This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TxIIRlN90qmHNpSsYrDt6T20_ak.roa
File:                     TxIIRlN90qmHNpSsYrDt6T20_ak.roa (raw, json)
Hash identifier:          7EyxzdyjM86gq252nfCGpb4/6kaun1QmxyxmSUqStcc=
Subject key identifier:   4F:12:08:46:53:7D:D2:A9:87:36:94:AC:62:B0:ED:E9:3D:B4:FD:A9
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       019B7C804CFF03E8F48C1E37D6B10B940FBF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TxIIRlN90qmHNpSsYrDt6T20_ak.roa
Signing time:             Fri 02 Jan 2026 02:19:01 +0000
ROA not before:           Fri 02 Jan 2026 02:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19318
IP address blocks:        45.135.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:4c:ff:03:e8:f4:8c:1e:37:d6:b1:0b:94:0f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jan  2 02:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4f120846537dd2a9873694ac62b0ede93db4fda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:26:61:f9:33:b8:85:56:15:d8:28:47:95:d1:
                    a2:83:cb:42:b5:34:4f:7c:4e:01:f0:18:1f:bc:1b:
                    6b:a7:5b:59:5e:c5:70:4c:1e:58:b5:00:29:dd:f3:
                    94:6a:24:30:1f:cf:1c:12:0b:ec:0f:22:b5:84:98:
                    05:6f:32:c3:6b:59:20:37:55:a1:88:a9:3e:d3:11:
                    78:a8:f6:0e:cb:3d:96:1a:e7:ee:66:d4:51:f5:b4:
                    94:90:4d:00:39:7f:83:62:f9:08:c2:8c:28:21:d8:
                    31:82:14:77:01:14:fb:36:04:7d:00:1a:b6:96:8e:
                    7e:5f:f4:73:a6:e6:3d:a7:55:be:2c:eb:a0:33:a9:
                    fc:a8:86:ee:97:93:7c:c7:19:42:c0:5c:1f:ed:d3:
                    fa:2b:2b:f5:5a:73:24:d0:91:4a:85:a2:d5:a9:0b:
                    77:40:92:2c:a7:91:a9:9f:ec:8d:20:a3:e5:5f:de:
                    a4:a5:95:5a:a7:bd:c2:51:65:58:61:6a:6b:df:35:
                    0e:0d:0b:71:e8:eb:5d:fe:66:84:df:3a:92:37:95:
                    8e:22:ef:ef:21:8b:a0:c8:2b:92:d3:7f:6b:ce:65:
                    3f:b9:3d:59:43:7e:f8:c9:68:7e:38:f0:23:db:bf:
                    8b:f8:42:56:71:7c:50:df:3c:b1:e6:00:e2:9b:f4:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:12:08:46:53:7D:D2:A9:87:36:94:AC:62:B0:ED:E9:3D:B4:FD:A9
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/TxIIRlN90qmHNpSsYrDt6T20_ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:23:17:ea:6b:53:2b:a7:fb:48:08:e8:b6:32:a5:c4:51:
         7f:80:67:1f:68:c4:b5:ab:2c:3b:5c:3b:e5:f5:b1:38:fd:b1:
         23:8f:4a:fb:74:dc:f1:92:d1:2a:87:22:fb:fe:09:a0:23:1f:
         9c:2a:12:d6:35:90:42:f7:b5:b3:18:2e:20:47:24:38:7c:6a:
         2c:37:cf:8e:19:7d:7b:3c:bd:fe:44:e4:70:d0:7e:c0:f3:f8:
         1f:8e:f2:ee:88:88:6f:90:d0:c4:ac:5e:7d:c4:29:b5:ca:49:
         bb:2b:36:c3:94:77:00:01:6b:50:6a:45:f8:13:76:8e:f5:59:
         db:63:e7:0c:5e:00:0e:3f:e7:4f:d1:45:da:87:99:b3:39:5d:
         07:30:a4:5c:ce:7f:de:34:fe:6f:b4:2f:89:29:b2:3b:35:08:
         d9:cb:39:44:0b:b7:40:9a:58:e7:49:ad:da:ca:ec:5e:e4:5d:
         a9:3d:70:52:51:e9:2d:da:23:38:0d:3d:4b:f4:1b:91:fa:73:
         4c:c5:36:2e:fd:6f:9a:95:8d:f8:71:d6:13:8e:27:d5:d7:31:
         aa:ed:28:51:d0:2c:3c:c1:db:63:24:44:0a:83:2b:53:04:e6:
         1b:a5:6d:f6:4e:90:ce:fd:a6:8a:7c:cf:de:e1:3b:0f:98:68:
         a0:a7:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 03:55:46 2026 by rpki-client