This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa
File:                     5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa (raw, json)
Hash identifier:          UIor+BCs9mrPP+0b8Lrn7HV4ATlK3jTAi1j4A256yaM=
Subject key identifier:   E4:76:BA:31:BC:AF:0D:15:56:B9:9E:2A:52:B3:AC:74:19:12:20:5B
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       019B7AC9580924349B6267251AB1AA079ED9
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa
Signing time:             Thu 01 Jan 2026 18:19:33 +0000
ROA not before:           Thu 01 Jan 2026 18:19:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208626
IP address blocks:        45.155.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:58:09:24:34:9b:62:67:25:1a:b1:aa:07:9e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Jan  1 18:19:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e476ba31bcaf0d1556b99e2a52b3ac741912205b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:a8:67:c2:32:0d:c0:dd:ac:55:23:50:d1:
                    ef:c4:a5:4b:62:d6:3b:e3:6d:e2:e6:9c:bd:ca:ef:
                    47:1f:8f:75:68:1c:de:df:ad:fc:69:1f:be:ac:81:
                    02:f0:9d:f5:0b:d4:34:39:49:1c:07:6a:19:3d:6b:
                    59:f4:e9:53:a3:7e:c2:19:2a:39:71:6d:15:dc:08:
                    bd:d4:5b:80:80:e7:f6:d3:c8:6f:2b:f3:b7:c8:95:
                    10:1d:74:9e:ee:dd:2e:a0:01:30:05:fa:37:22:cc:
                    b4:36:ce:16:fd:3f:38:aa:88:f1:ab:f6:8a:04:38:
                    6c:b0:c5:7b:9f:7b:b3:c0:a9:10:88:fb:89:a3:99:
                    2c:ff:05:af:40:05:1e:e4:06:34:d2:27:af:2b:6e:
                    00:93:09:60:72:86:fe:8b:c7:82:bc:0d:56:e9:b1:
                    7b:75:60:b8:aa:d8:82:cd:3b:48:fe:fb:5f:61:9f:
                    bb:32:5e:c0:15:0e:39:6a:bc:6a:52:0b:69:14:8a:
                    77:b9:f0:04:bf:b8:d2:82:02:58:a9:74:37:c5:a1:
                    57:32:f8:4e:5e:19:f9:86:23:62:fe:cc:ca:85:ed:
                    82:ce:7d:71:da:71:0c:f8:bb:97:6e:75:76:1a:a3:
                    ba:0d:28:3c:bf:aa:49:f6:01:2c:f7:2c:3d:1a:57:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:76:BA:31:BC:AF:0D:15:56:B9:9E:2A:52:B3:AC:74:19:12:20:5B
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/5Ha6MbyvDRVWuZ4qUrOsdBkSIFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:ea:a6:f0:72:67:de:61:ae:e1:5c:15:28:f2:6d:bd:d2:
         59:f6:3f:89:a4:7e:7a:fe:6d:9c:74:47:59:0c:cf:be:bf:58:
         78:40:cd:f0:f2:28:fd:25:3f:d3:2f:70:d1:d9:3f:98:f5:6c:
         51:49:5e:6c:1d:35:92:fc:15:39:7f:1a:bb:3b:89:4d:be:b0:
         92:0a:c8:23:55:b3:83:50:26:e0:f5:76:3b:3a:33:d1:23:79:
         e8:6f:4a:07:8c:4d:31:f9:99:00:b3:b8:79:27:fe:5c:66:34:
         18:24:2d:f1:8a:b8:1a:f9:be:55:61:84:97:21:cb:79:3e:26:
         69:51:b6:9b:91:48:8f:a8:37:ae:e7:77:7e:6c:96:b0:8c:88:
         6b:c8:2d:a6:d7:e6:43:3e:be:f7:dc:af:52:0a:ad:1b:79:37:
         b7:78:6c:94:05:68:60:b2:26:6b:40:7e:80:d8:c9:fd:17:8e:
         46:48:b8:fb:29:09:e9:19:96:41:a0:af:ee:76:83:c4:bc:0e:
         f6:6f:c5:c3:3b:83:5d:18:33:fd:8e:dd:6a:e6:ff:88:64:10:
         38:80:d5:e8:7a:2b:ae:79:f0:76:a0:f8:a0:9c:ca:0c:90:88:
         ee:05:d9:20:fb:6d:18:40:fa:a9:f4:74:d3:90:c1:55:23:10:
         ef:c2:6a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:17:31 2026 by rpki-client