgwbPkScWYwYoA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:0b:e1:8a:3a:ce:a8:61:78:89:07:29:26:cb:5d:e0:e0:fc:
         a5:cb:d9:44:e9:dd:e9:3e:ce:e8:00:36:25:5d:af:50:c3:70:
         ba:15:95:fb:1b:93:67:00:44:bf:92:b9:89:fa:ef:10:da:79:
         91:4f:ae:55:69:3f:a4:6b:94:c1:97:b8:cd:a0:c7:40:dd:87:
         54:6e:e7:fe:00:17:00:92:2e:8e:4d:74:32:7f:8e:0a:43:a5:
         c2:dc:f4:2e:87:e2:1b:8f:11:b3:66:d6:9c:f8:b5:c2:d9:6b:
         77:bf:eb:46:44:4f:2b:fa:11:31:d0:01:8c:0d:5a:25:b3:c8:
         03:09:22:13:4b:21:a7:a2:9c:0a:c3:ad:d7:4a:cb:11:25:57:
         c2:f9:d2:4f:1c:b5:6b:5b:9b:1f:f9:3e:b5:30:64:f3:ad:98:
         7a:71:ec:f0:12:bd:51:6d:fa:85:84:16:47:50:6c:b4:c7:7d:
         67:0e:29:a4:d5:da:94:03:e8:d7:57:d2:a2:91:6e:ef:69:66:
         73:a5:c6:1d:c8:4a:61:43:5a:31:2e:6b:84:1a:7e:af:a4:38:
         d5:68:d5:26:24:2d:52:cf:7a:72:fe:da:64:15:77:9b:26:22:
         da:c1:b4:69:8a:25:00:6b:09:a1:43:c7:ec:48:d7:52:42:cc:
         95:f4:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:21 2026 by rpki-client