This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa
File:                     4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa (raw, json)
Hash identifier:          SihbXUlI6CJuGEx9+oO0M0CfndPW0YeuEcTHzRftuKM=
Subject key identifier:   E2:86:A0:3E:02:46:EF:89:FA:1D:70:7F:F1:9C:44:1B:46:7E:CD:04
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       019B7D5C98343CA1CB4BE6194B669926BC6E
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa
Signing time:             Fri 02 Jan 2026 06:19:38 +0000
ROA not before:           Fri 02 Jan 2026 06:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        45.130.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:98:34:3c:a1:cb:4b:e6:19:4b:66:99:26:bc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Jan  2 06:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e286a03e0246ef89fa1d707ff19c441b467ecd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:3e:2d:c7:8d:f8:63:a7:da:7e:72:78:d5:
                    08:47:7e:e8:ae:42:68:65:86:f5:e8:64:6f:ff:15:
                    bf:54:bd:02:47:82:df:a0:a8:b4:4d:20:7d:66:4d:
                    78:e4:a7:2e:a9:6e:8e:29:5b:c6:ea:ed:c9:07:be:
                    bf:c2:2d:20:b8:5d:46:c0:50:43:f4:17:ea:61:5f:
                    a0:c9:37:01:55:2a:ee:3b:e2:3b:3e:62:7c:d1:6b:
                    15:1d:26:11:00:bc:23:9a:b2:5f:39:00:05:51:82:
                    78:c0:1c:60:78:57:ca:5f:c7:10:93:62:f4:19:86:
                    77:66:a5:88:00:88:27:96:ac:5f:05:90:20:d5:60:
                    e2:2e:03:68:fa:5c:a9:2f:9a:91:0d:fd:72:ca:cd:
                    79:75:75:2d:f4:4b:60:f5:7e:f6:e6:43:07:d4:6f:
                    f2:c9:23:2e:f5:7e:db:53:5f:87:cd:ee:bb:69:73:
                    22:f3:c7:46:68:d6:9a:65:10:d9:80:26:0b:24:0e:
                    4c:0f:35:c8:81:57:9c:52:02:52:5d:c4:8c:a1:69:
                    e7:19:b9:cf:7d:f2:f7:28:b0:dd:8e:b0:71:6c:49:
                    62:64:84:6d:66:b0:45:48:54:95:36:56:6d:59:c7:
                    ad:1c:4a:c7:bb:a7:ad:72:3d:4d:c0:28:3b:a2:c6:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:86:A0:3E:02:46:EF:89:FA:1D:70:7F:F1:9C:44:1B:46:7E:CD:04
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/4oagPgJG74n6HXB_8ZxEG0Z-zQQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:59:12:a0:1c:0b:23:c7:73:d1:c5:24:ef:84:36:c6:85:d5:
         5b:5d:ae:91:4a:7a:45:38:9f:2f:93:7a:6e:14:ff:49:a8:c7:
         3f:2c:cf:bd:33:72:a6:52:e3:ee:f4:4b:7c:83:d9:1a:9b:83:
         fb:9c:2e:62:c6:48:31:95:7e:2c:17:a3:3f:61:a2:ce:24:70:
         56:3a:a5:8d:a7:15:e7:0a:a3:d7:db:41:b5:a7:af:f1:84:4f:
         b5:a4:9a:e3:8b:aa:a2:fd:44:85:89:a9:f1:76:3f:69:b2:f0:
         89:2e:ad:3d:6b:c1:28:32:cb:6a:04:b3:1e:d6:27:b2:48:ee:
         59:e4:6c:47:f0:29:ad:c9:45:ff:8c:5e:74:bf:d4:90:63:b3:
         bb:bd:0a:04:34:26:95:08:55:39:78:0a:0b:a5:c7:38:38:b4:
         65:bd:06:5d:88:a5:53:e0:86:43:9a:42:c8:f0:24:f2:7d:7d:
         75:62:46:d5:a0:a5:96:50:51:a1:21:bd:1e:0b:98:b3:c0:bd:
         e7:a0:6a:81:f5:38:24:78:47:1c:1c:5d:2e:3b:cb:06:ab:3e:
         1a:40:ed:39:ca:da:79:e7:24:a0:70:a6:be:10:d8:05:36:9b:
         08:f5:98:4f:99:5e:a2:d9:08:0a:9a:eb:ec:bf:1a:6e:dd:70:
         ab:c1:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:59:29 2026 by rpki-client