This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/_bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa
File:                     _bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa (raw, json)
Hash identifier:          43+13/xiT3wMEpfoLe4Sy/ExJmNhgvNKxVgEkujyVA8=
Subject key identifier:   FD:B0:AB:15:BE:D5:0B:80:82:77:D2:BE:59:CB:BF:E5:5D:9B:47:55
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       019B7EA7059AE497E03A9AECFD124238585B
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/_bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa
Signing time:             Fri 02 Jan 2026 12:20:33 +0000
ROA not before:           Fri 02 Jan 2026 12:20:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20454
IP address blocks:        45.156.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:05:9a:e4:97:e0:3a:9a:ec:fd:12:42:38:58:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Jan  2 12:20:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fdb0ab15bed50b808277d2be59cbbfe55d9b4755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:56:03:9d:62:e4:74:63:a2:9c:a1:9c:a8:
                    a3:53:80:2b:ac:3c:36:61:4b:6e:3a:93:82:d7:39:
                    4b:e6:2f:f7:c7:af:11:10:8c:16:07:1d:60:fd:ed:
                    47:5c:5d:6b:9d:09:35:df:c9:7b:f1:29:0b:dc:25:
                    eb:e7:de:6f:e3:2f:8e:bb:5a:bb:47:37:96:9f:3a:
                    bb:61:fe:b4:65:60:5f:eb:82:06:f1:08:18:6e:63:
                    97:14:46:01:20:de:c2:4c:5d:70:93:c8:a3:5c:18:
                    bc:74:07:36:98:9a:cc:46:c0:d9:14:f8:5a:52:b7:
                    b5:9b:b3:3f:f1:55:80:0b:77:f7:fc:9b:1e:27:13:
                    be:14:a2:d2:4f:8c:b6:8a:e1:b0:3b:61:85:f5:bf:
                    6c:14:d2:69:a5:6f:42:14:15:37:38:25:fe:4d:98:
                    88:47:09:1c:d3:24:e6:8d:a4:85:b5:d9:0f:ef:14:
                    ec:7c:d0:e9:15:15:af:96:43:fe:55:78:23:bc:bd:
                    14:37:9f:30:c9:c4:ee:45:30:0c:0f:ab:b3:50:59:
                    7e:b5:1b:e3:b8:ca:b0:88:3f:ab:11:79:37:12:d7:
                    56:86:76:34:98:d0:a9:6e:41:b1:d4:58:b4:36:e1:
                    0e:5f:03:4f:86:4a:6d:22:01:1d:84:74:da:c0:74:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B0:AB:15:BE:D5:0B:80:82:77:D2:BE:59:CB:BF:E5:5D:9B:47:55
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/_bCrFb7VC4CCd9K-Wcu_5V2bR1U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:93:36:0e:1e:d4:b3:88:09:30:30:8a:17:3f:03:96:42:f1:
         f6:83:1f:43:37:f1:7e:b7:3a:df:6c:8d:3f:03:6a:1e:65:98:
         12:85:c7:40:0e:75:4c:65:88:61:56:d5:9c:54:1f:8f:f7:a3:
         78:a3:2e:cb:b4:27:c0:23:15:7f:db:7f:7e:9e:7a:85:8a:6b:
         b4:5e:3d:f1:85:f5:da:a0:c6:49:fb:7b:a2:0d:54:8d:5e:12:
         ed:7b:5d:39:c7:ee:2d:80:b1:bc:84:a2:ae:75:13:76:e0:55:
         53:12:dd:18:9f:3e:2d:d4:1e:81:2a:b1:4d:89:6b:d4:e5:41:
         9b:e6:20:91:01:c4:3e:30:fa:85:7c:0c:5f:ad:65:6b:d7:12:
         75:59:ed:34:8d:2b:9a:26:e5:da:d3:11:f2:76:e8:27:3f:8c:
         b7:4e:25:fd:3b:3a:f0:b1:f6:17:03:df:4a:8e:27:38:d3:86:
         80:77:14:01:98:0f:64:c9:5d:0b:43:20:44:f8:93:66:30:eb:
         9d:1d:31:c4:0c:a1:90:e3:b7:94:bf:e8:9c:25:3c:d0:61:86:
         72:d4:58:d2:33:34:41:5a:2c:7d:31:92:54:12:c0:5a:0f:11:
         15:51:e4:a2:39:49:43:e8:2f:d9:64:a6:c6:bc:b6:38:70:95:
         6e:23:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:20:18 2026 by rpki-client