This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/oMiHSOY4UpwwpdYJ-YwzlBrerYo.roa
File:                     oMiHSOY4UpwwpdYJ-YwzlBrerYo.roa (raw, json)
Hash identifier:          4HJuj+rF75MFgy3hHG2f3m8rThIv9PhuU60sXijKG80=
Subject key identifier:   A0:C8:87:48:E6:38:52:9C:30:A5:D6:09:F9:8C:33:94:1A:DE:AD:8A
Certificate issuer:       /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial:       019B7DCA7F6B69D97BD1B4A1FDFC75062532
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/oMiHSOY4UpwwpdYJ-YwzlBrerYo.roa
Signing time:             Fri 02 Jan 2026 08:19:41 +0000
ROA not before:           Fri 02 Jan 2026 08:19:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6730
IP address blocks:        45.143.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:7f:6b:69:d9:7b:d1:b4:a1:fd:fc:75:06:25:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
        Validity
            Not Before: Jan  2 08:19:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a0c88748e638529c30a5d609f98c33941adead8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bb:65:d0:73:e3:7a:a8:47:75:c1:26:df:1b:
                    f6:c0:45:ad:98:f3:01:c3:d5:a4:1e:e7:f9:1e:ef:
                    d8:94:63:1a:9c:7e:a7:5e:f6:26:c4:57:ba:87:02:
                    bc:cc:b9:58:15:82:d8:f2:49:d4:de:2a:d5:0b:81:
                    84:57:a4:04:15:cb:c4:47:c0:89:61:85:5d:f8:59:
                    23:2f:a3:3d:25:cd:00:df:6d:41:03:1c:f0:f5:41:
                    06:ef:c0:8c:ec:47:e6:58:01:75:35:5d:43:7d:6e:
                    59:0e:cc:29:a3:07:af:65:35:d5:ad:7e:9c:30:11:
                    8d:2d:66:d7:57:6b:0d:35:14:7f:a6:e1:99:3d:48:
                    38:a3:7f:6b:26:4a:6e:3a:ba:be:71:3d:c8:de:a3:
                    85:09:9e:59:dc:f2:45:d6:05:3c:ec:de:72:e0:7b:
                    d0:4a:72:6d:60:b5:35:10:01:36:65:e0:57:53:ef:
                    87:f7:7c:5f:43:1c:81:34:52:06:2e:51:f3:7b:5b:
                    31:d8:29:d6:4f:3c:2a:c9:cf:c8:b9:e3:ab:5e:36:
                    5e:80:30:e2:e1:fd:50:cb:53:73:f1:1a:fd:74:c9:
                    8c:a6:bb:d9:ec:91:a4:35:11:db:e9:b8:6f:c8:32:
                    ec:87:6c:08:c5:33:2f:94:58:01:c1:a3:96:90:c8:
                    33:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C8:87:48:E6:38:52:9C:30:A5:D6:09:F9:8C:33:94:1A:DE:AD:8A
            X509v3 Authority Key Identifier:
                keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/oMiHSOY4UpwwpdYJ-YwzlBrerYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:57:95:cb:fc:a0:6d:54:8e:5e:c2:f9:55:e1:14:3f:b2:df:
         48:84:29:ba:ba:4f:77:4b:1e:8b:63:e8:ac:1e:fe:e4:b6:e2:
         78:12:5a:f2:7a:d0:b8:a5:cf:ee:1e:c7:55:aa:bc:d2:41:13:
         f8:ab:74:99:64:9a:65:c6:23:0f:ef:bd:8a:d3:9e:af:1f:c0:
         b6:7f:83:1d:33:af:75:c8:4d:58:75:31:1b:cd:4a:64:8c:c9:
         46:f6:5f:59:8b:cf:2e:30:1e:1a:a0:e0:12:6c:e5:c0:af:6d:
         30:c2:bf:3d:61:fd:87:ef:16:79:0a:21:cf:7d:d8:69:69:ab:
         28:7b:ef:f9:b1:06:50:82:b8:da:68:1b:bc:a1:cd:2f:6f:4f:
         3c:29:bf:5b:80:7b:3e:53:86:92:c5:66:ef:0f:ac:9b:6e:79:
         51:ed:1b:1b:29:77:a0:4e:ed:c7:c4:72:74:46:d3:30:a3:7c:
         32:ae:41:a5:1a:3b:67:23:8a:85:48:3c:a9:b0:7d:80:ec:d0:
         38:a8:56:1b:80:dd:88:32:ff:87:5c:d5:d2:40:11:4e:0d:e9:
         36:db:6e:fb:54:7c:c6:96:9e:67:a6:66:4e:0d:ea:40:e2:04:
         91:51:0c:55:76:84:88:1f:fc:3a:50:97:a7:3c:f8:43:b4:e4:
         c5:01:8b:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9yn9radl70bSh/fx1BiUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwN2U1ODJhZGM5MzY5ZGE4YWU4NWRkOTM1NzQwMTIzMDgx
YzdlZWQwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGM4ODc0OGU2Mzg1MjljMzBhNWQ2MDlmOThjMzM5NDFhZGVhZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirtl0HPjeqhHdcEm3xv2wEWtmPMB
w9WkHuf5Hu/YlGManH6nXvYmxFe6hwK8zLlYFYLY8knU3irVC4GEV6QEFcvER8CJ
YYVd+FkjL6M9Jc0A321BAxzw9UEG78CM7EfmWAF1NV1DfW5ZDswpowevZTXVrX6c
MBGNLWbXV2sNNRR/puGZPUg4o39rJkpuOrq+cT3I3qOFCZ5Z3PJF1gU87N5y4HvQ
SnJtYLU1EAE2ZeBXU++H93xfQxyBNFIGLlHze1sx2CnWTzwqyc/IueOrXjZegDDi
4f1Qy1Nz8Rr9dMmMprvZ7JGkNRHb6bhvyDLsh2wIxTMvlFgBwaOWkMgzsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKDIh0jmOFKcMKXWCfmMM5Qa3q2KMB8GA1UdIwQY
MBaAFFB+WCrck2naiuhd2TV0ASMIHH7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMt
MDU2YmFlMjcyODhlLzEvb01pSFNPWTRVcHd3cGRZSi1Zd3psQnJlcllvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS82ZWQ0MzQtY2Q1MS00MTUyLWFhNDMtMDU2YmFlMjcyODhl
LzEvVUg1WUt0eVRhZHFLNkYzWk5YUUJJd2djZnUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY+cMA0G
CSqGSIb3DQEBCwUAA4IBAQCvV5XL/KBtVI5ewvlV4RQ/st9IhCm6uk93Sx6LY+is
Hv7ktuJ4ElryetC4pc/uHsdVqrzSQRP4q3SZZJplxiMP772K056vH8C2f4MdM691
yE1YdTEbzUpkjMlG9l9Zi88uMB4aoOASbOXAr20wwr89Yf2H7xZ5CiHPfdhpaaso
e+/5sQZQgrjaaBu8oc0vb088Kb9bgHs+U4aSxWbvD6ybbnlR7RsbKXegTu3HxHJ0
RtMwo3wyrkGlGjtnI4qFSDypsH2A7NA4qFYbgN2IMv+HXNXSQBFODek22277VHzG
lp5npmZODepA4gSRUQxVdoSIH/w6UJenPPhDtOTFAYti
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:08:05 2026 by rpki-client