This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/m0eeq8va8tOdR0d6vhTGR-m4r9c.roa
File:                     m0eeq8va8tOdR0d6vhTGR-m4r9c.roa (raw, json)
Hash identifier:          IJmLN6gAClo8Re6n699DAImPd6vNHSacFHQGbqXGAqc=
Subject key identifier:   9B:47:9E:AB:CB:DA:F2:D3:9D:47:47:7A:BE:14:C6:47:E9:B8:AF:D7
Certificate issuer:       /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial:       019B7CECC010C0293E0123D40B3CA5E9868C
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/m0eeq8va8tOdR0d6vhTGR-m4r9c.roa
Signing time:             Fri 02 Jan 2026 04:17:28 +0000
ROA not before:           Fri 02 Jan 2026 04:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197418
IP address blocks:        46.151.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:c0:10:c0:29:3e:01:23:d4:0b:3c:a5:e9:86:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
        Validity
            Not Before: Jan  2 04:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b479eabcbdaf2d39d47477abe14c647e9b8afd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:d9:f3:c6:cf:d2:ea:e4:61:cb:33:4e:a8:
                    be:2f:77:12:bc:a9:75:61:de:f2:d0:2a:9b:a8:bc:
                    b6:5e:f4:70:63:97:d6:33:7f:9a:c4:28:a2:8c:44:
                    9f:b8:34:63:c0:98:c5:09:fd:9b:4e:6a:96:85:2e:
                    e4:5f:1f:37:0e:c3:8d:b2:d8:a5:df:62:f3:b8:32:
                    46:02:4c:88:e5:a2:fc:8d:c9:04:d1:74:00:3e:88:
                    01:ea:2b:33:84:95:bf:cb:22:a1:68:08:61:7a:6f:
                    90:73:21:7e:01:27:ef:c8:06:e1:92:c7:d4:7b:75:
                    4d:c5:75:1a:e3:f8:aa:11:d8:ef:bb:2a:55:5c:55:
                    ac:0b:b8:6e:42:e3:9e:ed:6f:93:17:82:22:77:e1:
                    5d:ca:42:fc:3d:3d:cf:b3:9a:17:d4:5e:0d:96:93:
                    3b:ca:ea:98:da:1f:4f:9a:3b:32:6e:47:b2:95:71:
                    3b:08:45:69:da:31:75:1a:74:e2:a4:9d:e2:a6:b3:
                    2a:2e:48:69:e3:63:0d:c7:d5:ed:3d:b0:62:58:91:
                    e5:00:d5:fe:c5:d9:24:5d:e5:5c:57:ad:42:3f:c6:
                    08:c8:7c:b6:e3:42:73:76:2f:24:df:49:db:e6:ed:
                    ce:c2:21:8e:36:00:2d:0f:75:8f:80:ab:1a:34:fe:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:47:9E:AB:CB:DA:F2:D3:9D:47:47:7A:BE:14:C6:47:E9:B8:AF:D7
            X509v3 Authority Key Identifier:
                keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/m0eeq8va8tOdR0d6vhTGR-m4r9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.151.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:cf:e3:97:fb:ab:ef:76:10:8f:e4:e6:ed:36:2b:6e:b4:cd:
         a9:11:66:4c:31:09:cc:3e:82:90:28:ee:92:8d:bb:83:ad:44:
         1f:f5:c6:2d:1d:e6:1b:dd:9a:bf:1f:54:ca:43:3a:00:7e:08:
         99:87:43:8c:9d:1a:bc:1b:c5:63:63:64:7e:d3:94:82:0e:89:
         4b:c1:b3:c6:9a:89:de:b9:92:58:88:d2:89:92:f3:ef:80:9a:
         12:21:3c:6f:5c:21:96:dc:db:c2:06:5a:63:8b:df:43:4a:e7:
         b7:0d:9a:8c:01:8e:39:8b:28:24:a9:c3:a2:55:6c:45:a5:5e:
         ab:49:6c:6f:86:0f:ce:d0:6a:b9:ff:01:d7:29:53:6a:00:f9:
         f3:ff:e8:4d:8d:f0:58:23:a5:2b:0a:da:7a:b9:df:3e:e0:57:
         40:d0:76:50:ec:10:a6:df:14:09:3e:63:43:06:fc:7f:fd:a9:
         5d:ea:04:2a:db:23:86:09:21:0b:0f:19:c3:84:46:5e:5e:81:
         9a:e5:6e:5c:89:3a:81:22:6d:1b:27:d2:3d:30:07:90:bb:e4:
         f4:44:8d:63:dd:62:7e:ee:82:4c:93:0f:c1:fa:5b:f6:b9:00:
         12:da:88:c0:4f:69:73:23:d7:75:53:4c:42:a6:ab:f4:5f:d0:
         ed:d3:ca:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:30 2026 by rpki-client