This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/haTrs_5tpUyACklPcJ9fH1LslHE.roa
File:                     haTrs_5tpUyACklPcJ9fH1LslHE.roa (raw, json)
Hash identifier:          PZyuQBgGj0U34RVF0awm9EujFdbexSECm7KqphEpSv8=
Subject key identifier:   85:A4:EB:B3:FE:6D:A5:4C:80:0A:49:4F:70:9F:5F:1F:52:EC:94:71
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       019B7CECD5DABFDE351B66097D4605E808B2
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/haTrs_5tpUyACklPcJ9fH1LslHE.roa
Signing time:             Fri 02 Jan 2026 04:17:34 +0000
ROA not before:           Fri 02 Jan 2026 04:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        146.19.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:d5:da:bf:de:35:1b:66:09:7d:46:05:e8:08:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Jan  2 04:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=85a4ebb3fe6da54c800a494f709f5f1f52ec9471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ad:3d:98:73:ce:4a:a9:08:b3:da:01:3e:4b:
                    13:c8:9e:48:cf:71:2e:e9:5a:71:9f:03:ca:ee:98:
                    61:2a:9f:b5:47:fc:f9:c7:05:37:14:63:ee:ca:b6:
                    45:73:ed:68:b4:14:44:a0:d1:56:09:03:e3:ec:97:
                    67:f7:2c:a4:09:dc:6f:7d:5b:c5:3c:cd:38:44:bf:
                    ea:2f:11:c1:a4:72:35:3f:52:45:e9:55:0c:65:6d:
                    41:e9:9c:7b:c3:9f:bb:20:29:27:50:d8:ff:4b:fb:
                    55:bb:88:71:6a:b0:2e:bf:79:28:63:45:cf:56:dc:
                    f5:d3:57:a0:f2:f8:d8:96:b9:92:d3:9e:b7:c9:e8:
                    14:06:f2:17:19:6a:2f:a8:4d:5f:0f:5b:51:44:71:
                    b3:da:92:e3:7e:fd:76:2b:b6:e4:74:d8:2d:46:d4:
                    9d:0f:fd:79:f9:f7:db:55:c4:29:96:83:11:e8:08:
                    1b:af:ab:fb:41:cb:b4:9c:23:12:9e:1e:a8:4f:48:
                    0b:4e:f9:20:00:5d:76:3d:17:c6:66:a8:e2:af:47:
                    54:d1:be:e3:88:29:bf:2c:93:b3:9e:7a:6c:e1:4d:
                    d2:ef:82:b0:2f:2a:21:97:90:bc:17:09:4f:d1:6e:
                    76:53:14:9b:44:19:d7:36:f8:d4:c4:83:b2:0a:74:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A4:EB:B3:FE:6D:A5:4C:80:0A:49:4F:70:9F:5F:1F:52:EC:94:71
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/haTrs_5tpUyACklPcJ9fH1LslHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:6a:b6:8d:41:5d:73:27:58:ce:94:df:fd:48:7f:31:62:58:
         0c:8a:ad:66:5e:66:05:75:5e:a4:42:fd:65:ce:c3:c4:b8:63:
         92:70:07:7d:36:76:99:15:8b:aa:a1:7e:18:bd:fc:f9:17:8a:
         4f:2d:49:08:bb:54:f5:07:89:46:8f:05:e4:e7:d4:88:cf:8e:
         d0:a1:79:34:98:a2:04:88:8b:ab:a0:16:3b:cc:0c:4c:b2:57:
         dd:1a:87:a1:56:39:34:c3:59:ab:7d:29:7b:5a:aa:b5:d8:10:
         f7:50:2e:91:c5:27:f5:f4:f5:7b:e1:85:2c:c5:0b:00:4d:c2:
         34:fc:8a:9f:3f:85:9a:de:bc:7a:8a:82:c0:e6:37:ca:4e:52:
         04:e6:67:5a:ca:d1:12:f8:5f:2a:f3:8f:24:b7:1c:e2:27:06:
         a5:c3:3f:22:27:37:69:92:4c:24:a1:d8:2b:6c:28:29:29:90:
         28:7e:50:90:67:21:75:84:67:69:48:45:db:da:cc:d0:3f:f8:
         7a:12:8d:d9:89:93:98:a3:7c:fa:e4:5c:ce:d9:ec:08:e7:fd:
         b1:d1:82:66:f6:d2:52:d8:92:63:c3:d8:58:ee:e4:76:fb:8c:
         f6:27:be:53:2d:77:d1:20:a1:f5:34:00:4b:31:de:c3:e8:81:
         41:fe:db:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:46 2026 by rpki-client