This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/54lQx9jq3eHeFIcJKMTm3kHCZTA.roa
File:                     54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (raw, json)
Hash identifier:          27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=
Subject key identifier:   E7:89:50:C7:D8:EA:DD:E1:DE:14:87:09:28:C4:E6:DE:41:C2:65:30
Certificate issuer:       /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial:       019B7910175ECCA3EF11FF696A0AA408C244
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/54lQx9jq3eHeFIcJKMTm3kHCZTA.roa
Signing time:             Thu 01 Jan 2026 10:17:36 +0000
ROA not before:           Thu 01 Jan 2026 10:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41689
IP address blocks:        185.141.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:17:5e:cc:a3:ef:11:ff:69:6a:0a:a4:08:c2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
        Validity
            Not Before: Jan  1 10:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e78950c7d8eadde1de14870928c4e6de41c26530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:06:6d:cb:44:c2:0a:56:a2:9c:84:eb:5f:
                    47:78:2d:9f:89:54:46:86:fd:6c:b3:ee:a2:25:4c:
                    24:54:39:d3:40:76:61:e0:39:98:9f:42:71:c2:aa:
                    da:d8:31:2c:40:df:80:eb:6b:50:93:7f:97:36:29:
                    fe:44:ab:de:a7:3c:1d:d5:a2:8d:ff:7d:5b:fa:4b:
                    eb:cc:19:97:03:68:19:69:1a:c3:b8:a9:86:48:31:
                    b4:49:d1:a2:ca:5b:46:b2:55:b0:fc:81:3b:f4:cb:
                    ce:d2:a9:7e:84:2d:b2:af:e3:56:79:b7:52:07:52:
                    82:81:5a:00:19:2f:2d:6f:5c:4e:26:07:25:68:c9:
                    c9:16:5b:d2:4d:ae:63:0d:1d:90:82:5f:e4:7c:b8:
                    d0:d0:49:00:d6:b8:be:26:6e:e0:f1:5f:cb:fb:97:
                    58:62:0d:2f:37:6b:d2:41:f0:f2:15:25:c5:ea:61:
                    c3:1f:b9:9a:3d:51:36:0a:62:93:e4:01:46:06:9e:
                    2d:ca:5d:19:78:a8:8e:ec:cf:9d:92:84:71:5f:ed:
                    4a:2b:92:d6:35:88:56:b1:10:33:ad:33:cc:a6:0e:
                    0e:f0:b9:4f:11:91:db:fe:f5:1d:51:58:8d:6d:db:
                    c1:70:3e:a1:51:25:3d:19:14:61:6a:5f:c4:4b:0c:
                    bd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:89:50:C7:D8:EA:DD:E1:DE:14:87:09:28:C4:E6:DE:41:C2:65:30
            X509v3 Authority Key Identifier:
                keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/54lQx9jq3eHeFIcJKMTm3kHCZTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d3:cc:33:b6:7a:c2:e6:e1:9e:f9:4b:59:26:bb:9f:6a:d0:
         bd:18:15:aa:26:7d:41:e5:44:bf:31:d7:9d:3a:87:44:f7:0a:
         18:73:41:a5:5d:a4:50:c2:57:d9:f1:29:81:be:1a:37:9a:ae:
         f8:83:cb:61:ca:fb:da:d8:4c:1d:36:cf:1e:d2:92:77:b0:7e:
         92:f1:a3:fb:0f:76:85:fb:46:c6:1c:46:b1:0e:26:70:5a:34:
         09:92:ca:ab:38:1e:e3:c8:a5:6c:6f:e8:37:44:a0:eb:92:0c:
         81:1a:40:2f:0e:9e:36:62:97:27:16:4d:9b:e9:3f:74:31:eb:
         3f:2c:cd:54:76:45:bf:49:64:73:82:cb:be:18:9e:70:e5:6a:
         f6:be:66:fa:ee:77:92:cc:e0:f2:71:ab:fb:f9:1a:56:61:35:
         6c:cb:2b:1c:fc:5d:b2:4e:d2:83:b2:c2:bd:fb:14:00:34:61:
         78:d3:22:ef:29:94:ce:7b:d1:22:6c:09:d3:8a:9c:7d:ee:57:
         cc:54:92:c9:f1:e4:b2:75:ca:54:1a:d0:dd:68:f2:9b:3d:84:
         07:6e:e9:3b:c6:60:f8:5c:5a:e5:7a:07:6e:f2:05:3e:69:19:
         6b:09:73:1b:8d:e6:d0:bc:a2:f5:23:af:3e:c6:f4:0c:a5:b1:
         31:e7:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:56 2026 by rpki-client