This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/52vGIgF_J_Asx19FSu6STOs_QMg.roa
File:                     52vGIgF_J_Asx19FSu6STOs_QMg.roa (raw, json)
Hash identifier:          xY9pMIRGzl+uM1dvYOEuT8LCPUA3npSztO/OviUhhIM=
Subject key identifier:   E7:6B:C6:22:01:7F:27:F0:2C:C7:5F:45:4A:EE:92:4C:EB:3F:40:C8
Certificate issuer:       /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial:       019B7CED764CD7BED4C35957626913787568
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/52vGIgF_J_Asx19FSu6STOs_QMg.roa
Signing time:             Fri 02 Jan 2026 04:18:15 +0000
ROA not before:           Fri 02 Jan 2026 04:18:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39201
IP address blocks:        45.128.69.0/24 maxlen: 24
                          45.128.70.0/24 maxlen: 24
                          45.128.71.0/24 maxlen: 24
                          84.38.244.0/24 maxlen: 24
                          185.152.180.0/24 maxlen: 24
                          185.152.181.0/24 maxlen: 24
                          185.152.182.0/24 maxlen: 24
                          185.152.183.0/24 maxlen: 24
                          2a0b:e5c0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:76:4c:d7:be:d4:c3:59:57:62:69:13:78:75:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
        Validity
            Not Before: Jan  2 04:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e76bc622017f27f02cc75f454aee924ceb3f40c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:dd:18:8c:e8:27:fb:d1:d9:fa:f2:03:c8:
                    15:d3:69:f6:ff:20:25:46:a1:80:56:07:0f:fd:01:
                    b4:6a:82:1f:66:92:ed:47:21:97:d2:9c:6a:13:ab:
                    f7:de:3a:83:5a:7c:55:d6:72:bb:16:39:74:5a:07:
                    01:9e:8d:ce:6f:86:19:34:c6:65:2f:6e:8b:e8:75:
                    07:90:54:ec:a8:af:06:f2:27:61:8d:90:ec:50:cf:
                    80:bb:87:56:c4:05:53:5d:66:a2:00:20:4e:e3:d7:
                    b3:fe:54:f2:67:d1:34:be:ae:93:3b:de:d6:46:c2:
                    e5:7a:be:8f:6b:f8:05:e3:3a:79:61:1d:26:34:31:
                    88:78:ae:5f:8f:ef:a7:fa:04:00:76:b0:13:cc:49:
                    26:5e:57:7e:b6:6b:85:7c:4d:e0:fe:94:97:90:eb:
                    3a:7d:b5:c4:29:45:10:b2:5b:1a:d6:80:ad:53:e8:
                    e9:3c:e0:a8:ed:2d:9a:2b:e9:2e:36:08:37:9f:e4:
                    7b:6a:7e:8d:14:fa:50:71:35:a5:cb:47:c3:ec:e2:
                    c4:23:ce:29:0a:94:2d:76:1f:da:d4:81:17:7e:fc:
                    95:bc:5c:fa:97:be:27:b0:ad:83:0a:0e:04:4b:0e:
                    fc:75:6d:38:5c:83:ca:b0:17:8d:47:69:3d:5d:47:
                    ba:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6B:C6:22:01:7F:27:F0:2C:C7:5F:45:4A:EE:92:4C:EB:3F:40:C8
            X509v3 Authority Key Identifier:
                keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/52vGIgF_J_Asx19FSu6STOs_QMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.69.0-45.128.71.255
                  84.38.244.0/24
                  185.152.180.0/22
                IPv6:
                  2a0b:e5c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:32:79:a5:fb:84:6e:84:4d:fb:ef:99:7b:d2:40:97:6d:07:
         a3:c1:9c:9a:9c:5c:d9:57:24:04:a2:df:31:a7:ab:57:36:c7:
         8b:e2:b9:6a:9c:6e:7b:e3:ef:c4:88:cb:f2:2b:45:e0:98:4d:
         38:2a:16:22:54:e4:e4:9e:86:f0:c9:ed:ef:74:28:3a:eb:ac:
         e3:f8:d4:a1:2a:ea:5f:cc:0f:90:cd:1d:d9:e1:49:81:ca:8b:
         fd:d9:5b:4a:20:7a:c3:fa:01:99:85:69:39:31:1a:65:60:27:
         9a:2e:08:71:e9:f8:53:13:8d:c1:82:86:a5:86:44:ef:66:a4:
         19:b2:4b:44:07:68:b9:ea:b8:0f:fb:7c:66:be:2b:91:fb:6c:
         49:68:78:34:ee:44:8d:f4:24:c5:e6:cd:65:1a:6a:00:54:bf:
         41:62:38:c2:0d:65:a3:e4:d2:ec:04:b5:d8:6e:76:52:6d:73:
         ee:ad:21:85:f2:b1:b3:f6:90:92:ab:86:32:c5:05:b5:18:59:
         62:82:30:fe:c7:93:8e:fc:46:9e:c4:20:d3:c9:ff:53:1f:2e:
         68:95:9a:76:41:08:92:f8:06:b2:2d:5a:06:5c:a6:17:ac:08:
         89:9a:5e:0b:28:65:39:17:82:62:49:eb:93:62:b6:71:17:5e:
         db:c4:39:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:14:10 2026 by rpki-client