This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/j72ehUcYFQsY8mwd247RHKpGmrA.roa
File:                     j72ehUcYFQsY8mwd247RHKpGmrA.roa (raw, json)
Hash identifier:          R5PTXqk1HdBWYa8WeY/H3/r2BVqX4E5o1X6EGl909q8=
Subject key identifier:   8F:BD:9E:85:47:18:15:0B:18:F2:6C:1D:DB:8E:D1:1C:AA:46:9A:B0
Certificate issuer:       /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial:       019B7A5AD5D786D26AB273F4CDDA4F3AD8DA
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/j72ehUcYFQsY8mwd247RHKpGmrA.roa
Signing time:             Thu 01 Jan 2026 16:18:51 +0000
ROA not before:           Thu 01 Jan 2026 16:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5577
IP address blocks:        185.5.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:d5:d7:86:d2:6a:b2:73:f4:cd:da:4f:3a:d8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
        Validity
            Not Before: Jan  1 16:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fbd9e854718150b18f26c1ddb8ed11caa469ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ef:b7:9c:6a:07:05:03:52:27:d3:10:4c:e2:
                    db:3c:36:2a:52:ca:82:bb:91:fd:06:fd:9a:c6:df:
                    51:d9:b8:a9:01:a8:e5:cc:29:f3:7d:84:69:2c:bd:
                    41:82:be:24:73:17:be:c7:56:93:a2:14:32:5e:e0:
                    fd:e7:81:69:13:e7:09:32:d2:40:e8:42:a2:b6:34:
                    08:a0:45:b3:10:ec:9e:9f:21:93:80:30:e4:d2:76:
                    db:ee:1c:16:df:c2:d3:db:af:aa:05:db:4d:82:06:
                    8a:68:31:91:57:4d:66:36:e1:9c:5d:32:ce:8c:b5:
                    08:d1:b0:8f:c7:75:1a:fe:5d:87:75:6d:a6:3f:22:
                    c9:4c:52:0e:b8:a7:04:a9:60:40:8e:2a:0e:80:0b:
                    1d:39:2d:b1:d1:d4:68:85:b8:80:34:c5:96:d7:29:
                    bc:92:23:16:7e:9a:06:fe:43:e0:bd:0f:6e:89:46:
                    86:68:4e:ef:93:58:54:02:97:dd:78:b6:04:e0:18:
                    fa:cb:79:b7:d7:f2:42:e9:98:64:85:77:c6:a5:3d:
                    cf:08:a5:86:65:15:d6:a2:f7:f6:b3:27:47:b9:b7:
                    29:f9:28:66:ff:b8:8f:fe:07:93:39:2f:83:7d:0e:
                    92:db:bb:86:d5:55:7b:21:84:cb:77:02:1d:0a:a7:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BD:9E:85:47:18:15:0B:18:F2:6C:1D:DB:8E:D1:1C:AA:46:9A:B0
            X509v3 Authority Key Identifier:
                keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/j72ehUcYFQsY8mwd247RHKpGmrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:4d:03:0d:79:e9:b7:b6:07:5c:f6:e7:51:34:fd:3f:1f:
         03:cb:24:0e:b2:69:3d:58:93:c2:91:2b:f3:49:fd:2a:8d:84:
         ed:a7:f6:b0:be:ac:3c:07:25:71:7e:5f:59:e9:e6:00:94:d2:
         b4:e6:da:fa:23:9b:fe:8d:c3:c5:66:95:cf:c7:b5:29:c9:ac:
         cd:39:d7:e7:81:6c:6d:c5:e4:f3:fb:4b:e0:ec:3c:d5:b6:46:
         f9:b3:ce:a1:16:ce:cb:4c:dc:c8:ea:12:3f:49:8a:28:8e:fb:
         e6:a3:2e:eb:95:4e:28:f1:6c:f1:34:58:02:82:c0:19:a2:bf:
         16:a4:da:b7:d3:d9:32:9f:d1:bf:df:33:d2:ea:92:1d:38:b0:
         cb:90:3d:d4:d8:02:f3:0b:24:22:2e:40:dc:f4:7f:7c:9c:7f:
         9e:2e:f2:9a:4f:17:04:7f:31:b0:4a:43:45:f0:5a:eb:52:3e:
         85:9b:5b:33:e8:2d:e6:20:2b:8e:90:93:6d:4b:51:9f:95:9c:
         d9:44:4c:1a:69:af:c7:40:ba:39:0d:2b:63:c1:ab:d7:1b:7f:
         4b:9b:93:f1:88:95:84:7f:ee:8c:f1:5b:01:c1:46:b2:7d:b1:
         89:6c:4a:3c:6c:2e:d3:f7:f1:b8:ca:84:5a:80:2d:77:c6:81:
         60:65:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:27:29 2026 by rpki-client