This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/eMLMK1qGxvtHAnruO9820drOkF8.roa
File:                     eMLMK1qGxvtHAnruO9820drOkF8.roa (raw, json)
Hash identifier:          Qpd2e+jq6odk6pRnDczmMMXkJCSUq5XQLSBI5aFLqnU=
Subject key identifier:   78:C2:CC:2B:5A:86:C6:FB:47:02:7A:EE:3B:DF:36:D1:DA:CE:90:5F
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       019B7758EE9394B1A4D389AFA9D52B64B452
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/eMLMK1qGxvtHAnruO9820drOkF8.roa
Signing time:             Thu 01 Jan 2026 02:17:55 +0000
ROA not before:           Thu 01 Jan 2026 02:17:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50250
IP address blocks:        45.159.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:ee:93:94:b1:a4:d3:89:af:a9:d5:2b:64:b4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jan  1 02:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78c2cc2b5a86c6fb47027aee3bdf36d1dace905f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:9f:aa:09:20:d7:05:72:ca:e9:ad:fe:36:
                    34:ec:d6:c1:a2:52:c5:72:18:6d:98:99:f1:db:5c:
                    74:74:b7:26:b3:5f:e6:aa:35:7b:b8:2f:c7:a6:9a:
                    d2:2c:ef:73:3b:75:c0:d0:2b:11:ca:79:38:bb:09:
                    73:ab:c6:0d:91:e9:3c:cd:83:cd:a6:ec:b3:33:09:
                    08:e2:7b:9f:17:fd:a5:b2:aa:ac:07:27:a2:9e:0b:
                    eb:e6:ef:9f:13:ab:18:3c:d8:e9:3e:8d:20:08:2d:
                    4d:cd:43:e3:10:97:dc:4f:25:b6:6e:87:6a:4b:3e:
                    b2:72:b9:a4:ac:b9:c0:38:b9:d4:7d:e7:f7:6d:68:
                    b3:74:b8:de:00:df:b8:2a:d8:e9:05:e1:dc:4e:51:
                    6a:b7:1e:bf:3f:67:ec:8f:0a:3b:31:ab:33:45:ca:
                    b9:b1:c2:1e:6c:b7:22:85:02:4a:b7:20:53:28:05:
                    fa:5f:05:0f:68:ec:d9:5d:86:52:c7:16:b0:66:ac:
                    23:60:f3:66:43:b5:23:20:2d:4b:cf:47:87:79:ec:
                    3e:68:eb:7b:8e:6a:1e:03:da:e5:6e:75:ef:78:5a:
                    5a:1a:8c:cf:a0:25:67:f5:0d:ab:15:ae:8c:10:6c:
                    d9:1b:d7:38:2a:92:e6:c8:52:7f:fa:37:ff:a8:c6:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C2:CC:2B:5A:86:C6:FB:47:02:7A:EE:3B:DF:36:D1:DA:CE:90:5F
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/eMLMK1qGxvtHAnruO9820drOkF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:61:39:e0:05:10:73:54:4c:c3:09:eb:b0:9f:ec:a5:14:
         62:be:5d:1c:7a:1f:6f:76:7c:f6:df:e1:17:d6:63:fb:67:63:
         42:e2:95:5c:5d:19:2e:a7:e3:3f:4e:a4:6c:df:08:0e:ce:00:
         e7:cf:8c:3e:c6:9c:9a:69:c1:22:fa:4b:60:7a:38:ec:0f:6b:
         a9:8f:47:fa:c5:d2:2d:5d:ba:3f:c9:29:ff:4f:54:57:ef:02:
         9f:45:4f:0c:58:a1:4e:ef:8e:7d:f9:fb:f9:a0:38:55:d2:eb:
         4f:86:f1:5b:b8:48:65:3d:10:7d:09:2f:fa:2a:b4:fd:f0:2e:
         dd:5b:22:dc:c6:71:ef:cc:d8:2f:5e:5e:53:c9:fb:13:1e:6e:
         05:b7:c8:b6:31:ac:17:59:2a:f3:f0:71:36:d4:9a:a4:13:e1:
         e5:f7:0f:cc:7c:a5:69:66:43:42:e3:06:e8:93:a5:9c:4c:0c:
         33:8c:3b:99:53:6a:09:7a:1c:8c:e3:e3:32:1b:41:68:d6:a3:
         b1:0c:e4:1b:e7:69:5f:6f:f7:70:56:6d:cf:89:13:35:78:3f:
         9f:3e:ec:ea:7e:96:af:af:0d:5a:db:ac:7c:82:23:2b:fb:4d:
         1f:31:1a:7e:b2:07:40:3e:20:66:ef:df:7f:73:12:5c:3d:ea:
         f9:37:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:59 2026 by rpki-client