This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/SO3BlzN82wuSE26PkAHoL9gdWK0.roa
File:                     SO3BlzN82wuSE26PkAHoL9gdWK0.roa (raw, json)
Hash identifier:          2lTdc7W5+lUgsLYun9vUAbt/KzErih08Dxdrvh4+kG8=
Subject key identifier:   48:ED:C1:97:33:7C:DB:0B:92:13:6E:8F:90:01:E8:2F:D8:1D:58:AD
Certificate issuer:       /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial:       019B7AC7A8C7CEC9F18C38F0F61280D676EE
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/SO3BlzN82wuSE26PkAHoL9gdWK0.roa
Signing time:             Thu 01 Jan 2026 18:17:43 +0000
ROA not before:           Thu 01 Jan 2026 18:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3269
IP address blocks:        45.82.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:a8:c7:ce:c9:f1:8c:38:f0:f6:12:80:d6:76:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
        Validity
            Not Before: Jan  1 18:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48edc197337cdb0b92136e8f9001e82fd81d58ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:ca:c5:59:bb:af:9c:24:dd:1c:fe:f4:5e:
                    55:16:5a:b2:41:be:67:d3:59:68:87:27:12:f0:9d:
                    24:77:06:1a:cb:64:76:ab:06:53:f1:5a:2a:09:40:
                    86:df:83:42:89:52:47:96:f4:14:96:ae:bd:91:c8:
                    6c:2c:b7:3e:93:63:13:00:e9:85:e0:1c:79:ba:83:
                    10:d5:91:44:40:11:51:c2:4c:3c:b4:d8:02:ef:35:
                    9d:ba:71:39:ff:60:5b:d0:02:f2:d4:6c:99:cc:de:
                    1f:e7:dd:f2:55:10:e9:14:c5:9a:b1:8d:87:81:a1:
                    99:c4:6e:8d:2d:1d:b5:9e:fe:8a:bf:df:cd:ea:ec:
                    a1:c5:c2:9e:58:cd:e8:16:f5:e7:ef:75:d5:14:88:
                    94:c8:a8:e6:75:f0:2c:91:dc:1c:ee:d4:24:96:93:
                    9b:46:06:bf:d1:82:e3:2a:b3:02:3c:4a:52:53:21:
                    6d:9c:a0:b4:2b:7a:f4:33:7f:bc:e9:0f:70:c3:68:
                    a1:73:d1:83:04:dc:60:2a:dd:91:3b:9c:b6:60:ae:
                    1a:7f:e7:f5:ec:79:20:06:8c:d8:e2:2a:e2:a9:7f:
                    8d:e9:3d:d8:08:20:d8:2f:16:40:71:c8:61:26:44:
                    c3:95:ea:53:3f:6e:ea:12:a4:a7:f0:26:12:a9:cc:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:ED:C1:97:33:7C:DB:0B:92:13:6E:8F:90:01:E8:2F:D8:1D:58:AD
            X509v3 Authority Key Identifier:
                keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/SO3BlzN82wuSE26PkAHoL9gdWK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:b6:fa:53:ba:9f:22:8c:8f:03:29:b5:31:76:7c:1a:25:
         95:0d:0e:01:a5:2d:c6:45:43:e7:85:5b:38:8a:a3:38:ec:d1:
         c4:d3:a7:d7:fc:4e:e7:2e:42:fc:87:ce:be:56:3e:c5:29:5f:
         91:01:ac:b5:be:5a:a8:50:12:b2:61:6d:79:65:9a:84:eb:f7:
         27:70:e1:f6:51:f5:ab:29:a5:4d:cd:08:f0:c8:24:b7:b8:15:
         fc:40:57:83:b9:a2:c1:98:ab:d1:c8:3f:34:11:9c:32:50:06:
         23:39:c5:72:95:bc:d5:e8:2a:1b:ed:c1:c6:75:e9:d6:72:61:
         05:8a:7f:d7:dd:d8:09:74:23:a9:52:de:fc:91:76:82:f8:a0:
         da:ee:3e:6b:7a:93:b5:37:39:54:a8:62:95:97:4d:e2:53:ca:
         17:94:b9:bb:43:ac:61:e1:7c:ed:22:e7:fd:27:dc:da:90:b0:
         b6:d4:06:3c:3c:e3:b8:1e:fd:47:56:85:24:c4:2d:52:ed:f7:
         42:99:00:f5:f7:86:8c:35:d5:ca:14:7b:b1:81:8f:dd:92:28:
         ce:8c:c9:61:41:cb:fc:d9:91:e4:00:32:04:50:6b:b7:cf:1d:
         c8:f9:52:3b:15:08:93:35:ec:cd:b2:79:8e:db:26:3a:8e:f0:
         d8:fd:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:30 2026 by rpki-client