This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T13LWDD-6W9mQD-TNeAbL0hWUWw.roa
File:                     T13LWDD-6W9mQD-TNeAbL0hWUWw.roa (raw, json)
Hash identifier:          ddCXcXoDrd+DwyLuw9axhKETH5Db3Nq2kLoVrgaevAA=
Subject key identifier:   4F:5D:CB:58:30:FE:E9:6F:66:40:3F:93:35:E0:1B:2F:48:56:51:6C
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019AA769BCC210849FA090528BCE4A4D6807
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T13LWDD-6W9mQD-TNeAbL0hWUWw.roa
Signing time:             Fri 21 Nov 2025 17:15:15 +0000
ROA not before:           Fri 21 Nov 2025 17:15:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207238
IP address blocks:        45.150.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 10:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a7:69:bc:c2:10:84:9f:a0:90:52:8b:ce:4a:4d:68:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Nov 21 17:15:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4f5dcb5830fee96f66403f9335e01b2f4856516c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:fe:1a:f1:df:71:9a:cb:03:de:11:f5:de:
                    7e:38:c3:33:0c:d4:2a:00:c8:74:1a:75:f8:dc:da:
                    ac:f9:26:d5:0f:dc:87:d2:06:f5:dd:9e:ad:69:4e:
                    fe:23:d5:3b:8d:c3:7c:49:cc:07:63:70:02:ba:b0:
                    18:71:c9:75:a0:66:f2:f6:4f:2b:75:b3:b9:17:75:
                    4e:38:ff:34:aa:ec:51:33:50:0c:b5:93:50:2d:42:
                    14:f5:20:5a:c1:d2:14:78:ab:97:ce:81:a9:ec:b6:
                    1c:21:d2:21:67:d2:1f:07:15:1a:f7:e8:79:4b:a0:
                    6c:23:78:9f:ed:43:2f:64:7d:8b:2e:1e:30:fd:15:
                    55:c7:cd:7c:84:64:ca:f7:5a:27:7f:f6:8a:8c:94:
                    6f:75:13:d4:f2:66:9c:26:9d:8c:78:dd:97:df:af:
                    12:94:48:9e:6a:d4:68:e8:65:9d:b5:00:c9:b1:4e:
                    67:b4:d7:5d:12:84:88:4b:d1:51:4a:3e:f9:41:43:
                    c2:b7:2b:46:1d:dc:90:c7:2e:7a:c3:d6:20:90:df:
                    22:c2:f0:6c:da:43:3e:0a:7e:46:3c:3e:58:e4:c8:
                    a5:44:d4:06:6b:00:04:d7:3a:9b:b4:df:7b:9b:70:
                    e5:73:a3:6c:88:b2:d7:3a:1a:43:9e:47:c6:0d:ca:
                    b7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:CB:58:30:FE:E9:6F:66:40:3F:93:35:E0:1B:2F:48:56:51:6C
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/T13LWDD-6W9mQD-TNeAbL0hWUWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:c1:42:fe:55:3c:5c:5c:90:fb:0b:f8:01:8d:23:9b:1a:10:
         3f:e3:ed:7a:b6:ea:db:46:e5:17:55:98:b7:8f:bf:7b:4f:81:
         7a:36:d0:75:3b:cc:93:a2:2b:4b:08:86:8a:b0:97:9a:fe:c0:
         d7:da:d4:ae:a4:60:09:3e:1f:70:ed:44:69:c7:1f:f0:95:30:
         22:cb:9e:4a:d0:af:71:58:f2:28:8a:0e:7b:26:2e:8b:0b:c3:
         0d:2a:4c:2e:cc:3c:5b:23:81:f9:87:7f:de:f7:7e:de:a0:92:
         d1:80:4a:d7:dd:e6:26:37:b0:69:7e:6d:3b:34:84:3e:6a:56:
         ec:86:01:ae:08:59:89:19:3e:af:69:ca:01:2b:87:db:60:60:
         56:a2:7e:84:07:1a:54:02:53:c9:50:3e:64:98:7e:79:64:0f:
         40:45:f0:11:af:90:b4:cf:6e:bd:2a:c6:43:e4:74:67:57:71:
         99:b0:12:87:a1:aa:69:36:57:11:bc:be:53:ac:bc:af:21:72:
         4d:6f:59:02:82:f9:90:6a:c7:4b:2e:71:db:77:ae:9b:26:df:
         94:ca:e1:6a:bd:e0:d1:41:f7:dc:d8:26:fe:22:08:c3:02:0e:
         3b:dd:12:e1:b2:08:92:f2:c0:ed:f0:9a:0d:91:7e:ae:46:1d:
         39:ae:ed:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:34:13 2025 by rpki-client