This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8JHe7AaBIPNauRvBmwgzSlc2Olk.roa
File:                     8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (raw, json)
Hash identifier:          +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=
Subject key identifier:   F0:91:DE:EC:06:81:20:F3:5A:B9:1B:C1:9B:08:33:4A:57:36:3A:59
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       019B78347B57E865190D56F43497B77FB4A1
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8JHe7AaBIPNauRvBmwgzSlc2Olk.roa
Signing time:             Thu 01 Jan 2026 06:17:43 +0000
ROA not before:           Thu 01 Jan 2026 06:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6762
IP address blocks:        45.149.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:7b:57:e8:65:19:0d:56:f4:34:97:b7:7f:b4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Jan  1 06:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f091deec068120f35ab91bc19b08334a57363a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0b:69:f2:a9:f0:f7:fc:fa:d5:e6:35:15:ad:
                    c1:f2:e9:28:69:93:0d:85:65:e6:b9:2b:4c:89:71:
                    27:1c:55:15:9e:8b:8f:49:ab:69:03:a6:e6:1c:16:
                    1a:09:77:e7:16:36:dd:80:c9:e9:e6:73:f0:35:3e:
                    69:29:9a:0e:49:91:01:80:d9:8d:41:53:11:86:62:
                    fb:29:63:e1:d2:d2:3b:3e:e8:78:8a:d1:c7:6b:18:
                    60:c6:cf:ce:9d:6a:db:1f:4b:a0:a8:ff:36:67:5b:
                    21:68:ed:d6:cb:01:6f:d1:33:0f:33:3f:0f:7a:8e:
                    af:c7:e9:69:09:a8:0a:24:59:10:ec:03:85:00:82:
                    fc:9c:f1:6c:20:62:2d:05:dc:21:82:b6:f7:02:ee:
                    d1:c6:dd:d9:cc:f3:da:84:22:4d:c8:1f:73:4d:ac:
                    88:20:e2:62:b3:64:e5:b9:1c:33:6a:54:55:3d:7a:
                    ce:02:95:bc:78:5c:3d:a2:07:5b:c4:8b:90:7e:c1:
                    a6:4b:79:d6:6c:86:36:49:e8:d3:a6:4c:de:d0:fe:
                    de:ca:6e:e5:26:b9:5b:a8:74:73:90:9b:6b:a7:51:
                    71:2b:b8:eb:dc:25:ab:20:56:e2:3d:ca:21:52:24:
                    6d:7c:3a:4c:6c:e0:51:6b:42:70:39:9a:65:94:8c:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:91:DE:EC:06:81:20:F3:5A:B9:1B:C1:9B:08:33:4A:57:36:3A:59
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/8JHe7AaBIPNauRvBmwgzSlc2Olk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:72:f5:66:b2:aa:e4:40:1a:fd:41:93:08:80:fa:f0:aa:bd:
         bb:b5:8d:c9:b8:64:e2:f8:bb:76:0d:e2:49:1b:24:4c:83:83:
         93:46:29:df:aa:5c:94:28:0b:42:df:06:42:7a:28:39:94:19:
         15:8b:ab:7c:ed:67:3e:cb:4a:fe:92:0a:ea:ab:b6:ce:0e:16:
         93:72:31:11:92:16:be:13:fa:28:15:a1:bc:a1:9a:84:e7:ba:
         40:78:7f:2b:d1:e2:81:ff:7b:1d:81:3f:aa:54:7d:cd:81:57:
         b0:4c:b2:c5:0a:53:93:da:9d:e5:b4:08:ac:cb:13:43:18:5c:
         36:72:88:4f:33:da:31:ee:15:97:be:c0:09:f3:86:f9:ad:7d:
         51:51:9d:55:80:b1:4b:ef:0f:2e:d1:8d:bd:a9:50:33:fc:3c:
         b2:fd:c2:4b:f2:35:5b:bd:c9:a5:fc:e3:48:cc:61:3c:0a:aa:
         ab:1e:9e:e1:30:20:51:1f:b2:95:f5:02:c7:6a:fa:ba:63:82:
         5a:75:43:be:44:24:29:6f:85:aa:1b:b4:cc:e1:39:5a:4c:d2:
         81:ea:8c:52:5d:8f:14:77:22:95:b5:77:ec:4b:66:43:04:4f:
         0f:a5:9c:ca:33:9c:3f:12:0c:29:31:58:3b:fc:44:dd:bd:96:
         39:1f:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:33 2026 by rpki-client