This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/PejTwsBdKH5-f3Vp_HDi2lV40HI.roa
File:                     PejTwsBdKH5-f3Vp_HDi2lV40HI.roa (raw, json)
Hash identifier:          sQMSKyXDXZzbEaxAsB9c8v4n+R0LYVRrVo36SmpYF40=
Subject key identifier:   3D:E8:D3:C2:C0:5D:28:7E:7E:7F:75:69:FC:70:E2:DA:55:78:D0:72
Certificate issuer:       /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial:       019B78342FF3085C45F5DC8B88E9B9EBAB93
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/PejTwsBdKH5-f3Vp_HDi2lV40HI.roa
Signing time:             Thu 01 Jan 2026 06:17:24 +0000
ROA not before:           Thu 01 Jan 2026 06:17:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1103
IP address blocks:        130.115.0.0/16 maxlen: 24
                          145.5.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:2f:f3:08:5c:45:f5:dc:8b:88:e9:b9:eb:ab:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
        Validity
            Not Before: Jan  1 06:17:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3de8d3c2c05d287e7e7f7569fc70e2da5578d072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:c6:2a:3f:7b:23:61:00:7e:06:d0:82:e3:
                    62:0a:15:09:f1:1d:88:f0:ea:fb:cf:4b:06:1b:e3:
                    11:ce:59:ed:43:3a:ae:f3:db:41:41:14:97:3a:bd:
                    b3:32:cf:14:bb:0d:b9:c7:d4:98:0d:3c:16:51:71:
                    9a:aa:45:b7:e1:3f:28:1e:fa:4e:e4:ae:e4:61:22:
                    ea:41:59:b9:9d:5a:0a:f1:ad:7e:40:2b:16:db:89:
                    cd:89:b0:8b:43:cf:8d:0b:8b:7c:5c:15:5d:4a:df:
                    0a:2c:6a:7e:75:cd:b7:81:b0:94:6b:ed:0b:1c:38:
                    71:1f:94:26:13:b2:53:a8:fd:6b:c4:11:a4:16:15:
                    a9:f4:bb:7d:ed:e0:88:02:e6:2e:96:4c:95:56:aa:
                    72:be:7c:e1:e0:b1:2b:e6:6b:5f:2e:b8:f5:ea:4d:
                    a7:bc:03:0c:97:70:42:cd:64:20:e9:ba:da:1a:b9:
                    f1:1d:77:d4:a7:34:99:d6:64:0f:e1:21:4b:75:b6:
                    40:7a:39:0b:e7:e8:e8:4b:b2:27:5b:2f:92:41:e6:
                    6a:b8:be:f8:07:ca:04:e9:46:12:ed:41:39:cf:d7:
                    47:5b:ed:3f:36:96:ea:c5:55:53:54:ce:94:85:26:
                    cd:b1:8e:f3:b8:ee:45:f8:2d:48:6c:0d:ac:19:f7:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E8:D3:C2:C0:5D:28:7E:7E:7F:75:69:FC:70:E2:DA:55:78:D0:72
            X509v3 Authority Key Identifier:
                keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/PejTwsBdKH5-f3Vp_HDi2lV40HI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.115.0.0/16
                  145.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:00:60:9a:47:49:bd:42:46:ad:41:be:68:a2:45:c2:e0:d9:
         da:f8:79:22:09:4b:be:f6:02:ad:85:87:34:87:5d:93:a9:99:
         17:b1:fe:5c:e0:fe:e3:73:1e:8a:c8:ba:e7:ab:aa:d2:48:fc:
         3f:88:31:50:f2:b2:ac:7a:70:47:1b:43:04:fb:bb:2b:c4:fa:
         f7:46:87:2f:e1:de:26:98:22:e0:c7:96:dd:dd:8d:10:6b:5f:
         64:43:d6:b9:80:0a:bd:34:5b:3c:1d:3e:6a:b6:ae:24:53:a1:
         e5:52:ac:3a:38:e8:eb:c1:67:c2:81:cf:3b:e0:28:5f:37:3d:
         63:8a:4c:47:c5:5d:ac:2c:95:5e:78:6a:c6:d4:10:7a:2f:ba:
         63:36:28:9a:62:b3:52:d8:5d:da:93:0d:96:10:c3:9d:c9:52:
         fc:ba:67:4a:4e:a5:e7:24:26:08:df:2f:f2:6b:f9:6a:89:df:
         e8:e3:b4:27:1b:83:35:10:be:32:9a:29:14:3b:e5:aa:3a:3d:
         79:25:8f:5f:2a:4f:45:5e:fc:ba:28:d6:d2:b6:6a:02:5b:c2:
         6c:9f:14:0a:2d:6e:15:30:d6:34:1a:87:00:6f:90:a9:8b:8b:
         71:58:ea:78:a9:36:e0:a8:4a:89:ce:d0:e9:04:58:0a:dd:fd:
         68:ca:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 01:44:03 2026 by rpki-client