This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa
File:                     eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa (raw, json)
Hash identifier:          EZHtgyXuVhoKYg4ldCwReKSDjf4sa7sqciiJnV/pNsU=
Subject key identifier:   79:1D:3F:4F:BA:C9:89:23:B8:27:B0:B1:A4:AA:D6:1C:5C:71:A4:E7
Certificate issuer:       /CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
Certificate serial:       019B7D5C993AA1D79D6CA14C202320D8DE2A
Authority key identifier: B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa
Signing time:             Fri 02 Jan 2026 06:19:39 +0000
ROA not before:           Fri 02 Jan 2026 06:19:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208504
IP address blocks:        45.130.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Jan 2026 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:99:3a:a1:d7:9d:6c:a1:4c:20:23:20:d8:de:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b39c70f7ce3831b8f2cce89db14a27ddaa0e99c2
        Validity
            Not Before: Jan  2 06:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=791d3f4fbac98923b827b0b1a4aad61c5c71a4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:13:15:b9:4d:14:6b:ee:4b:1a:34:4a:55:
                    31:0f:9a:c8:ef:18:ac:28:d7:2e:e4:03:30:b1:f4:
                    fc:a1:80:28:f3:07:da:c4:b4:96:30:b5:db:e3:34:
                    96:d2:b4:da:65:d9:2e:9c:72:a0:8a:f7:3e:e5:68:
                    a8:a4:31:3c:32:75:d1:de:d7:60:92:74:cb:5a:95:
                    0f:d4:a9:2d:ff:bf:e1:f0:2c:5d:71:3b:81:57:f8:
                    b6:e9:58:6a:ff:17:e5:4d:2a:ca:16:14:21:59:b4:
                    8f:d5:40:ca:4f:cf:6b:8f:29:57:a4:a4:b3:bb:91:
                    bd:2f:82:34:51:16:5d:28:2c:5d:b7:46:7f:6c:6e:
                    1e:f0:7e:fc:63:e2:aa:6d:b4:83:73:5d:a5:fa:4b:
                    23:41:47:70:93:4a:3a:03:ef:ab:11:28:6c:ea:b7:
                    87:84:2b:32:14:86:44:3b:c6:08:7d:3c:64:aa:f9:
                    36:56:86:0c:9b:1a:cc:f1:51:de:0a:df:17:b6:a5:
                    24:da:7f:19:40:d2:39:9d:05:ff:49:23:da:20:8e:
                    a9:39:e7:ef:c5:99:25:1d:8d:12:75:2d:3a:8f:81:
                    c3:54:9f:b1:d7:b0:07:14:56:de:b1:d0:31:a6:83:
                    87:b0:67:31:aa:28:93:c5:73:3a:d1:d8:d0:a8:56:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1D:3F:4F:BA:C9:89:23:B8:27:B0:B1:A4:AA:D6:1C:5C:71:A4:E7
            X509v3 Authority Key Identifier:
                keyid:B3:9C:70:F7:CE:38:31:B8:F2:CC:E8:9D:B1:4A:27:DD:AA:0E:99:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5xw9844MbjyzOidsUon3aoOmcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/eR0_T7rJiSO4J7CxpKrWHFxxpOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e91813-927e-47a5-b702-de5378461fee/1/s5xw9844MbjyzOidsUon3aoOmcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:39:ef:d4:91:d9:28:1c:40:02:a6:80:e7:4c:86:89:12:bd:
         bc:b2:85:45:76:81:13:11:90:70:41:b0:08:49:7d:cf:54:8d:
         d1:2b:bc:94:23:26:8f:21:54:fe:27:f4:b7:b2:19:b3:d3:80:
         f3:ee:76:67:9a:ea:41:b0:68:d5:9a:fb:a5:9e:5c:03:f1:2b:
         e4:90:4a:c6:03:63:32:a9:0f:2d:78:a5:41:61:58:5e:56:99:
         60:e4:08:a9:f3:4b:f7:fc:20:7e:0f:b1:d9:b8:86:d7:69:5b:
         a9:24:10:19:a9:36:d6:f3:73:89:22:f0:00:fa:0c:ee:07:3c:
         08:fb:5a:53:25:75:42:69:21:ec:a1:8d:5a:41:6e:0e:e1:34:
         b0:f1:85:1a:0e:1c:70:58:ab:16:1f:38:a3:70:53:37:21:0f:
         8e:f5:a6:12:d0:a9:e3:12:c1:8b:ce:ed:52:0b:b3:06:0f:0e:
         27:54:5b:e8:af:10:50:0a:28:30:fc:2a:52:54:00:3f:4c:ad:
         e5:4b:c6:10:84:a3:8e:be:01:a2:9b:cd:2d:a4:13:cf:4a:87:
         a5:a7:89:5c:4d:c4:22:0f:b2:28:50:6e:68:e6:5a:d3:ee:53:
         84:b1:d3:09:05:e2:9c:4c:9e:0e:e6:4f:78:86:20:a0:c6:e3:
         74:47:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 18:32:35 2026 by rpki-client