This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/NJV8waBsLUaoGLKI4jOQ12y_154.roa
File:                     NJV8waBsLUaoGLKI4jOQ12y_154.roa (raw, json)
Hash identifier:          zy+s0FwJ70UvNcy6TEvBfYURXcENeGYoESLAOkXvxpY=
Subject key identifier:   34:95:7C:C1:A0:6C:2D:46:A8:18:B2:88:E2:33:90:D7:6C:BF:D7:9E
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019C229FE79617B102801257B6D2DEFA4552
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/NJV8waBsLUaoGLKI4jOQ12y_154.roa
Signing time:             Tue 03 Feb 2026 08:30:30 +0000
ROA not before:           Tue 03 Feb 2026 08:30:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3320
IP address blocks:        45.157.158.0/23 maxlen: 24
                          95.155.135.0/24 maxlen: 24
                          95.155.136.0/24 maxlen: 24
                          95.155.138.0/24 maxlen: 24
                          95.155.140.0/24 maxlen: 24
                          95.155.141.0/24 maxlen: 24
                          95.155.142.0/24 maxlen: 24
                          95.155.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 09:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:22:9f:e7:96:17:b1:02:80:12:57:b6:d2:de:fa:45:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Feb  3 08:30:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=34957cc1a06c2d46a818b288e23390d76cbfd79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:3e:1e:3d:19:ed:e7:a1:20:11:38:38:22:
                    9c:30:5f:30:a4:8d:44:e0:57:03:fa:c7:11:19:b1:
                    ab:a6:8f:70:fa:a9:cf:c1:17:17:ec:4f:97:e7:f3:
                    20:c5:d8:df:4f:48:3b:70:a5:aa:4f:fd:64:7e:6e:
                    e2:eb:8e:45:18:96:1a:fe:41:33:3b:a7:cc:9a:80:
                    c8:5a:55:ca:26:44:98:da:5a:e7:57:c6:ca:13:7c:
                    75:d4:b3:ef:6d:b8:dd:a2:03:cf:e4:41:b4:a3:23:
                    53:f1:7b:0f:14:bb:a7:fc:ac:53:44:98:78:1c:ff:
                    03:19:6d:27:67:a4:7c:c0:f1:31:8c:9b:8f:7c:8a:
                    63:2e:be:a4:70:00:aa:c7:1c:e5:bc:2d:e2:44:94:
                    6c:23:6d:20:8b:bf:03:9a:6a:b2:f1:20:16:e0:20:
                    d8:2f:14:8e:c7:1e:b8:5d:45:85:70:77:54:d8:75:
                    66:f6:25:ce:6b:f7:9e:f8:79:ef:ec:15:e7:55:af:
                    0c:9c:48:0d:9b:f3:cf:2d:5c:92:e0:93:59:27:67:
                    a3:00:52:2f:93:9f:b2:e2:b7:31:13:71:60:46:a0:
                    e8:c6:c7:40:58:50:67:dc:76:27:4d:db:12:0c:14:
                    e8:a6:ae:a4:f3:53:01:fb:a7:c9:b8:24:c9:6a:ab:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:95:7C:C1:A0:6C:2D:46:A8:18:B2:88:E2:33:90:D7:6C:BF:D7:9E
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/NJV8waBsLUaoGLKI4jOQ12y_154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.158.0/23
                  95.155.135.0-95.155.136.255
                  95.155.138.0/24
                  95.155.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:f7:fd:eb:85:66:6b:91:2a:59:df:85:69:7d:86:66:04:27:
         e4:86:0c:78:63:38:67:99:e8:bc:12:93:d0:12:a8:da:51:9d:
         a9:82:62:6e:fc:18:cf:cf:2d:1e:7a:9d:91:07:c7:b4:62:a1:
         f8:4d:69:98:52:96:a3:51:e3:c6:7c:ec:24:f3:36:24:b7:af:
         b3:2c:e1:60:f9:ee:d7:18:d4:cf:e4:dc:9c:08:cc:07:de:28:
         b5:42:4d:6b:37:01:29:7b:fb:1c:57:c7:4e:a1:dc:77:5a:b8:
         14:21:2a:2f:75:6e:ab:e8:6d:c7:18:b4:fc:6c:15:64:36:e7:
         65:c6:90:63:b6:5c:2d:8e:c2:16:55:67:a0:7b:35:2d:fb:6f:
         48:6b:94:be:2d:c5:9d:79:c6:07:ce:fb:f0:32:c4:e7:f1:ff:
         cb:9f:58:bb:6e:b7:42:76:d7:c2:35:21:7f:58:80:87:5f:2d:
         ea:b8:f9:6e:17:6d:52:07:50:f8:e1:02:60:29:b6:74:63:c2:
         dd:b1:73:b8:6f:c0:4b:02:63:9c:17:71:61:d2:88:b1:e1:75:
         15:15:43:2d:59:48:77:b0:0d:08:0e:4f:da:9e:e2:93:0e:a1:
         f4:a0:c3:e2:75:18:55:f8:1f:13:d3:3a:24:b6:58:c9:f7:9e:
         df:6a:67:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 16:28:30 2026 by rpki-client