This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/59HvWrjKihKr9RdDPWkA9dnGxCc.roa
File:                     59HvWrjKihKr9RdDPWkA9dnGxCc.roa (raw, json)
Hash identifier:          MXCBO7VfqSGhC4hgg48aORNjhS44IB2miv5A3hBaQlg=
Subject key identifier:   E7:D1:EF:5A:B8:CA:8A:12:AB:F5:17:43:3D:69:00:F5:D9:C6:C4:27
Certificate issuer:       /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial:       019B79ECF5A3650B4F00D02ADC7D8A704EE2
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/59HvWrjKihKr9RdDPWkA9dnGxCc.roa
Signing time:             Thu 01 Jan 2026 14:18:51 +0000
ROA not before:           Thu 01 Jan 2026 14:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205403
IP address blocks:        145.14.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:f5:a3:65:0b:4f:00:d0:2a:dc:7d:8a:70:4e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
        Validity
            Not Before: Jan  1 14:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e7d1ef5ab8ca8a12abf517433d6900f5d9c6c427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:da:53:56:00:e1:f6:7d:ed:f5:23:c5:88:f2:
                    09:ed:19:c2:38:11:76:52:af:f0:f4:3a:48:6d:d8:
                    a2:35:3c:57:36:c9:73:84:54:74:11:33:5a:e1:07:
                    65:b7:38:13:36:dd:64:2a:f4:66:3e:c8:72:9c:fd:
                    8a:70:06:e9:ef:ce:e6:39:83:42:95:ee:ba:d9:4d:
                    20:98:6a:9b:d0:8a:f7:17:25:41:52:1f:f2:d2:fd:
                    89:ff:5b:54:ba:43:37:82:42:f5:fa:3a:49:74:fa:
                    b5:1e:d6:67:ee:57:ec:02:d9:4f:af:d2:69:ab:c8:
                    88:3f:79:31:a2:44:65:ff:d8:68:26:50:b5:ab:d3:
                    dd:5c:4a:e2:2b:e0:72:54:8f:5e:d2:8f:f2:dc:66:
                    ed:3a:21:27:fe:38:a2:eb:0a:9d:3d:55:d2:3b:2b:
                    ca:5d:4d:31:b1:e2:b0:96:51:71:28:3c:5a:33:72:
                    fe:6d:6e:12:26:4e:2b:9d:6a:92:ab:85:02:e2:34:
                    7d:56:19:d3:cc:a7:c3:27:5a:4c:1d:50:a0:ad:a6:
                    dd:a5:21:1d:30:68:f4:05:5e:63:97:e6:52:c7:d0:
                    ac:0c:94:1a:ed:01:db:44:f2:e9:72:5d:ba:57:74:
                    19:06:98:ca:43:f2:f4:88:79:b5:25:02:89:ca:f7:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D1:EF:5A:B8:CA:8A:12:AB:F5:17:43:3D:69:00:F5:D9:C6:C4:27
            X509v3 Authority Key Identifier:
                keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/59HvWrjKihKr9RdDPWkA9dnGxCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.14.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:1d:ee:92:11:80:80:27:c2:b2:b6:fa:d2:48:81:2c:50:53:
         b3:2f:88:c2:83:21:eb:5f:55:e7:5f:a8:4e:0e:a1:93:85:64:
         6b:82:f6:d4:d0:c3:2a:71:7e:22:6b:93:21:c9:bc:c6:28:4b:
         21:32:f1:1d:2e:dd:14:af:ac:48:c3:68:aa:c9:27:45:61:13:
         3b:e5:19:24:ca:cf:0d:32:53:70:9b:2e:a6:fe:40:97:ec:35:
         a4:8d:5a:dd:23:43:6d:6b:aa:8f:8a:03:ca:aa:7a:70:ab:90:
         18:77:f8:a8:08:45:0d:ed:58:a8:1d:96:fd:4c:ed:bd:26:09:
         eb:50:9f:b3:eb:44:1a:90:67:ad:d9:80:45:55:ec:88:63:70:
         5b:58:32:c5:da:b4:c5:a7:bc:3a:3b:43:16:b7:06:ee:b4:95:
         b5:82:f7:ac:20:03:d8:08:3e:ef:b9:38:26:09:ff:7a:3c:75:
         ca:71:88:e9:10:83:87:85:c3:5f:22:ca:dc:9c:2e:01:f0:b5:
         39:f9:a4:18:dd:2c:6b:3a:b4:59:10:90:9f:0b:d8:e8:ca:6a:
         ae:df:8a:45:7e:6d:da:33:44:5e:57:5c:c0:b3:eb:b8:c2:50:
         37:6c:52:87:16:a2:5c:ff:63:17:c9:1b:18:14:38:9f:76:e6:
         14:42:da:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:38:42 2026 by rpki-client