This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/5uIuC6619SIoj23PHmVXaawg9T0.roa
File:                     5uIuC6619SIoj23PHmVXaawg9T0.roa (raw, json)
Hash identifier:          v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=
Subject key identifier:   E6:E2:2E:0B:AE:B5:F5:22:28:8F:6D:CF:1E:65:57:69:AC:20:F5:3D
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       019B7AC93D169D3EEBB01543DEFE2A9FF4B5
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/5uIuC6619SIoj23PHmVXaawg9T0.roa
Signing time:             Thu 01 Jan 2026 18:19:27 +0000
ROA not before:           Thu 01 Jan 2026 18:19:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        45.87.160.0/24 maxlen: 24
                          45.87.161.0/24 maxlen: 24
                          45.87.162.0/24 maxlen: 24
                          45.87.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:3d:16:9d:3e:eb:b0:15:43:de:fe:2a:9f:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Jan  1 18:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6e22e0baeb5f522288f6dcf1e655769ac20f53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:01:8e:83:18:30:24:48:1f:8e:a2:39:b1:
                    db:f9:db:57:3b:ff:dc:31:d7:d4:4c:ea:d0:2d:be:
                    90:81:fa:76:d4:f1:ac:1a:c5:dd:5b:99:4d:99:ba:
                    b4:f0:55:19:18:64:33:e9:4c:1d:b2:e5:97:57:e0:
                    d0:1f:41:e7:79:f0:fd:12:78:2c:0d:04:66:5c:b2:
                    d0:d7:65:3a:3b:32:30:2e:62:11:5f:9d:c2:b7:42:
                    22:05:ab:9d:e9:14:ce:42:c8:3a:d5:bc:9b:65:a6:
                    38:e5:d8:f6:f5:79:ad:b8:20:33:d2:7c:51:46:71:
                    32:7d:32:7e:0d:90:66:e3:bf:ce:9c:45:c7:b9:a0:
                    fb:10:cc:8d:3f:3b:b2:43:e8:13:30:2a:6c:50:98:
                    87:eb:74:65:82:11:3c:e9:da:0e:e5:50:9d:c8:e9:
                    39:19:86:10:43:3c:e8:23:ed:84:49:a6:93:66:39:
                    1b:80:2b:29:a6:e2:85:4d:c7:b5:4a:30:e5:d7:75:
                    c6:2f:92:ce:08:f0:c0:5f:b8:2b:5d:24:b8:be:9e:
                    2a:eb:7d:4f:5a:ee:49:99:79:6e:09:b6:1f:19:ab:
                    68:64:bb:6c:d4:4f:ac:7b:2a:b7:4e:e1:89:47:25:
                    ab:6d:cc:2d:4f:45:71:b4:ef:c6:1c:75:62:25:96:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E2:2E:0B:AE:B5:F5:22:28:8F:6D:CF:1E:65:57:69:AC:20:F5:3D
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/5uIuC6619SIoj23PHmVXaawg9T0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:a9:96:1f:5e:33:86:e2:64:60:9c:04:46:1f:14:7d:e0:d6:
         14:4e:eb:ca:74:d6:6d:2c:d7:17:d9:55:ab:7b:45:30:4d:d4:
         e6:4b:aa:e3:7e:d5:87:e8:6f:85:ac:bd:bd:d2:7d:10:a3:d2:
         d3:d6:16:2e:c9:cf:83:f6:48:97:41:d8:17:ba:cb:f9:c1:4c:
         65:2c:df:ee:e8:22:81:86:f2:7d:d0:de:92:c5:c5:e8:49:04:
         9b:8e:19:9c:ac:fa:c5:a3:aa:80:99:7e:90:1b:34:8a:fe:7b:
         0f:b0:01:97:25:1d:c2:23:f1:57:bc:7b:53:b8:7f:bc:12:88:
         9b:2b:3f:d2:77:e1:3d:be:c9:03:c9:06:37:c7:e8:de:2a:36:
         a5:52:64:c9:2f:8d:ac:e2:0d:70:4c:e4:8b:80:8d:23:e6:20:
         37:d1:55:99:b5:a2:3e:0c:5a:bf:99:de:24:e4:77:b2:85:9e:
         6b:42:a1:09:88:95:a4:81:d6:1c:67:a8:10:2c:8b:d7:ca:61:
         4a:db:0b:d4:82:0b:46:db:d6:fb:71:1c:71:49:c8:59:14:07:
         ab:07:45:18:88:39:b0:e9:39:cf:fd:1a:9f:d8:87:7f:31:83:
         cc:d2:3e:e0:29:4a:81:a5:2f:d6:8f:37:7f:d2:ce:2f:90:0e:
         9f:ce:dc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:27 2026 by rpki-client