This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/llmpvsJp6iJllq8aPzCHiXy7pDI.roa
File:                     llmpvsJp6iJllq8aPzCHiXy7pDI.roa (raw, json)
Hash identifier:          DANl4OSIWpehyMk+CpY4YG/h/rDOrMDg4VQVT2cFg7g=
Subject key identifier:   96:59:A9:BE:C2:69:EA:22:65:96:AF:1A:3F:30:87:89:7C:BB:A4:32
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019B7C803957925A7D0879449A99B01792C8
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/llmpvsJp6iJllq8aPzCHiXy7pDI.roa
Signing time:             Fri 02 Jan 2026 02:18:56 +0000
ROA not before:           Fri 02 Jan 2026 02:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     268581
IP address blocks:        45.157.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:39:57:92:5a:7d:08:79:44:9a:99:b0:17:92:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jan  2 02:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9659a9bec269ea226596af1a3f3087897cbba432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:26:19:df:21:1a:db:e8:09:2d:1d:22:01:
                    57:70:d4:ad:aa:2e:f4:ca:3e:e9:e1:66:6f:d3:3d:
                    de:48:a2:ba:f8:76:0d:64:a4:97:b2:2c:81:39:88:
                    04:02:c3:5f:a4:37:92:4e:28:38:4e:49:de:d2:60:
                    8e:66:76:80:2e:06:68:03:5b:58:38:c8:5c:29:f8:
                    e9:ef:26:be:a2:b8:ac:cd:86:e7:fc:61:0c:a1:81:
                    6b:12:63:7e:45:df:5c:7e:0c:5e:1f:72:27:b1:2b:
                    72:00:98:40:de:f1:e1:c9:4b:66:d1:28:a0:c9:e5:
                    6f:b4:13:3e:b2:c0:70:a7:83:ef:46:38:df:92:7a:
                    3a:19:3d:8a:64:ec:bc:df:e2:fc:5f:2e:eb:a9:6f:
                    32:7a:66:87:d2:dd:0b:7e:e7:dd:15:07:62:d6:25:
                    e8:62:92:26:90:fc:d8:38:e8:39:e4:a1:1d:f2:29:
                    e4:41:64:a1:8b:4d:6c:49:de:2c:d8:62:3f:2f:03:
                    a6:1e:b7:96:8e:6b:ab:c7:cb:2f:95:fa:9d:1f:24:
                    21:1c:4e:b5:f5:19:6b:4a:de:b1:dc:a6:a8:4d:91:
                    4e:d4:58:7f:68:a2:37:7f:57:af:01:1d:44:78:fa:
                    22:42:1d:4a:e9:2f:37:4e:93:b1:2d:b3:c6:32:18:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:59:A9:BE:C2:69:EA:22:65:96:AF:1A:3F:30:87:89:7C:BB:A4:32
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/llmpvsJp6iJllq8aPzCHiXy7pDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:64:f0:cf:aa:65:23:44:7c:5f:db:56:72:64:b9:d1:99:45:
         9b:d7:05:50:7c:fa:cc:71:b8:bd:d7:80:a1:dc:d1:a5:bc:aa:
         86:42:b7:18:65:01:b3:70:77:71:b5:e0:92:49:59:1a:f3:2e:
         ac:88:a5:e5:69:fd:90:a3:76:19:7a:cf:ba:07:fd:9f:f0:e8:
         65:3f:1e:9b:5d:fd:1a:41:2c:d0:af:55:a5:8a:d3:18:89:35:
         bb:65:e7:e7:d1:70:e5:bf:05:4f:09:76:98:46:19:f3:d8:da:
         e6:81:87:2c:6f:f4:61:26:c6:97:e1:b1:a6:b5:4f:d9:a6:9e:
         72:5e:d7:46:f7:d1:90:92:ac:2c:5d:13:fd:9d:24:15:8c:3c:
         87:50:a8:7c:a7:03:73:20:66:3e:8f:eb:98:7b:ef:db:89:c2:
         c1:c3:36:bf:10:0e:8a:1f:e1:f5:24:40:8a:5a:1c:9e:94:99:
         77:a6:c3:a8:e2:0e:8f:07:e3:ff:67:2b:c8:ba:47:16:0b:23:
         63:bb:b5:41:4b:3d:f4:11:e9:e1:48:f3:b5:d2:37:9e:f4:a0:
         f8:99:0f:b2:60:87:3b:f2:a0:23:b6:f1:44:26:66:45:c3:6b:
         d1:fa:8d:e2:a5:16:81:57:7c:5d:01:46:6c:6c:42:a1:b9:f7:
         bb:e3:63:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gDlXklp9CHlEmpmwF5LIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl
OGVmOTQwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjU5YTliZWMyNjllYTIyNjU5NmFmMWEzZjMwODc4OTdjYmJhNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSMmGd8hGtvoCS0dIgFXcNStqi70
yj7p4WZv0z3eSKK6+HYNZKSXsiyBOYgEAsNfpDeSTig4Tkne0mCOZnaALgZoA1tY
OMhcKfjp7ya+oriszYbn/GEMoYFrEmN+Rd9cfgxeH3InsStyAJhA3vHhyUtm0Sig
yeVvtBM+ssBwp4PvRjjfkno6GT2KZOy83+L8Xy7rqW8yemaH0t0LfufdFQdi1iXo
YpImkPzYOOg55KEd8inkQWShi01sSd4s2GI/LwOmHreWjmurx8svlfqdHyQhHE61
9RlrSt6x3KaoTZFO1Fh/aKI3f1evAR1EePoiQh1K6S83TpOxLbPGMhh2wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJZZqb7CaeoiZZavGj8wh4l8u6QyMB8GA1UdIwQY
MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut
MjEwNTdkMjI4ZDA1LzEvbGxtcHZzSnA2aUpsbHE4YVB6Q0hpWHk3cERJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1
LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ2cMA0G
CSqGSIb3DQEBCwUAA4IBAQCKZPDPqmUjRHxf21ZyZLnRmUWb1wVQfPrMcbi914Ch
3NGlvKqGQrcYZQGzcHdxteCSSVka8y6siKXlaf2Qo3YZes+6B/2f8OhlPx6bXf0a
QSzQr1WlitMYiTW7Zefn0XDlvwVPCXaYRhnz2NrmgYcsb/RhJsaX4bGmtU/Zpp5y
XtdG99GQkqwsXRP9nSQVjDyHUKh8pwNzIGY+j+uYe+/bicLBwza/EA6KH+H1JECK
WhyelJl3psOo4g6PB+P/ZyvIukcWCyNju7VBSz30EenhSPO10jee9KD4mQ+yYIc7
8qAjtvFEJmZFw2vR+o3ipRaBV3xdAUZsbEKhufe742MC
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:52 2026 by rpki-client