This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ix0KuQhI-fe5sCE43gDf8AwDdMk.roa
File:                     ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (raw, json)
Hash identifier:          r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=
Subject key identifier:   8B:1D:0A:B9:08:48:F9:F7:B9:B0:21:38:DE:00:DF:F0:0C:03:74:C9
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       019B78A2E3911EA3661BBDAE8AFC76B5B581
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ix0KuQhI-fe5sCE43gDf8AwDdMk.roa
Signing time:             Thu 01 Jan 2026 08:18:19 +0000
ROA not before:           Thu 01 Jan 2026 08:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212396
IP address blocks:        45.84.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:e3:91:1e:a3:66:1b:bd:ae:8a:fc:76:b5:b5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Jan  1 08:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b1d0ab90848f9f7b9b02138de00dff00c0374c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:6f:d2:a5:91:92:e4:be:90:64:de:65:98:
                    7b:45:20:9c:b7:83:d6:c3:6f:5f:0a:65:7d:8b:0d:
                    52:12:ff:8f:fc:91:c1:88:02:fd:e3:71:f2:97:40:
                    7b:ae:26:be:64:34:8a:05:4e:de:ee:f1:b4:e2:86:
                    f3:9d:c0:f7:da:32:ab:e8:51:b8:9d:23:ee:55:bc:
                    fc:77:7b:93:aa:bf:2d:09:b6:e2:63:5f:14:89:13:
                    86:c3:20:55:15:62:75:c3:c6:10:32:d1:88:39:bb:
                    8c:77:75:e2:16:80:01:5f:99:b1:69:98:ab:95:8f:
                    b1:ce:75:e8:8b:d3:bd:e3:32:e4:ef:48:56:9b:90:
                    f1:45:47:10:15:73:0c:84:0a:4f:a3:a0:f2:ba:7e:
                    70:7e:51:fd:48:eb:12:5f:03:0d:d1:e6:8a:bd:7e:
                    2a:ac:03:15:9d:3f:ee:b8:94:2c:97:61:25:74:92:
                    85:9d:23:4d:dc:c6:97:26:9b:89:73:28:8b:27:74:
                    e9:ec:51:7e:76:64:36:6f:67:5d:c0:ec:22:f0:fe:
                    66:3b:70:df:f9:63:ef:f1:6e:c5:d4:3c:2a:00:7e:
                    c2:e1:6e:77:5f:c2:4c:40:68:5c:47:6e:7f:54:92:
                    94:06:22:71:3a:72:8c:f5:c2:15:50:1a:d2:37:87:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:0A:B9:08:48:F9:F7:B9:B0:21:38:DE:00:DF:F0:0C:03:74:C9
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/ix0KuQhI-fe5sCE43gDf8AwDdMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:71:9b:c5:5e:6c:c1:3c:9e:aa:cc:9b:78:01:95:9c:fc:
         55:1f:57:5e:8c:de:ab:a5:77:20:f0:22:ee:7a:ae:a6:78:96:
         bf:db:f2:6f:55:48:ce:c8:cb:65:59:d5:7c:bb:e4:5f:ee:86:
         8d:0f:60:bd:b3:7f:d6:16:0f:6c:9f:5a:3b:1c:0b:57:7e:da:
         6c:f1:56:da:35:ce:4c:e2:0c:a7:13:7b:f8:51:a9:a8:fb:08:
         79:e7:2d:d2:57:f2:b6:89:be:89:41:57:7d:fd:54:1e:8e:00:
         67:98:ec:a0:2f:e5:25:c9:83:dd:46:a2:81:f4:d8:7c:d0:b9:
         90:a1:b8:26:25:7e:43:fe:f8:d7:1d:c6:85:7f:63:df:ee:91:
         cb:2e:7b:50:66:66:79:98:94:95:e0:d9:27:34:67:5a:48:81:
         de:20:13:1e:d8:ca:74:3c:dd:43:ce:38:2c:59:0c:c1:61:34:
         c4:e3:e0:b1:da:95:0f:0b:c6:03:e3:3e:5a:99:cc:39:0e:21:
         55:d2:36:d1:88:62:4a:10:81:16:cb:49:15:b8:fe:67:47:82:
         b6:6c:c6:fb:84:d4:3f:f6:61:b0:4f:81:d7:6f:eb:1b:47:5b:
         0e:53:fd:1c:06:fc:99:7a:c3:a1:b8:80:be:db:0d:b2:64:49:
         90:10:2f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:04 2026 by rpki-client