This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/t_-NpvrkXWMv7C05VfgVliOFopk.roa
File:                     t_-NpvrkXWMv7C05VfgVliOFopk.roa (raw, json)
Hash identifier:          NqyEdBD2lmR97sQbX1ZX27Jyq9s7SuLfnBHNWVP5NB8=
Subject key identifier:   B7:FF:8D:A6:FA:E4:5D:63:2F:EC:2D:39:55:F8:15:96:23:85:A2:99
Certificate issuer:       /CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Certificate serial:       019BDB24826EF39DB319C7D6FB565C4E9410
Authority key identifier: 69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/t_-NpvrkXWMv7C05VfgVliOFopk.roa
Signing time:             Tue 20 Jan 2026 11:22:41 +0000
ROA not before:           Tue 20 Jan 2026 11:22:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198562
IP address blocks:        46.229.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:db:24:82:6e:f3:9d:b3:19:c7:d6:fb:56:5c:4e:94:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
        Validity
            Not Before: Jan 20 11:22:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7ff8da6fae45d632fec2d3955f815962385a299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ed:f9:7a:62:9f:7c:80:57:ca:b9:e0:8f:e0:
                    37:49:a1:75:20:ef:d7:70:8a:ed:8e:5a:96:69:af:
                    0f:bd:f8:30:d6:35:62:97:3f:ce:14:0d:22:00:fc:
                    3e:d1:fb:84:6f:4b:a9:68:02:ae:ea:1d:28:ac:09:
                    dc:b7:ac:a0:62:0b:db:b6:39:0f:37:41:1d:c4:0f:
                    11:d0:fc:1b:c5:a7:84:55:2b:a3:b5:bf:e9:99:c7:
                    04:eb:48:93:20:68:3c:07:6a:00:ae:19:a3:d0:d4:
                    63:38:95:a1:6e:35:f8:7e:81:c1:d3:fe:b2:f5:d0:
                    e2:53:6a:75:66:b3:99:b1:03:66:13:3c:c0:e0:f8:
                    5d:f2:ed:0e:d1:1b:ba:1c:5d:ee:52:be:65:cf:a7:
                    e5:46:6a:22:a4:4c:97:6e:68:ce:a1:c4:03:b6:18:
                    a8:f0:c9:a9:20:d3:bb:32:9d:73:d2:24:17:43:f4:
                    52:0a:57:7d:a6:56:95:39:94:9e:ce:20:a6:f7:02:
                    90:02:c7:4a:71:8c:93:21:72:cb:73:a5:58:77:5c:
                    85:07:ba:42:60:d3:2c:c6:91:cc:b7:ed:0b:f6:d1:
                    24:c0:65:cd:2a:c7:28:c9:4f:f3:26:33:7f:79:df:
                    13:61:7d:5f:93:9c:87:c8:7c:4f:c5:48:48:ea:ba:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FF:8D:A6:FA:E4:5D:63:2F:EC:2D:39:55:F8:15:96:23:85:A2:99
            X509v3 Authority Key Identifier:
                keyid:69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/t_-NpvrkXWMv7C05VfgVliOFopk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:7e:22:c7:aa:1a:6e:84:40:c4:e3:ef:70:45:ab:84:6e:44:
         64:d4:18:f9:cb:5b:87:2f:75:ca:c8:a1:27:2d:64:0c:62:c8:
         ed:73:90:c9:a4:75:39:95:fe:9c:7c:2c:a9:e6:d5:84:f4:39:
         6a:87:a5:42:b6:b2:f0:a2:11:b4:11:7a:d8:ec:1f:6d:64:2e:
         c4:7c:c3:53:11:e9:91:e5:f4:15:93:bd:00:78:4a:45:ba:0d:
         79:8a:e6:13:da:f4:f1:a9:53:d2:81:55:69:ea:5f:64:e8:9f:
         fb:c4:8e:ce:ea:9e:d6:b2:2c:b3:2b:e1:1b:1b:d7:42:2d:f0:
         53:c1:2c:14:72:96:e3:e8:26:b7:81:8f:e2:f3:0a:1e:37:4c:
         9f:2f:cd:3b:41:a0:23:40:a4:4d:d7:e9:33:20:ce:b6:17:96:
         6b:1d:68:17:e2:ae:70:46:4c:69:7f:4e:b0:0e:df:a9:f2:6e:
         45:fe:a0:6e:80:02:4c:97:04:40:df:91:2b:b9:3f:10:8f:45:
         07:3a:5c:36:6a:4d:8c:14:25:cf:94:84:ef:59:df:d8:58:78:
         4b:7e:ce:e3:dd:c8:46:79:db:4f:45:a0:bc:1d:b0:32:d5:ac:
         01:ea:fe:27:2a:d2:c4:e7:c9:3b:48:41:8d:3a:6f:ee:dc:02:
         46:ec:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:29 2026 by rpki-client