This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa
File:                     j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa (raw, json)
Hash identifier:          gQFSyERJDH6nAPPc5747gmPm78inz3QBTsIip7aNmlE=
Subject key identifier:   8F:D2:33:C2:EF:E1:95:B1:E0:7D:DB:2B:11:E9:09:E0:08:72:37:17
Certificate issuer:       /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial:       019B7F15779651F500B713445B2134D32AB5
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa
Signing time:             Fri 02 Jan 2026 14:21:11 +0000
ROA not before:           Fri 02 Jan 2026 14:21:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216475
IP address blocks:        45.112.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:77:96:51:f5:00:b7:13:44:5b:21:34:d3:2a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
        Validity
            Not Before: Jan  2 14:21:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fd233c2efe195b1e07ddb2b11e909e008723717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:59:8d:a1:49:70:e5:dd:01:7c:be:e5:05:
                    b8:eb:55:ef:32:aa:37:55:6c:c9:92:7d:ef:5f:c6:
                    2c:a4:f2:4a:9d:fe:a2:5c:9a:62:21:28:71:e2:c4:
                    57:91:c1:2b:ba:0d:48:8b:45:7a:d0:62:b1:d1:5c:
                    e6:0d:ed:09:88:ae:55:63:d4:e4:5f:ca:e0:88:eb:
                    28:e8:3e:3c:ef:c9:a9:ed:83:54:c6:8b:44:20:57:
                    9f:3f:55:68:26:e9:de:ad:b3:d1:fe:02:ea:7a:d2:
                    37:31:a4:3f:ef:11:c9:bc:f9:0c:6b:00:d7:ff:c7:
                    d9:ac:9d:d0:75:f6:32:e3:09:f4:9e:73:39:bf:32:
                    09:79:d0:31:13:a9:12:0d:ef:31:8a:8f:ed:9c:7a:
                    f5:73:99:47:bd:29:6c:69:bb:2a:40:55:22:46:9d:
                    05:12:83:d1:ef:3d:1f:61:f6:e7:ca:2c:1d:7f:77:
                    2b:84:19:af:26:00:f5:df:90:d9:44:9f:69:41:ed:
                    5d:bc:4b:5c:7d:81:c1:2b:de:3a:e1:20:2b:f8:de:
                    fa:c5:b3:af:56:e9:e8:48:60:47:dc:35:12:a9:a2:
                    e7:f9:b2:90:3a:eb:7b:f1:24:94:89:e9:c6:c3:83:
                    68:07:96:77:e5:21:27:2f:e7:cd:ff:2c:09:e7:25:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D2:33:C2:EF:E1:95:B1:E0:7D:DB:2B:11:E9:09:E0:08:72:37:17
            X509v3 Authority Key Identifier:
                keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/j9Izwu_hlbHgfdsrEekJ4AhyNxc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:f0:83:54:83:f4:f9:55:78:c5:e9:9b:8c:04:78:13:76:
         4c:a0:f2:94:f7:92:ca:37:6e:a1:13:3b:a2:60:16:7a:c5:bb:
         19:af:af:cc:99:4a:2c:3b:7f:c8:3f:1e:8f:4d:72:b1:f1:62:
         58:d4:3b:3e:0f:74:85:2b:cc:16:c8:71:8c:a8:42:04:6c:a9:
         6f:9d:d3:9b:16:b7:49:73:7d:4e:63:4a:4b:af:df:8c:9c:c2:
         46:75:22:39:a0:2c:30:57:c7:30:2d:15:54:87:a3:72:66:f6:
         70:84:b7:20:0e:d5:9a:05:e9:ab:57:b9:f3:45:3e:9d:83:04:
         c0:19:52:7d:c2:6a:67:8f:69:57:09:ad:e3:13:b1:c2:80:ce:
         b3:19:5a:b1:57:48:5a:b1:4b:7d:85:83:0a:10:03:fb:01:fe:
         3e:1f:14:79:a7:29:51:87:ee:1e:d5:8d:3b:65:5c:09:16:b2:
         7c:a8:69:ae:d6:21:be:59:49:0a:29:1f:50:0c:03:1f:55:d0:
         39:5a:40:7f:b5:0f:16:a1:f8:23:75:7a:18:95:0c:a1:08:33:
         e2:d7:af:ee:31:cc:e5:da:3f:8f:75:05:bc:f5:b0:b6:40:9b:
         3f:a6:a9:7b:f2:8e:4e:62:1d:de:71:e6:d1:1b:ba:b9:23:7a:
         5e:27:bf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:48 2026 by rpki-client