This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/txrJT2KB55PdfZarCNv00SvLHy4.roa
File:                     txrJT2KB55PdfZarCNv00SvLHy4.roa (raw, json)
Hash identifier:          7NFHpaOx0mq8qBDCYGpG0MZudMnkTx/c60OsSdUt274=
Subject key identifier:   B7:1A:C9:4F:62:81:E7:93:DD:7D:96:AB:08:DB:F4:D1:2B:CB:1F:2E
Certificate issuer:       /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial:       019B797EE8F8B1C4D8B566BBF34795327AF8
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/txrJT2KB55PdfZarCNv00SvLHy4.roa
Signing time:             Thu 01 Jan 2026 12:18:38 +0000
ROA not before:           Thu 01 Jan 2026 12:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42755
IP address blocks:        46.21.160.0/20 maxlen: 24
                          46.21.164.0/24 maxlen: 24
                          46.21.165.0/24 maxlen: 24
                          91.195.200.0/23 maxlen: 24
                          91.195.200.0/24 maxlen: 24
                          91.195.201.0/24 maxlen: 24
                          91.196.168.0/22 maxlen: 24
                          91.198.27.0/24 maxlen: 24
                          91.199.206.0/24 maxlen: 24
                          185.138.208.0/22 maxlen: 24
                          195.184.64.0/23 maxlen: 24
                          195.184.64.0/24 maxlen: 24
                          195.184.65.0/24 maxlen: 24
                          2a02:27f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:e8:f8:b1:c4:d8:b5:66:bb:f3:47:95:32:7a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
        Validity
            Not Before: Jan  1 12:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b71ac94f6281e793dd7d96ab08dbf4d12bcb1f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:02:a2:18:0c:dc:20:e1:8d:a0:d6:c5:b0:
                    20:7f:dd:a3:a5:15:5a:1e:88:ad:4d:b9:0e:18:94:
                    04:c1:8a:f4:45:67:84:2d:b5:3f:9b:fe:d5:78:3a:
                    4f:13:da:0e:dd:a1:ef:7c:72:c8:ce:b5:da:48:81:
                    5c:38:f6:e1:51:e0:63:6e:82:48:96:31:7d:ab:02:
                    9e:3e:f4:0b:70:ae:b8:01:d3:5a:43:27:4f:00:b2:
                    cf:a3:8f:e9:89:94:1f:07:14:cc:c4:a6:1e:e3:ca:
                    69:ce:76:2f:7f:74:d2:d9:23:67:63:93:7a:91:6a:
                    d1:a9:1e:c9:64:d2:6b:b6:30:6e:71:5f:53:2c:d5:
                    53:01:f9:84:38:3d:3a:d3:4c:97:fc:d3:9d:3d:bd:
                    e4:1b:69:79:7f:57:86:08:31:1b:61:96:ca:f8:85:
                    c3:58:40:76:30:eb:86:08:62:0b:00:64:12:81:49:
                    2d:87:92:d7:e0:ba:9e:0f:1f:49:d5:ee:ba:dc:a4:
                    e2:1d:61:fa:6a:c2:52:b4:e5:95:0c:49:4d:f6:4f:
                    68:cb:70:af:38:26:b0:5a:36:26:f4:83:c5:69:ac:
                    16:14:47:31:31:a3:1e:e4:bd:f0:ab:6d:b2:92:a3:
                    1f:4a:af:7f:0a:bb:db:f7:69:a7:d6:38:c7:17:ca:
                    81:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1A:C9:4F:62:81:E7:93:DD:7D:96:AB:08:DB:F4:D1:2B:CB:1F:2E
            X509v3 Authority Key Identifier:
                keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/txrJT2KB55PdfZarCNv00SvLHy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.21.160.0/20
                  91.195.200.0/23
                  91.196.168.0/22
                  91.198.27.0/24
                  91.199.206.0/24
                  185.138.208.0/22
                  195.184.64.0/23
                IPv6:
                  2a02:27f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:ce:e0:58:56:d6:52:1b:0c:b9:b6:56:65:66:b6:7a:48:72:
         d0:fd:62:97:1c:27:06:da:57:f4:02:0f:2c:a8:9e:07:11:cb:
         81:27:2e:1b:f6:04:0f:9c:a0:4a:d4:65:48:0a:70:39:92:a9:
         dc:2d:4a:99:c7:87:17:15:1a:c6:6f:58:78:f2:b8:5b:ab:af:
         16:14:01:1e:5b:cf:53:be:33:24:d7:30:35:44:8e:77:84:33:
         26:37:25:4c:0f:cc:3e:9b:1b:ae:a1:c4:0f:62:38:7c:de:8b:
         c9:b9:3d:0e:3d:f6:d2:e0:40:0e:b6:95:85:8e:89:8a:77:7c:
         3f:c7:67:c0:78:ed:4c:9d:13:a3:63:f7:34:af:18:eb:e8:16:
         f0:8e:80:49:eb:41:d9:39:bf:b6:05:f3:3d:6e:6b:3f:a1:52:
         1d:97:f0:cb:5d:db:22:99:a3:3f:16:12:e8:07:60:04:88:43:
         5f:9f:84:dd:0c:f7:5b:ea:3d:29:bc:3e:a4:7d:1b:de:9e:00:
         07:2b:f4:0c:19:4a:94:05:91:86:2a:a9:de:0b:f4:69:6f:d5:
         ec:0d:8f:07:07:f1:38:59:15:f5:b9:9c:f2:53:99:8c:c3:24:
         6e:f8:bc:73:39:27:ca:db:4e:63:97:29:5c:d4:a3:41:df:6f:
         10:58:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:07:45 2026 by rpki-client