This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xXeawBG_yUvvaYYX8ShJw2DTIFc.roa
File:                     xXeawBG_yUvvaYYX8ShJw2DTIFc.roa (raw, json)
Hash identifier:          agbjA58w70h103XlBAZlTq9j1vRUXq9ifmDEs9EN9qQ=
Subject key identifier:   C5:77:9A:C0:11:BF:C9:4B:EF:69:86:17:F1:28:49:C3:60:D3:20:57
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       019B2D4E6144C1C559D45DEB359B2BFB2A93
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xXeawBG_yUvvaYYX8ShJw2DTIFc.roa
Signing time:             Wed 17 Dec 2025 17:14:30 +0000
ROA not before:           Wed 17 Dec 2025 17:14:30 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214943
IP address blocks:        45.132.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:2d:4e:61:44:c1:c5:59:d4:5d:eb:35:9b:2b:fb:2a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: Dec 17 17:14:30 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c5779ac011bfc94bef698617f12849c360d32057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:10:34:52:5e:64:8c:36:2a:6d:50:b2:b9:
                    8a:d6:0a:ff:64:aa:5a:1e:7d:90:63:fa:25:eb:bd:
                    32:0f:ab:a7:13:fa:56:fd:29:b3:bd:fa:3a:11:b8:
                    0c:19:86:7e:d3:e5:7b:99:b5:a4:d2:c9:74:89:7b:
                    01:f1:d4:c2:5e:85:0e:c1:1a:3d:77:0b:fd:49:85:
                    5d:3c:c9:fc:8b:a5:c3:08:4b:26:85:94:af:bb:1d:
                    ed:3d:52:e4:c2:ce:33:c4:fa:4f:86:17:d5:5f:a9:
                    46:0b:b9:2b:93:91:64:12:23:30:6d:25:8d:f6:4e:
                    d1:e6:fe:e4:bd:97:30:ad:61:90:ce:06:4f:8c:60:
                    33:2a:d0:58:02:4b:4a:61:10:cb:10:cf:21:07:36:
                    47:35:34:b1:be:b9:6e:35:14:ae:20:88:cf:0a:14:
                    1c:2b:6e:02:17:24:c6:3c:00:4c:7e:c8:c4:67:62:
                    0b:11:e0:da:3a:36:6a:1c:00:ca:e8:02:ad:71:88:
                    9b:04:4a:dd:09:5a:8e:c3:86:d7:fd:75:ff:d1:21:
                    46:88:6d:92:40:20:fe:f6:c3:5a:90:ce:84:95:91:
                    1f:3c:ed:64:c3:10:df:bc:88:c5:1e:80:27:38:03:
                    37:59:41:b2:69:97:07:86:41:04:c8:b1:1f:88:b0:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:77:9A:C0:11:BF:C9:4B:EF:69:86:17:F1:28:49:C3:60:D3:20:57
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xXeawBG_yUvvaYYX8ShJw2DTIFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:08:9d:7b:8c:31:0e:6f:2d:5e:10:0a:77:77:cd:1b:a0:08:
         2e:5d:28:71:43:17:ae:0d:45:8e:ef:41:b7:c7:51:04:45:29:
         39:b0:6b:f9:69:d3:4b:d3:35:d4:93:7f:87:7f:e0:43:52:41:
         52:df:77:1c:cd:f6:11:6d:b3:27:f1:17:c0:af:a3:d4:67:4b:
         c1:10:e4:ea:ea:4e:6d:9c:20:25:0b:3b:f8:0d:45:43:5f:3d:
         7a:73:42:b0:5b:84:59:86:bc:8a:fc:87:08:44:11:13:36:d1:
         4e:97:f1:ac:7e:45:55:12:65:b9:59:a3:5d:50:c2:e5:03:eb:
         53:4f:0b:44:6a:f8:25:6d:5e:24:3d:ef:a1:ed:28:c3:11:f1:
         bd:e9:a7:e2:fb:fe:93:28:59:4a:f6:e9:ae:9b:b8:0f:fb:d7:
         e8:0f:93:d2:14:04:5f:a0:8a:b3:4d:14:11:c2:10:5b:8d:15:
         63:1a:3c:fb:75:30:b3:d6:93:24:cc:59:c0:e4:91:42:58:44:
         83:6c:cc:fb:9a:de:78:34:43:20:27:86:8f:7e:cc:e0:84:82:
         59:39:95:d5:21:d6:06:76:6f:35:32:9a:34:5e:66:45:3f:26:
         59:0b:22:e2:9f:90:50:03:3f:7e:b1:27:fa:9a:68:b5:5d:46:
         93:4a:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:42:13 2025 by rpki-client