This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R5yV4CU5_TwBwhPHlxg8QkQn2wE.roa
File:                     R5yV4CU5_TwBwhPHlxg8QkQn2wE.roa (raw, json)
Hash identifier:          h4/I/EmDK/HtuAV5MsstEQ/Nt0mR4i2bF2fNF5/770w=
Subject key identifier:   47:9C:95:E0:25:39:FD:3C:01:C2:13:C7:97:18:3C:42:44:27:DB:01
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019AF91089EE8F081B258676137F9EF03086
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R5yV4CU5_TwBwhPHlxg8QkQn2wE.roa
Signing time:             Sun 07 Dec 2025 13:46:41 +0000
ROA not before:           Sun 07 Dec 2025 13:46:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     26666
IP address blocks:        45.128.244.0/24 maxlen: 24
                          45.128.245.0/24 maxlen: 24
                          45.128.246.0/24 maxlen: 24
                          45.128.247.0/24 maxlen: 24
                          2a0f:1480::/29 maxlen: 29
                          2a0f:2f80::/29 maxlen: 29
                          2a0f:35c0::/29 maxlen: 29
                          2a0f:4f80::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f9:10:89:ee:8f:08:1b:25:86:76:13:7f:9e:f0:30:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Dec  7 13:46:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=479c95e02539fd3c01c213c797183c424427db01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:85:f0:e6:8f:46:f8:dc:74:8b:5d:25:b6:f0:
                    56:c9:c5:65:3d:88:53:54:68:91:9d:ba:4a:60:47:
                    c0:ab:96:31:70:2b:a0:d6:22:d9:85:17:71:7a:07:
                    4c:b9:1b:85:f6:c9:5a:6c:0f:f9:64:2b:1f:4d:ee:
                    7a:ad:ee:9a:6c:38:97:54:f5:40:3b:04:c6:76:10:
                    09:91:9c:c7:61:c7:70:ce:40:1d:c2:45:19:9e:f1:
                    4f:fb:7b:af:1b:57:c0:53:c0:69:f0:e9:aa:95:44:
                    de:f5:d9:c5:7e:95:70:8c:c5:dc:60:f5:74:66:c5:
                    f2:e5:96:51:5e:04:56:83:e0:92:ea:28:c0:32:72:
                    82:06:9e:a6:db:f9:d5:88:29:ca:54:1b:11:fa:9a:
                    5e:76:49:f2:71:8c:b0:38:30:6d:13:5a:f5:9e:07:
                    80:01:c6:ac:1c:77:00:b6:b8:d1:88:8b:0f:53:6d:
                    39:bd:94:f1:61:14:0c:28:ae:a4:52:54:1b:c9:e9:
                    fa:ff:d7:e6:80:0d:a7:ce:08:9a:49:c7:45:29:b5:
                    62:f3:d0:5c:95:ed:4b:73:c6:ea:65:c5:bb:69:ec:
                    99:64:37:0f:cc:9d:4b:c5:3a:91:a6:c3:04:78:86:
                    78:ee:7a:0e:4c:8d:43:34:e9:ed:bb:c2:80:0b:ed:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9C:95:E0:25:39:FD:3C:01:C2:13:C7:97:18:3C:42:44:27:DB:01
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/R5yV4CU5_TwBwhPHlxg8QkQn2wE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.244.0/22
                IPv6:
                  2a0f:1480::/29
                  2a0f:2f80::/29
                  2a0f:35c0::/29
                  2a0f:4f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         c6:28:e5:0f:4b:6e:1c:f7:87:a4:75:bb:52:fc:04:d3:91:4e:
         57:98:89:15:63:53:da:fa:28:d2:22:f5:a4:b9:88:1f:d8:56:
         e2:98:e2:73:65:d3:22:a4:6c:f2:3a:39:0c:cc:9d:50:15:93:
         a4:20:9b:77:0f:ac:b4:4b:7e:0e:71:01:53:4e:35:ec:4d:10:
         4d:cd:3e:93:9a:1b:7b:35:de:39:3e:56:c3:55:cc:76:78:c4:
         a6:09:31:ed:7c:aa:68:ab:f5:91:48:d4:00:be:f1:a8:e1:ae:
         14:2c:63:29:80:80:19:19:48:45:9f:66:20:c0:db:d6:73:86:
         11:9c:1a:5c:3c:a5:7e:4c:67:5f:3c:45:fd:b3:d3:03:a5:d6:
         c0:37:7a:71:10:4f:60:b0:75:94:eb:3a:c7:ed:4c:41:5a:3d:
         58:89:8d:d7:50:e7:56:a0:09:06:0f:cd:64:98:30:98:bb:80:
         cf:ab:4f:4d:8d:56:02:93:09:87:e1:c1:1c:9b:b5:c0:00:98:
         04:b7:72:ad:45:4e:31:0f:0b:3e:8f:96:c4:69:23:3c:b9:85:
         cd:02:68:74:27:80:59:83:08:d2:b9:71:3d:87:aa:43:33:25:
         a3:72:d9:26:66:85:e4:05:a8:c9:c4:cb:1f:01:fe:ee:e1:dd:
         a8:9f:57:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:29:26 2025 by rpki-client