This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa
File:                     nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (raw, json)
Hash identifier:          NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=
Subject key identifier:   9C:6C:F3:24:BE:18:BF:F6:90:39:B1:10:50:72:6D:6D:89:C2:89:54
Certificate issuer:       /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial:       019B7EA547DE3CFA420AA26833CD51AAAC41
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa
Signing time:             Fri 02 Jan 2026 12:18:39 +0000
ROA not before:           Fri 02 Jan 2026 12:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     268581
IP address blocks:        45.140.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:47:de:3c:fa:42:0a:a2:68:33:cd:51:aa:ac:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
        Validity
            Not Before: Jan  2 12:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9c6cf324be18bff69039b11050726d6d89c28954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:f8:b2:be:dc:57:37:d4:a7:b2:91:92:52:
                    7b:2c:55:9e:3f:ae:12:6c:44:b1:e4:3c:36:30:ce:
                    e6:12:90:b6:16:29:7c:54:e0:f2:b3:af:db:a2:d9:
                    ed:6a:b0:bf:f1:58:e1:0e:11:40:b6:1d:2d:6f:cc:
                    08:bb:7b:04:20:b8:50:7e:83:97:c5:46:90:c8:ee:
                    ce:52:d5:ec:5b:96:20:86:4f:56:6a:8e:1a:71:0a:
                    16:48:e9:73:95:e5:1b:ed:70:cc:21:7d:e4:0c:e8:
                    8a:dd:20:29:cf:92:01:be:93:c3:98:2b:4e:ab:d4:
                    25:c6:d6:ae:d5:8e:9e:2a:ae:ff:c0:5b:33:a5:5e:
                    d4:48:86:95:b3:3a:02:d7:a5:96:ca:00:dc:11:2d:
                    91:3d:48:78:9a:84:57:a8:60:e5:89:ce:7e:81:04:
                    26:9a:78:bf:b5:0f:8e:74:e9:40:ac:22:91:a5:f6:
                    91:de:c3:97:9b:ef:63:5a:a9:37:78:ff:b7:45:e4:
                    a7:25:93:00:74:ab:2f:42:e0:1a:c0:34:ff:5a:5a:
                    d7:37:a0:22:90:1d:28:c2:75:1e:8e:1d:95:99:72:
                    f9:fe:65:ac:c2:c9:a8:3e:b5:ee:09:b1:72:ef:82:
                    43:31:cd:79:69:99:38:ed:ee:37:86:d6:b7:09:da:
                    ec:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6C:F3:24:BE:18:BF:F6:90:39:B1:10:50:72:6D:6D:89:C2:89:54
            X509v3 Authority Key Identifier:
                keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:c2:65:1f:90:40:5a:70:68:c9:5d:b0:36:b2:7f:70:12:b0:
         24:19:08:68:43:9d:4b:f3:c8:6e:93:c0:e5:c3:8c:29:4d:50:
         ed:8a:10:e1:3f:95:af:55:9f:89:c7:ae:2c:8d:38:97:a1:35:
         b9:2f:f3:7f:70:98:b1:a2:05:9a:d8:66:57:44:ae:12:66:aa:
         37:59:8b:6f:09:69:db:0c:7e:70:a5:32:a1:e4:16:6f:b3:62:
         32:1d:0a:71:b6:fc:32:f3:4f:19:56:af:c5:de:b7:72:c8:fd:
         0e:99:25:87:bd:27:7b:5f:6d:13:0a:c6:55:86:d7:50:f8:e6:
         06:1c:03:00:a5:aa:53:35:23:8b:43:ce:22:5f:77:a5:1c:22:
         2d:01:35:03:5c:17:71:bd:9d:fd:6f:48:43:cb:a2:87:b7:43:
         d2:7b:1c:4a:18:89:b3:81:64:29:43:ee:38:a1:b1:e8:cb:e0:
         b8:13:82:1e:d1:f0:7d:f9:e2:93:14:3f:5e:b7:4f:a7:96:ac:
         e9:55:60:73:f8:63:b2:b9:63:e4:e3:c3:e6:fe:8e:dc:2f:56:
         37:07:a6:63:95:52:e0:d6:92:05:9a:af:c8:65:06:57:4d:62:
         c1:92:3c:68:a9:1c:8f:f4:d5:13:78:0e:31:32:fb:15:2f:f4:
         ba:b3:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:23 2026 by rpki-client