This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NvPHM9DbtscigEStbedrS4ZnrcE.roa
File:                     NvPHM9DbtscigEStbedrS4ZnrcE.roa (raw, json)
Hash identifier:          YiK5qvrI0X5QgkIf9YEzw+6MmxBJxVAFj9mlF+7Uj4U=
Subject key identifier:   36:F3:C7:33:D0:DB:B6:C7:22:80:44:AD:6D:E7:6B:4B:86:67:AD:C1
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       019B7758F69D55E23568ECE455A2331C14EF
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NvPHM9DbtscigEStbedrS4ZnrcE.roa
Signing time:             Thu 01 Jan 2026 02:17:57 +0000
ROA not before:           Thu 01 Jan 2026 02:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216086
IP address blocks:        45.133.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:f6:9d:55:e2:35:68:ec:e4:55:a2:33:1c:14:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jan  1 02:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=36f3c733d0dbb6c7228044ad6de76b4b8667adc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:e4:78:05:66:98:70:ae:27:08:4a:18:50:
                    5c:11:15:0d:1d:7e:4f:8b:6b:66:64:57:69:b4:f6:
                    3d:2a:75:92:88:09:f4:50:38:14:8a:42:fb:46:9c:
                    a6:d6:0e:a9:1b:5b:f7:16:57:04:43:22:85:bf:dd:
                    a8:d1:a8:94:50:bb:c1:f9:01:b0:70:99:b4:34:5f:
                    1b:d8:94:d4:97:fb:33:e3:7d:76:4b:fd:8d:13:fe:
                    2f:45:53:96:64:31:47:fc:e1:0a:65:53:d4:71:e3:
                    21:5c:86:71:be:69:03:67:80:a0:29:30:de:b4:de:
                    0c:4e:86:bb:65:9b:70:c5:83:6b:6b:da:90:fc:29:
                    41:10:c4:78:b3:f0:a0:d1:6f:6c:e1:be:6c:68:23:
                    63:14:ff:7c:d0:ad:61:62:b8:69:e7:e9:28:3b:33:
                    a3:c1:cc:25:cd:38:a2:a4:b2:ad:20:6a:0a:9a:3d:
                    6b:bd:7a:6e:65:c1:52:0e:a6:15:51:07:f1:f5:74:
                    69:75:cf:b1:02:6a:e1:a7:21:86:c6:b0:6e:5a:bf:
                    62:c8:5f:d2:31:c1:a2:09:3a:ca:22:44:07:49:ec:
                    ef:e2:4a:dd:b9:d6:4e:d1:e9:a4:7e:ec:0e:be:52:
                    b6:ae:c9:7a:9d:48:b9:12:76:1a:40:5c:b1:81:c3:
                    5b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F3:C7:33:D0:DB:B6:C7:22:80:44:AD:6D:E7:6B:4B:86:67:AD:C1
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NvPHM9DbtscigEStbedrS4ZnrcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:b0:e7:a2:82:67:a0:8b:f8:33:53:2e:a0:e5:c1:fa:b7:8d:
         cc:f2:b6:d5:aa:e7:b0:a6:8e:37:ed:e7:55:38:70:ad:37:f4:
         d3:dc:8a:da:7b:07:75:db:39:70:f8:80:bb:d8:e7:00:e2:2f:
         d7:88:06:9f:01:3a:1c:f3:91:72:7d:7d:6d:64:cd:d8:05:6d:
         ef:58:9f:4e:9a:72:9a:2f:ff:04:06:65:b0:3e:8d:cf:03:66:
         c6:cb:66:ec:23:52:be:e8:28:51:08:9c:61:f4:33:61:f5:bd:
         b2:28:0d:71:96:66:b5:3a:cd:a2:a2:0f:10:15:aa:e0:65:86:
         58:1f:0b:ee:7e:bc:d3:3c:24:a3:df:f0:b8:62:57:ac:d4:7c:
         d4:2a:15:02:fe:64:3b:2a:40:ef:32:55:7e:98:3d:24:67:7d:
         dd:6a:4a:25:90:04:89:8a:3e:23:92:21:99:19:6c:61:69:b9:
         73:c4:59:96:f9:35:b5:3c:5a:bf:9a:16:af:36:aa:6a:0f:fa:
         07:bf:c4:46:e0:cf:e1:b5:d5:e0:46:17:e6:ff:bb:8f:82:c5:
         3a:64:e8:bb:28:d1:85:2a:55:7c:dc:4e:32:a9:b1:69:ea:db:
         91:db:33:c6:ed:11:fe:91:7c:62:66:3b:43:7e:91:a8:c8:fe:
         25:bd:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:20:02 2026 by rpki-client