This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/ABBwkEzotHssFvLAUqOqZl36BVo.roa
File:                     ABBwkEzotHssFvLAUqOqZl36BVo.roa (raw, json)
Hash identifier:          dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=
Subject key identifier:   00:10:70:90:4C:E8:B4:7B:2C:16:F2:C0:52:A3:AA:66:5D:FA:05:5A
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       019B7D5B7D1CDBBAC68FE042E98C1CF3B5EC
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/ABBwkEzotHssFvLAUqOqZl36BVo.roa
Signing time:             Fri 02 Jan 2026 06:18:26 +0000
ROA not before:           Fri 02 Jan 2026 06:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     40913
IP address blocks:        45.158.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:7d:1c:db:ba:c6:8f:e0:42:e9:8c:1c:f3:b5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Jan  2 06:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=001070904ce8b47b2c16f2c052a3aa665dfa055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:72:21:5e:84:dd:55:83:8f:6d:31:72:fc:
                    3c:e5:61:5f:4b:1a:1e:f2:a0:11:e7:24:d9:bd:92:
                    f6:08:fa:ec:01:c8:9e:15:d4:cf:b6:a0:8b:20:38:
                    34:50:c1:df:fb:ba:99:31:7f:11:e6:92:a4:d7:a1:
                    e4:19:dc:7d:65:b2:c1:bb:5a:21:fc:2e:3e:74:6c:
                    99:e0:10:a6:78:f9:dc:98:4b:ab:55:5d:88:b5:a6:
                    ae:9c:85:16:10:d8:74:bf:4b:9c:30:8d:27:19:77:
                    54:87:11:f7:cc:31:4d:16:0d:b9:3f:11:ad:39:19:
                    13:be:bf:47:55:68:26:bb:e0:7d:8c:70:a3:1b:ad:
                    22:be:f2:6e:0d:dd:91:5c:33:75:d4:22:a5:35:ff:
                    52:e9:62:04:bc:92:68:03:e4:e7:9c:0a:65:df:1a:
                    e2:40:b1:fc:db:f8:10:43:6f:1c:09:80:79:c1:f1:
                    38:a3:58:b7:30:fb:ad:2b:3e:f1:d5:3f:5b:b6:8d:
                    38:31:27:5b:7f:a3:ee:2d:32:a5:9b:e9:4b:9a:b4:
                    38:bc:0b:96:54:7c:83:ad:8c:42:4f:d4:70:70:15:
                    2d:8e:01:51:e7:40:a3:30:8d:e9:d4:1d:a6:c4:a3:
                    a2:01:b7:c1:d8:f8:c2:e1:a1:62:83:ef:a5:b9:69:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:10:70:90:4C:E8:B4:7B:2C:16:F2:C0:52:A3:AA:66:5D:FA:05:5A
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/ABBwkEzotHssFvLAUqOqZl36BVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c8:c6:a7:15:1c:44:3b:1a:83:0b:ea:8e:98:b0:af:4a:22:
         ca:26:c9:d9:45:0a:7c:a6:6f:32:32:4f:ec:f0:ae:d1:7c:16:
         d8:4a:29:04:42:79:e2:bb:cc:46:ad:76:c7:5a:1b:99:57:34:
         db:78:0c:81:f2:67:b4:3c:43:9d:10:6e:92:be:29:37:47:a8:
         e3:0f:d2:a6:2d:aa:57:01:77:a2:49:42:70:c4:f9:45:3b:94:
         fb:c4:4d:3e:6d:c6:2b:f1:72:7f:3c:6c:88:80:95:3f:a2:80:
         5a:9f:ae:1c:c5:8c:eb:a9:11:18:9b:36:a8:ba:35:54:e3:d1:
         73:56:59:1d:7a:2d:aa:c0:61:a5:96:09:e9:98:72:9e:7c:19:
         73:0e:a7:47:a8:c3:2e:d8:a0:b8:6d:a0:0d:8c:fc:33:45:16:
         53:52:37:76:19:e7:98:ad:28:9f:3e:a1:23:9e:82:4a:64:de:
         2e:ab:3d:3c:4d:30:3c:28:49:28:6b:d5:44:35:94:21:68:ad:
         4f:d2:29:99:14:bc:de:cb:14:05:0a:87:c3:2b:25:ed:47:ad:
         95:c4:be:d1:7c:27:92:81:56:b6:ae:7c:ba:11:37:45:64:5d:
         b9:d8:3c:92:c4:d0:30:1e:ef:20:53:9a:1b:5e:29:78:30:31:
         18:b2:6e:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W30c27rGj+BC6Ywc87XsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZmViOWFlMGZhODkyNzA0NWY4MzQyMzc0M2M0YTczYTI3
YTc0YTcwHhcNMjYwMTAyMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDEwNzA5MDRjZThiNDdiMmMxNmYyYzA1MmEzYWE2NjVkZmEwNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFNyIV6E3VWDj20xcvw85WFfSxoe
8qAR5yTZvZL2CPrsAcieFdTPtqCLIDg0UMHf+7qZMX8R5pKk16HkGdx9ZbLBu1oh
/C4+dGyZ4BCmePncmEurVV2ItaaunIUWENh0v0ucMI0nGXdUhxH3zDFNFg25PxGt
ORkTvr9HVWgmu+B9jHCjG60ivvJuDd2RXDN11CKlNf9S6WIEvJJoA+TnnApl3xri
QLH82/gQQ28cCYB5wfE4o1i3MPutKz7x1T9bto04MSdbf6PuLTKlm+lLmrQ4vAuW
VHyDrYxCT9RwcBUtjgFR50CjMI3p1B2mxKOiAbfB2PjC4aFig++luWkTTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAQcJBM6LR7LBbywFKjqmZd+gVaMB8GA1UdIwQY
MBaAFAf+ua4PqJJwRfg0I3Q8SnOienSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAt
ZGM3M2Y5ZDliZTI5LzEvQUJCd2tFem90SHNzRnZMQVVxT3FabDM2QlZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAtZGM3M2Y5ZDliZTI5
LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ6mMA0G
CSqGSIb3DQEBCwUAA4IBAQBvyManFRxEOxqDC+qOmLCvSiLKJsnZRQp8pm8yMk/s
8K7RfBbYSikEQnniu8xGrXbHWhuZVzTbeAyB8me0PEOdEG6Svik3R6jjD9KmLapX
AXeiSUJwxPlFO5T7xE0+bcYr8XJ/PGyIgJU/ooBan64cxYzrqREYmzaoujVU49Fz
Vlkdei2qwGGllgnpmHKefBlzDqdHqMMu2KC4baANjPwzRRZTUjd2GeeYrSifPqEj
noJKZN4uqz08TTA8KEkoa9VENZQhaK1P0imZFLzeyxQFCofDKyXtR62VxL7RfCeS
gVa2rny6ETdFZF252DySxNAwHu8gU5obXil4MDEYsm7+
-----END CERTIFICATE-----
Generated at Tue Jan 20 04:46:51 2026 by rpki-client