This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/Sl30k11z1TwtyMHAj_NqDrPSCvg.roa
File:                     Sl30k11z1TwtyMHAj_NqDrPSCvg.roa (raw, json)
Hash identifier:          9wZBkgJcqw68v5ewI2FJS2vHd+COBYLKeeovUBuZl+s=
Subject key identifier:   4A:5D:F4:93:5D:73:D5:3C:2D:C8:C1:C0:8F:F3:6A:0E:B3:D2:0A:F8
Certificate issuer:       /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial:       019B7D5C08E25CDDEB0163FA5196ED929116
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/Sl30k11z1TwtyMHAj_NqDrPSCvg.roa
Signing time:             Fri 02 Jan 2026 06:19:02 +0000
ROA not before:           Fri 02 Jan 2026 06:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49020
IP address blocks:        45.142.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:08:e2:5c:dd:eb:01:63:fa:51:96:ed:92:91:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
        Validity
            Not Before: Jan  2 06:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4a5df4935d73d53c2dc8c1c08ff36a0eb3d20af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:c5:8e:8c:5a:5c:66:5d:18:a7:dd:66:e3:
                    18:94:b8:79:13:9b:b3:d7:f7:1f:8d:d7:5e:dd:c1:
                    0c:6d:7d:5a:04:29:66:59:d8:bf:96:6c:43:af:e6:
                    4d:37:5b:a6:38:38:08:a3:e8:d2:8e:e2:91:40:ea:
                    cf:d1:35:2b:f2:ed:13:b1:2c:f2:7b:a0:5a:9e:67:
                    78:61:08:b4:7a:3e:de:6d:8b:fa:4c:dd:f9:2a:a3:
                    58:f0:c9:37:d8:b6:bd:59:d2:e4:23:1e:1a:88:af:
                    de:a5:21:90:7c:2a:ee:9e:bf:cf:95:60:42:2e:c6:
                    89:b1:a6:b4:40:9f:b9:90:5a:01:0e:65:75:51:1a:
                    e2:62:aa:d7:56:e6:c3:d6:af:5e:5c:06:03:0d:85:
                    b6:7d:85:44:eb:87:ba:b8:af:e4:d6:c0:3a:5e:0f:
                    88:c6:ac:cc:57:08:61:c3:24:c6:24:49:0d:8e:3c:
                    4b:65:e4:ca:13:bc:c2:eb:be:67:a1:ec:fc:34:97:
                    81:15:b5:6a:60:68:79:87:50:6c:4f:27:df:e4:39:
                    c7:81:2f:d9:ad:ea:c3:dc:04:20:dc:0b:eb:5c:46:
                    55:3b:d8:f9:f2:67:08:8e:24:7e:d2:bc:88:76:88:
                    03:e2:e5:1d:12:c1:cd:5a:76:dc:3f:d6:dc:ae:a0:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5D:F4:93:5D:73:D5:3C:2D:C8:C1:C0:8F:F3:6A:0E:B3:D2:0A:F8
            X509v3 Authority Key Identifier:
                keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/Sl30k11z1TwtyMHAj_NqDrPSCvg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e8:a3:de:ff:db:93:db:6e:0c:e5:9a:fb:14:9a:74:e1:a5:
         ca:a5:05:47:5d:ea:d3:e9:64:a9:3d:7e:18:c7:d1:b6:38:bf:
         88:30:66:7b:57:6f:c8:9a:4f:18:ce:65:ff:a6:72:49:a8:d8:
         8f:d7:c5:5a:4f:f2:aa:d4:ea:f7:b9:53:aa:99:4d:2e:4a:09:
         e0:52:7a:55:f9:06:19:8a:7e:21:ca:c8:9b:ca:43:ad:b6:7d:
         f9:b8:f4:30:f5:ed:81:4b:0c:c0:91:43:cb:14:06:13:0d:75:
         aa:10:c7:19:88:f1:99:82:f6:ce:b4:ef:c6:cc:68:fd:26:e8:
         5e:cf:c3:78:e4:c2:5a:2f:4d:62:55:4a:6e:e2:d8:76:39:f9:
         3d:77:eb:ec:81:62:c0:2b:78:89:fa:23:58:98:0b:4e:19:0b:
         de:7c:84:b8:e8:1d:36:e1:63:e9:bf:e9:e2:d8:70:21:e6:cd:
         06:0c:ee:6a:24:7f:87:c5:24:f0:dc:4a:e6:cc:7f:1b:35:5b:
         4b:d9:f7:c3:8d:8c:2f:fe:ac:8d:ea:5e:6e:a8:4c:86:78:da:
         5e:cc:9a:b8:bd:f4:1b:bb:1f:59:54:e2:0a:13:23:61:ab:38:
         40:2e:21:95:2e:43:f8:db:df:f0:93:f7:e0:3d:8a:9f:ad:27:
         47:51:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:58 2026 by rpki-client