This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa
File:                     4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (raw, json)
Hash identifier:          xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=
Subject key identifier:   E3:17:08:EB:E6:A3:C4:A9:8F:FD:48:38:20:C2:31:3E:F9:46:BF:7E
Certificate issuer:       /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial:       019B78348BBABD2015724960FE78A2F3A7F2
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa
Signing time:             Thu 01 Jan 2026 06:17:48 +0000
ROA not before:           Thu 01 Jan 2026 06:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44486
IP address blocks:        45.85.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:8b:ba:bd:20:15:72:49:60:fe:78:a2:f3:a7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
        Validity
            Not Before: Jan  1 06:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e31708ebe6a3c4a98ffd483820c2313ef946bf7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:0e:6f:6f:30:b2:6e:6c:45:80:62:58:33:
                    14:cf:20:3d:2e:e8:a3:22:0d:e2:2c:22:22:19:5e:
                    9b:46:5d:b9:5d:94:18:45:c0:31:e3:d1:0c:c4:0b:
                    43:00:a8:22:22:73:09:56:39:a8:d5:b8:fd:2d:8f:
                    36:4f:68:02:65:6c:22:24:e0:9b:73:1a:9d:ca:85:
                    67:51:29:27:a3:cf:2f:a9:ed:d6:7f:d1:1d:cb:15:
                    ef:3f:6e:92:1f:c5:e5:38:9a:f4:80:32:5c:e3:35:
                    cf:42:2f:e9:87:df:70:f0:65:75:f7:b4:1d:5c:b3:
                    a9:d8:55:67:00:7a:bb:8e:e7:6b:4c:0a:a2:e0:ea:
                    14:d7:df:10:2d:2d:e7:85:82:e9:87:c0:40:0b:e2:
                    e7:52:b5:e5:61:fa:92:0b:8d:7e:7d:75:55:b9:98:
                    bf:40:81:d0:76:9c:89:fa:e4:d6:9c:49:ba:2c:a1:
                    b4:c3:f4:1f:3d:f1:19:e4:1d:1d:7d:d1:b5:b7:5d:
                    20:c1:8c:98:16:bd:85:80:60:b5:ec:b0:34:11:bc:
                    7e:1d:7a:cb:00:c7:41:4e:af:07:44:36:66:74:45:
                    41:7c:ff:10:83:5c:de:74:91:52:7a:dc:ac:92:4a:
                    57:ee:d9:02:1a:a1:7a:72:a0:f4:da:4b:4c:d8:cc:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:17:08:EB:E6:A3:C4:A9:8F:FD:48:38:20:C2:31:3E:F9:46:BF:7E
            X509v3 Authority Key Identifier:
                keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:a1:22:42:7f:57:19:af:a5:62:51:55:44:1e:91:f9:7c:
         3b:13:af:c7:5f:e6:97:0a:55:62:f6:87:c7:94:d3:63:c8:ff:
         cf:2b:ba:e5:0b:65:cb:e9:f4:a0:71:b3:41:bb:d1:f1:90:e7:
         60:86:f9:ca:a9:af:04:fb:26:73:13:88:ce:fd:c1:06:9d:52:
         f2:ab:f4:55:3a:a2:14:f1:3c:50:d6:ea:99:5f:a8:ec:a2:2f:
         a2:3b:05:52:dd:63:30:02:a7:4b:16:59:d4:3d:72:c9:f0:3b:
         b7:2b:67:8a:e0:5a:3a:fa:2a:de:d4:9e:de:dd:cf:68:cb:24:
         58:f7:75:dd:bc:c8:c4:4f:f3:35:45:5c:3d:68:5b:37:9b:ce:
         aa:d9:31:ba:ac:3e:8a:e7:ac:be:f0:2d:b2:2f:3d:a1:77:f5:
         19:19:ac:9b:3c:7e:c4:78:ce:40:8f:16:af:d6:97:84:0b:3c:
         a6:0c:8e:8f:fc:84:a7:45:36:19:00:49:c9:60:be:45:c3:f7:
         b5:19:15:85:41:ac:c2:6b:6b:a8:58:09:75:c9:f8:fe:67:a6:
         c5:4e:55:69:b0:ac:46:e5:af:dc:44:72:7b:87:53:10:ff:7b:
         a7:8b:76:6f:cb:d9:89:3c:1b:98:c1:f5:dd:f8:25:5c:04:47:
         a9:4a:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:33:45 2026 by rpki-client