This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa
File:                     koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa (raw, json)
Hash identifier:          vHwbWKarLLDrFkXHBPDr+Eb8BnaoGU6cB871++he+oc=
Subject key identifier:   92:84:BC:E6:41:19:8B:45:6B:27:69:41:4D:68:09:EE:AF:1B:7D:C2
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019B7C11873EA188D07AE62C619E8C76A3C3
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa
Signing time:             Fri 02 Jan 2026 00:18:02 +0000
ROA not before:           Fri 02 Jan 2026 00:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212372
IP address blocks:        45.83.0.0/23 maxlen: 23
                          45.83.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:87:3e:a1:88:d0:7a:e6:2c:61:9e:8c:76:a3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Jan  2 00:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9284bce641198b456b2769414d6809eeaf1b7dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:7c:22:59:59:0a:1c:8d:fe:c6:f4:e8:6f:
                    d7:55:a1:c1:f6:d0:5c:e7:e5:56:c6:c6:91:e6:98:
                    53:3d:5d:21:b9:66:b7:17:e3:b6:45:5d:80:81:2e:
                    8c:c0:2c:cb:b6:1b:0e:33:fa:59:d1:a1:4a:99:9e:
                    68:ca:ff:ba:1f:63:da:c5:e6:f2:0a:c3:2d:25:09:
                    d2:76:68:5a:6d:46:c6:f6:87:84:c3:ee:12:8f:04:
                    d9:83:f2:91:08:a8:28:a5:7f:68:3d:53:08:05:e6:
                    3b:0c:f2:a0:bf:51:e4:9a:12:68:9d:10:b1:5a:d2:
                    e1:18:d0:14:d5:b7:7c:11:55:ea:14:10:0b:91:45:
                    2b:24:e6:79:8b:6f:c7:d3:6a:3e:51:95:12:32:10:
                    37:cc:e6:99:8b:56:b2:3a:e5:71:21:36:2d:fb:db:
                    77:eb:09:ef:f8:89:cb:ef:bb:dc:27:d3:2e:fd:7f:
                    55:77:b8:cb:96:de:b6:b6:62:5a:27:fa:b2:46:00:
                    cc:ce:5d:4a:df:20:45:a9:bb:23:a0:15:07:dc:99:
                    a6:7b:74:28:74:99:21:cf:06:fc:88:ea:b9:d6:97:
                    e1:53:c5:fd:03:f3:70:3d:d3:f1:d1:5b:b8:f2:46:
                    ef:5a:05:cc:63:7c:47:f6:ed:94:0e:ec:6d:46:2d:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:84:BC:E6:41:19:8B:45:6B:27:69:41:4D:68:09:EE:AF:1B:7D:C2
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/koS85kEZi0VrJ2lBTWgJ7q8bfcI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:0e:d3:f1:e5:75:cc:c5:58:42:8e:6f:de:34:b0:d2:59:7b:
         a4:e2:9b:7e:24:4a:44:05:89:32:89:06:d8:04:b3:fb:a0:48:
         f9:d2:ec:0d:14:96:c1:cb:1b:6f:59:b1:ba:19:7a:bb:3f:d4:
         71:4b:8b:fa:b3:88:4c:f1:de:50:75:9e:46:12:51:5c:eb:d3:
         48:c4:a2:0d:ac:b8:71:ff:54:c1:15:64:18:82:de:aa:54:32:
         1f:37:a0:cd:e6:59:63:39:75:51:e0:8d:e4:d0:fc:e4:c6:d1:
         c6:1d:83:da:c6:c8:ba:f1:13:9a:38:c8:7d:d1:57:85:d5:3b:
         d3:a1:6c:5c:c4:f5:10:1a:bc:de:e8:a7:23:0c:d0:19:9b:2a:
         ab:28:b6:56:87:94:e4:da:9c:ea:fe:e4:14:e3:6e:1b:1f:01:
         bc:55:b7:83:67:41:ce:16:f7:82:cb:c9:9f:28:fe:c7:e4:a0:
         b5:f9:6d:0b:c3:55:1e:14:c5:06:45:5a:44:61:dc:67:73:ae:
         a0:a7:bb:be:5f:00:35:2e:c1:85:d0:0d:17:d9:47:3a:b3:56:
         cc:29:63:5f:7c:c9:c4:3e:dd:06:a5:4b:5d:28:00:fb:7e:f1:
         82:2e:5f:6e:49:d2:2a:a4:83:b1:16:96:03:8a:c5:24:ef:cc:
         9c:02:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:37:56 2026 by rpki-client