This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa
File:                     Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (raw, json)
Hash identifier:          /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=
Subject key identifier:   26:49:A0:CA:59:3E:6D:9D:E3:27:E0:8F:FC:1F:50:DE:D3:F9:59:92
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       019B77C6D90CF94C58F5C2521B9B4227B537
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa
Signing time:             Thu 01 Jan 2026 04:17:58 +0000
ROA not before:           Thu 01 Jan 2026 04:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35913
IP address blocks:        45.139.56.0/22 maxlen: 24
                          45.139.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:d9:0c:f9:4c:58:f5:c2:52:1b:9b:42:27:b5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Jan  1 04:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2649a0ca593e6d9de327e08ffc1f50ded3f95992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:70:07:10:81:9f:66:69:78:d4:5f:ea:2c:
                    8f:5d:3d:ec:24:9b:0d:0c:35:e8:ba:d4:c9:b3:fe:
                    4b:fe:09:54:d5:92:ac:52:3c:75:e4:31:48:5a:5f:
                    c3:c2:88:bf:04:46:b3:78:2b:e3:87:46:b2:10:6a:
                    d4:f5:7f:a7:e0:61:3a:55:20:b6:d7:32:69:02:62:
                    dd:00:7d:6a:44:f3:e3:a9:19:1a:1f:30:1c:96:34:
                    32:dd:c8:b0:fb:ba:11:f4:2d:d7:17:f3:7d:11:ed:
                    17:a7:8a:2c:1b:41:a8:a7:8d:fa:8c:cd:8e:2e:ee:
                    e4:37:a1:e0:c5:de:58:11:18:1b:ca:02:0b:c1:ad:
                    95:54:b2:ff:1b:d2:f6:5d:64:6a:f7:bd:e8:df:48:
                    19:1e:77:2c:05:5e:39:fb:c5:48:bd:71:11:18:43:
                    8f:af:56:1e:13:70:8a:9d:79:61:93:47:93:49:c8:
                    a4:42:a8:77:c9:42:68:d5:fc:8e:ce:0a:a9:d3:5e:
                    f7:16:83:26:76:28:d3:ed:2d:8e:e6:69:cd:b6:26:
                    db:46:20:db:11:c0:61:ae:b1:2d:e7:c9:6a:5f:b2:
                    ff:53:13:7f:38:7e:51:b7:09:7f:61:ba:e9:3e:48:
                    e1:d2:b7:c3:a6:00:48:b5:fc:e8:31:45:04:dd:92:
                    2c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:49:A0:CA:59:3E:6D:9D:E3:27:E0:8F:FC:1F:50:DE:D3:F9:59:92
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.56.0/22
                  45.139.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:36:d9:24:6d:72:d9:b1:86:6e:5a:b5:10:be:a8:79:d1:8b:
         1d:d0:47:d4:1e:53:53:98:85:bc:f7:02:ef:c3:8e:68:7a:ab:
         3e:14:82:b4:68:10:0b:3a:e4:a2:71:48:e4:62:82:4a:a0:e3:
         9b:1e:2a:11:9d:9c:12:ec:05:67:16:6a:ce:7b:92:f4:66:1a:
         69:60:fe:dd:6c:4e:97:27:92:1b:cc:56:c1:3c:21:d4:60:98:
         6e:35:a6:59:0a:3b:aa:81:a1:d7:b8:5a:2f:02:3d:e3:b6:c8:
         ed:26:e8:24:82:9c:7b:98:61:32:b2:0a:2d:22:19:38:13:01:
         91:14:92:4c:dc:23:ea:f3:5e:2e:f1:5f:a5:c5:c7:1d:eb:1b:
         01:20:68:f7:a1:fa:c3:71:04:da:31:fe:31:ff:4c:d1:61:ca:
         54:e2:5f:19:8c:20:75:2a:cb:f4:94:b6:5a:2c:a2:6a:f7:3a:
         a8:f5:94:dd:3a:2b:5e:1e:72:41:bc:fd:08:fb:21:dc:a1:fd:
         d4:00:b7:73:46:20:b4:fd:75:dd:c8:bf:9f:28:fe:61:8c:c8:
         ca:1f:e1:08:94:6d:6b:41:62:ba:54:95:d8:de:1b:5c:3f:64:
         23:e8:8f:f4:f7:20:cc:c6:86:ac:22:7f:d0:00:b9:25:54:9c:
         04:36:a1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:21:31 2026 by rpki-client