This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p2c_yEwfwdGla_ldN1gJ1tIQkms.roa
File:                     p2c_yEwfwdGla_ldN1gJ1tIQkms.roa (raw, json)
Hash identifier:          k7TcU7ev9sO2sAU2/lZr2lHJeAPUWZ3g85I7eKoeQLI=
Subject key identifier:   A7:67:3F:C8:4C:1F:C1:D1:A5:6B:F9:5D:37:58:09:D6:D2:10:92:6B
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019C093E6919F0EB768C2717A4EADFE7C1C6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p2c_yEwfwdGla_ldN1gJ1tIQkms.roa
Signing time:             Thu 29 Jan 2026 10:13:30 +0000
ROA not before:           Thu 29 Jan 2026 10:13:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208959
IP address blocks:        45.12.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:09:3e:69:19:f0:eb:76:8c:27:17:a4:ea:df:e7:c1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan 29 10:13:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a7673fc84c1fc1d1a56bf95d375809d6d210926b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b3:d4:e8:1d:2f:7a:0d:fe:85:69:05:d0:e3:
                    82:ad:90:21:ef:33:11:15:1b:70:a2:1e:90:1e:8c:
                    dc:fd:d9:bd:b5:66:d4:48:cc:37:fb:7b:8e:59:03:
                    03:f8:80:80:b0:36:75:ce:4d:b4:36:b9:df:15:b7:
                    d6:38:e5:c1:8e:f8:33:8f:61:92:89:a4:41:49:eb:
                    25:1c:64:f5:f2:7f:7d:93:34:27:bc:2e:72:5b:26:
                    d8:60:b7:b5:49:ac:68:53:7e:46:20:0d:a0:71:ec:
                    1c:28:7c:6d:c7:5b:f7:a8:4f:ec:09:77:8d:f9:bb:
                    59:c9:02:73:6f:2f:d5:0a:a1:92:b3:f2:73:5e:38:
                    0a:e7:6b:72:62:0a:16:f2:ae:54:ec:07:69:9f:b8:
                    ec:38:0b:e0:5e:1f:98:99:f8:74:a7:cf:f1:e3:38:
                    f1:64:d0:d6:9a:ec:2d:3b:84:5e:6b:7b:06:4f:d2:
                    3f:71:c8:7c:6c:d0:7a:3e:e5:42:14:8c:a9:ee:f8:
                    4c:56:c8:b3:f4:47:49:02:58:37:8c:f2:9a:a5:92:
                    1d:ed:b3:5f:2c:d0:46:6e:2f:7c:07:1a:6a:76:76:
                    52:ac:37:b2:e0:68:ae:5d:ce:a6:79:bc:de:ef:a0:
                    3c:8b:90:31:8a:02:c9:b6:48:a0:8f:ed:5a:86:27:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:67:3F:C8:4C:1F:C1:D1:A5:6B:F9:5D:37:58:09:D6:D2:10:92:6B
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p2c_yEwfwdGla_ldN1gJ1tIQkms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:f5:9c:4e:2e:7e:7c:ac:70:6b:27:6d:90:23:8e:62:c1:7c:
         2f:1d:ee:ed:f3:47:24:c8:14:93:fa:5c:11:c9:f9:75:a9:4c:
         d5:8d:eb:f7:50:cd:da:86:78:03:1f:86:cf:2f:03:e6:85:90:
         06:44:45:bd:b3:7c:39:4d:f2:f0:8a:01:26:97:73:dc:de:83:
         05:87:ff:cd:0f:97:41:b1:f1:1b:aa:fd:e0:4e:4e:ec:1f:15:
         92:46:eb:4d:82:9e:63:52:02:25:0f:08:6d:84:02:5b:86:12:
         40:3a:67:d5:2f:4c:6f:a6:3c:83:f7:66:39:b4:8e:9d:1b:35:
         5e:6d:75:53:07:ee:d1:1c:a6:01:8d:a2:75:1c:8b:71:3d:c4:
         9d:ff:ca:88:c6:0a:a6:7a:1d:1e:13:24:66:4d:de:6d:c2:2c:
         e1:64:45:39:69:8e:62:66:17:ed:16:23:61:d9:19:c3:75:0a:
         b8:9b:06:26:e1:3a:2e:0e:1f:2c:3b:4f:0e:0f:d1:1f:68:e1:
         3c:fb:44:6e:73:3a:ab:a6:a3:59:75:3c:b6:3c:40:e9:3e:96:
         77:47:f7:01:2e:2e:11:34:d4:63:38:61:b9:56:bb:8c:92:44:
         cb:8d:6d:50:81:7f:56:fa:ab:d2:69:c0:a8:49:37:91:a1:c3:
         cb:fe:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 19:34:29 2026 by rpki-client