This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/A3holTySzikt80r_qVKjjeuc5o0.roa
File:                     A3holTySzikt80r_qVKjjeuc5o0.roa (raw, json)
Hash identifier:          vqBDtNK41Wi0cyX9dVklRZc5KLb1M55xUagg9Nj9B/c=
Subject key identifier:   03:78:68:95:3C:92:CE:29:2D:F3:4A:FF:A9:52:A3:8D:EB:9C:E6:8D
Certificate issuer:       /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial:       019B7CED0729C1DD510731AAE03A9114E065
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/A3holTySzikt80r_qVKjjeuc5o0.roa
Signing time:             Fri 02 Jan 2026 04:17:47 +0000
ROA not before:           Fri 02 Jan 2026 04:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136268
IP address blocks:        45.154.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:07:29:c1:dd:51:07:31:aa:e0:3a:91:14:e0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
        Validity
            Not Before: Jan  2 04:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=037868953c92ce292df34affa952a38deb9ce68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:85:57:c3:24:81:0d:b1:ac:72:54:49:32:
                    82:7d:a7:61:3f:54:29:84:a3:5d:21:0f:8d:bd:87:
                    a0:1c:08:8f:4c:02:55:0e:e4:58:12:32:26:7d:22:
                    e7:49:3e:97:a5:28:8a:31:3b:b3:c8:0c:c0:6b:af:
                    2b:d6:a3:01:2c:28:0d:8d:03:2d:bf:cb:c2:a5:5f:
                    9e:dc:98:40:e9:cb:7d:a5:75:a2:6b:dc:a3:f5:c8:
                    26:a8:20:fa:29:08:54:18:c9:99:a6:41:37:9d:54:
                    1a:49:25:64:a3:d1:e5:2e:3c:95:08:5b:85:38:b0:
                    2b:3f:49:f8:1c:59:d6:99:54:e9:b7:e9:85:60:c6:
                    5d:e3:60:ca:30:3c:b4:48:f5:c6:25:0b:07:a8:e8:
                    85:32:d3:0a:ba:2d:30:5e:91:5a:1b:70:48:bf:75:
                    42:69:c6:cf:77:1f:84:a0:f1:f9:f4:bb:65:f9:9a:
                    a2:bb:07:3d:2c:44:39:28:a1:3d:27:75:54:b2:d0:
                    fb:9a:26:d3:cf:a7:b3:22:b3:63:db:c8:4a:32:32:
                    8c:eb:e9:16:4e:33:db:ff:93:24:d3:36:c6:2f:e8:
                    1f:5e:64:b7:37:ae:48:c4:fc:d6:92:fb:3b:38:5f:
                    86:1e:28:09:40:57:30:05:17:ff:3d:80:a2:0f:75:
                    01:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:68:95:3C:92:CE:29:2D:F3:4A:FF:A9:52:A3:8D:EB:9C:E6:8D
            X509v3 Authority Key Identifier:
                keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/A3holTySzikt80r_qVKjjeuc5o0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:00:3e:46:d6:37:f8:22:16:48:fa:7d:76:79:fe:2b:4a:39:
         bd:84:3f:57:39:d1:21:4a:8d:e7:c0:c0:cf:1d:db:57:84:cb:
         ff:36:5a:bd:7e:2d:5e:01:f8:17:9e:71:0b:dc:eb:89:28:02:
         41:df:54:06:24:3c:c3:ce:02:f9:50:d9:bc:19:be:4b:fa:8b:
         e2:9b:92:d2:97:da:bb:8c:58:07:34:ac:6f:93:16:c9:81:7c:
         62:60:00:e0:ad:62:5a:1f:49:ae:31:95:0c:12:16:58:87:e2:
         7a:13:f4:ca:7e:80:e7:5b:cc:25:ee:93:60:89:51:97:29:3b:
         32:28:b4:4c:c7:7a:c3:07:35:e3:d8:61:90:4f:5a:2c:17:0e:
         59:cb:07:e1:cd:72:bb:78:93:ea:9f:e4:76:21:58:36:c3:e3:
         e0:33:13:d1:f0:b0:27:d1:58:e1:00:37:9d:61:e4:03:db:bf:
         f4:6e:59:de:26:91:cd:5c:2d:f2:96:0b:e8:91:19:dd:c2:a2:
         f3:02:1f:76:d4:37:76:c0:5d:ed:bf:6b:fe:ab:ff:3f:ca:8a:
         26:67:3e:e4:10:66:8e:be:c8:47:2c:3d:3b:05:ef:47:97:fd:
         91:b6:d9:f1:df:b1:05:9a:ee:6f:a0:ad:a9:70:be:a4:bb:5d:
         b8:33:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:07:06 2026 by rpki-client