This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/JhpQkfIoKyp0VaSZxZLNw6jUfAI.roa
File:                     JhpQkfIoKyp0VaSZxZLNw6jUfAI.roa (raw, json)
Hash identifier:          4h1dtzwyhpjNGvQdPUfuv1zV9ouJgOTf1l7tAneTCYU=
Subject key identifier:   26:1A:50:91:F2:28:2B:2A:74:55:A4:99:C5:92:CD:C3:A8:D4:7C:02
Certificate issuer:       /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial:       019B77592F8BFDAC5721B3DC51CC84039695
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/JhpQkfIoKyp0VaSZxZLNw6jUfAI.roa
Signing time:             Thu 01 Jan 2026 02:18:12 +0000
ROA not before:           Thu 01 Jan 2026 02:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47544
IP address blocks:        46.248.160.0/19 maxlen: 19
                          46.248.174.0/24 maxlen: 24
                          46.248.183.0/24 maxlen: 24
                          86.111.240.0/21 maxlen: 21
                          185.110.48.0/24 maxlen: 24
                          185.110.49.0/24 maxlen: 24
                          185.110.50.0/24 maxlen: 24
                          185.110.51.0/24 maxlen: 24
                          193.106.104.0/22 maxlen: 22
                          2a01:7400::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:2f:8b:fd:ac:57:21:b3:dc:51:cc:84:03:96:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
        Validity
            Not Before: Jan  1 02:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=261a5091f2282b2a7455a499c592cdc3a8d47c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:c5:a5:a0:93:91:66:a3:25:c5:19:ee:1a:
                    42:e3:1d:92:96:61:19:93:6b:99:69:47:6a:5f:93:
                    98:f3:b4:ae:6e:3c:b9:81:01:57:c2:ec:1c:86:70:
                    49:77:67:38:67:7f:da:be:90:8d:4b:5d:07:90:b3:
                    a8:55:3c:6f:55:c4:d2:89:4c:a4:ab:52:87:d1:99:
                    54:eb:55:a6:7e:5d:d9:84:8c:a5:18:f0:ed:bd:eb:
                    ba:f7:95:43:1b:eb:fe:1c:9f:78:9f:a1:9d:42:7c:
                    c6:bf:dc:12:0b:69:17:c9:f8:5b:0c:60:93:d3:72:
                    74:f1:a3:30:4b:43:c3:ec:22:c9:15:31:2d:72:94:
                    52:27:88:ee:f9:9c:91:be:3f:80:1f:64:a0:c8:09:
                    a4:82:df:52:0a:c7:ed:31:01:de:30:01:f2:7a:20:
                    70:b4:15:23:98:9f:07:37:7a:90:c8:90:d7:83:8d:
                    14:20:67:bf:b6:1e:9e:85:16:fb:b3:71:14:b8:be:
                    27:12:f8:62:12:d5:ee:ef:3e:60:57:c6:db:47:ef:
                    31:ff:71:29:48:eb:fe:84:fa:36:7e:04:68:de:1e:
                    15:88:4f:53:2b:7c:ba:7f:91:17:f6:1d:96:f3:22:
                    8e:99:dd:58:99:29:1f:c4:8f:6a:70:74:72:28:99:
                    a6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1A:50:91:F2:28:2B:2A:74:55:A4:99:C5:92:CD:C3:A8:D4:7C:02
            X509v3 Authority Key Identifier:
                keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/JhpQkfIoKyp0VaSZxZLNw6jUfAI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.248.160.0/19
                  86.111.240.0/21
                  185.110.48.0/22
                  193.106.104.0/22
                IPv6:
                  2a01:7400::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:52:60:30:ce:7f:2a:54:dc:5d:d3:43:f6:86:5f:0e:5e:d1:
         58:b8:bc:39:d9:32:14:54:ac:0d:dd:dc:a7:73:23:fa:14:ab:
         06:9f:8a:94:fc:0c:b0:75:8d:60:01:dd:02:fc:4e:d7:80:71:
         4c:15:95:62:5d:d1:04:ea:cd:da:2c:dd:2d:00:f6:a8:7b:dd:
         53:1e:fa:d2:a7:7b:9f:17:ab:16:92:08:c2:88:3b:ea:66:2d:
         d2:35:02:93:e4:2c:d9:b1:90:cd:f4:cd:79:98:c5:94:68:fd:
         59:3d:bb:85:e8:8e:ad:9c:c9:dd:c8:04:87:84:e1:dc:ba:49:
         d6:cc:a7:05:d2:2d:f6:2c:cc:39:c9:e4:ac:26:12:ca:49:61:
         a1:41:3d:ec:22:ff:30:0d:b2:a5:b3:10:f4:e3:d6:5d:86:7a:
         1f:ed:eb:a4:98:f8:a3:6c:97:d8:3b:00:c5:5a:08:db:a3:fc:
         70:35:bb:15:45:3a:3e:a7:53:77:fb:50:b5:ca:c7:5c:85:ce:
         e4:2f:c0:42:d8:6d:b8:e3:4d:6d:c9:77:c2:d4:1f:57:fa:b8:
         83:97:60:00:f3:2e:d8:d7:ca:d9:57:54:20:bf:63:8d:af:68:
         35:be:bc:aa:08:66:c6:54:07:4a:63:8e:8d:4d:34:00:49:66:
         10:0b:07:d8
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZt3WS+L/axXIbPcUcyEA5aVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMzE3NTk4ODM3M2U1NmI2ZmZlMGIxNWExZmM3NWQ0Njkz
YWUyYzAwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjFhNTA5MWYyMjgyYjJhNzQ1NWE0OTljNTkyY2RjM2E4ZDQ3YzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0fFpaCTkWajJcUZ7hpC4x2SlmEZ
k2uZaUdqX5OY87Subjy5gQFXwuwchnBJd2c4Z3/avpCNS10HkLOoVTxvVcTSiUyk
q1KH0ZlU61Wmfl3ZhIylGPDtveu695VDG+v+HJ94n6GdQnzGv9wSC2kXyfhbDGCT
03J08aMwS0PD7CLJFTEtcpRSJ4ju+ZyRvj+AH2SgyAmkgt9SCsftMQHeMAHyeiBw
tBUjmJ8HN3qQyJDXg40UIGe/th6ehRb7s3EUuL4nEvhiEtXu7z5gV8bbR+8x/3Ep
SOv+hPo2fgRo3h4ViE9TK3y6f5EX9h2W8yKOmd1YmSkfxI9qcHRyKJmm4wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCYaUJHyKCsqdFWkmcWSzcOo1HwCMB8GA1UdIwQY
MBaAFHsxdZiDc+Vrb/4LFaH8ddRpOuLAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEt
ZGZkNTFiMDZkZDk5LzEvSmhwUWtmSW9LeXAwVmFTWnhaTE53NmpVZkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84NTAxMzQtYmIyMS00YmFkLTllZWEtZGZkNTFiMDZkZDk5
LzEvZXpGMW1JTno1V3R2X2dzVm9meDExR2s2NHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFLvigAwQD
Vm/wAwQCuW4wAwQCwWpoMA0EAgACMAcDBQAqAXQAMA0GCSqGSIb3DQEBCwUAA4IB
AQAaUmAwzn8qVNxd00P2hl8OXtFYuLw52TIUVKwN3dyncyP6FKsGn4qU/AywdY1g
Ad0C/E7XgHFMFZViXdEE6s3aLN0tAPaoe91THvrSp3ufF6sWkgjCiDvqZi3SNQKT
5CzZsZDN9M15mMWUaP1ZPbuF6I6tnMndyASHhOHcuknWzKcF0i32LMw5yeSsJhLK
SWGhQT3sIv8wDbKlsxD049Zdhnof7eukmPijbJfYOwDFWgjbo/xwNbsVRTo+p1N3
+1C1ysdchc7kL8BC2G24401tyXfC1B9X+riDl2AA8y7Y18rZV1Qgv2ONr2g1vryq
CGbGVAdKY46NTTQASWYQCwfY
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:45 2026 by rpki-client