This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/V0hqPIINhp_WNvjzrr7PJydJ3zE.roa
File:                     V0hqPIINhp_WNvjzrr7PJydJ3zE.roa (raw, json)
Hash identifier:          201DsxPOm6cpm2Im3U0XIX6Q6+lglCsbvOqe62R0Yfc=
Subject key identifier:   57:48:6A:3C:82:0D:86:9F:D6:36:F8:F3:AE:BE:CF:27:27:49:DF:31
Certificate issuer:       /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial:       019B77C761213E0BC5C67D75D7DF4BD9FD46
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/V0hqPIINhp_WNvjzrr7PJydJ3zE.roa
Signing time:             Thu 01 Jan 2026 04:18:33 +0000
ROA not before:           Thu 01 Jan 2026 04:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35224
IP address blocks:        45.93.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 00:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:61:21:3e:0b:c5:c6:7d:75:d7:df:4b:d9:fd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
        Validity
            Not Before: Jan  1 04:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57486a3c820d869fd636f8f3aebecf272749df31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:b5:75:49:41:6a:0e:53:61:70:05:8f:7d:
                    08:93:64:b3:dd:b4:f4:9a:81:2f:09:e3:ef:9c:ec:
                    72:10:66:a9:09:b1:2c:c7:e6:08:6f:49:95:78:ea:
                    94:2b:bd:93:74:72:c9:02:65:5a:3a:d1:e7:e8:b2:
                    6c:d5:ef:5e:d4:c6:b7:01:1e:f8:91:22:a4:94:c7:
                    c5:91:c6:53:99:b5:ef:b7:27:61:45:62:e2:14:f3:
                    53:63:52:a5:24:5b:e1:f8:93:12:2b:45:9a:6e:42:
                    91:cc:8f:71:ef:d3:27:3e:a6:e0:b7:e9:50:83:4f:
                    8f:cd:84:d9:fe:16:ca:a9:d3:55:75:59:b7:52:73:
                    2e:ce:b7:3a:5b:d1:45:07:f7:e8:e6:f8:78:39:47:
                    73:7f:7a:64:54:e6:d1:a3:4a:62:4e:a1:25:46:4c:
                    a9:2c:3d:20:7d:10:5b:c4:06:e6:26:d0:ef:68:3d:
                    b4:64:bf:41:48:dd:ee:5c:a9:0c:c9:76:d0:c4:af:
                    92:e5:67:56:99:25:db:23:0b:26:7c:6f:24:4d:80:
                    fd:71:be:9a:14:22:e3:a5:20:aa:ac:9a:15:f8:c8:
                    5e:dd:b8:bf:73:18:a3:a0:c7:57:ea:6f:40:eb:64:
                    21:7a:89:b8:0a:13:0a:4e:b5:44:93:48:c1:48:f0:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:6A:3C:82:0D:86:9F:D6:36:F8:F3:AE:BE:CF:27:27:49:DF:31
            X509v3 Authority Key Identifier:
                keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/V0hqPIINhp_WNvjzrr7PJydJ3zE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:89:be:34:f4:8b:3e:48:85:6d:52:c1:e8:f7:ef:52:bc:fb:
         10:48:03:b6:8d:b4:70:2e:0d:4e:49:d3:e3:ab:34:2d:cf:6a:
         f1:de:94:76:6b:fe:06:4e:70:67:62:0e:3b:b7:44:29:50:09:
         9f:d5:e1:06:21:3b:7c:96:28:60:70:1c:14:22:c5:10:94:ec:
         ae:67:4c:b5:03:3f:f7:6e:cf:58:98:e0:0e:f7:df:86:80:c0:
         98:35:3c:de:a5:82:2c:6c:a7:15:5b:ad:90:b3:06:ec:49:24:
         49:3f:2c:15:6a:8a:6e:eb:70:0e:5a:a5:78:e9:a6:4a:82:ca:
         66:b5:1f:17:ed:30:7f:8b:44:27:db:f0:22:2a:d8:72:39:f0:
         48:66:5b:e3:91:25:c8:a7:6f:c4:fa:b9:6e:ac:01:40:2c:fa:
         3c:7d:98:13:79:a8:aa:f5:df:94:d3:f2:5e:66:56:08:e6:c7:
         cb:a5:cc:80:f3:84:b9:bd:da:26:06:01:f7:06:50:18:ee:60:
         70:02:25:23:d5:f2:3a:30:2a:aa:c6:72:e4:c4:af:45:7f:2d:
         20:d1:07:b9:2b:c8:db:51:03:67:3b:9c:ae:a7:51:db:e9:f0:
         56:6c:59:9b:95:40:39:e3:08:d5:0d:e6:53:1b:ba:46:ef:30:
         af:b5:2e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 09:11:15 2026 by rpki-client