This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/PuXWOfTLPxOFTzzS6eX0SDcf-AE.roa
File:                     PuXWOfTLPxOFTzzS6eX0SDcf-AE.roa (raw, json)
Hash identifier:          eMjOpwhTm0qWucca1AVgBlVXXRnbhsb1Guso5DSpugc=
Subject key identifier:   3E:E5:D6:39:F4:CB:3F:13:85:4F:3C:D2:E9:E5:F4:48:37:1F:F8:01
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       019B7AC7C819FC2DF93A7848470628DF7886
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/PuXWOfTLPxOFTzzS6eX0SDcf-AE.roa
Signing time:             Thu 01 Jan 2026 18:17:51 +0000
ROA not before:           Thu 01 Jan 2026 18:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30823
IP address blocks:        46.19.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:c8:19:fc:2d:f9:3a:78:48:47:06:28:df:78:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jan  1 18:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3ee5d639f4cb3f13854f3cd2e9e5f448371ff801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:15:b9:e6:d9:ca:ba:0c:85:fc:a0:ed:26:
                    99:8f:48:06:2e:1e:01:b3:3f:cc:f1:5c:3c:3c:c2:
                    e1:df:87:ef:0f:f6:05:34:0b:a9:64:d4:8d:4b:22:
                    54:3f:eb:8b:9c:e5:0c:33:86:60:6b:a3:14:75:45:
                    8c:91:9c:49:ad:f0:a9:72:b3:c1:4f:42:62:54:7a:
                    fe:0f:bb:09:60:72:e3:f8:32:2d:75:d6:ab:f8:3b:
                    69:f1:f6:d9:b4:1c:80:75:03:bb:30:25:81:0f:df:
                    c7:2d:5b:2a:e0:00:2e:24:4c:7c:bb:fe:92:cc:70:
                    96:3c:aa:45:ee:8b:8d:5e:10:a7:fe:72:4e:a3:9c:
                    01:1c:e9:88:fc:57:7a:5c:74:43:b9:52:68:9b:2f:
                    3f:1f:8e:80:f0:d1:79:83:7f:4f:05:b1:92:ef:c7:
                    c0:9c:e5:37:de:71:10:b6:06:a6:a6:ab:d8:8d:db:
                    1e:76:d7:17:04:0f:fa:03:06:5a:a4:d9:e7:f9:af:
                    55:11:db:41:29:de:95:0a:21:42:56:71:a4:dd:97:
                    5a:b6:66:9e:9d:84:98:3a:94:35:b4:82:7b:10:de:
                    b6:1c:8a:09:fc:20:62:34:3e:e1:f0:72:8b:82:fe:
                    9e:9a:5f:30:ad:0a:cc:59:1e:4a:e2:dd:76:14:0c:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E5:D6:39:F4:CB:3F:13:85:4F:3C:D2:E9:E5:F4:48:37:1F:F8:01
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/PuXWOfTLPxOFTzzS6eX0SDcf-AE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.19.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:b3:a9:7d:67:72:76:c1:39:a1:f6:65:6b:08:a0:e2:81:a0:
         86:a6:5e:33:b5:9f:26:d4:a2:66:4b:27:8e:86:b4:fc:a4:49:
         b8:b1:7d:63:0b:7c:63:6e:99:8c:bd:74:32:b1:09:24:51:fc:
         b8:f7:25:ef:c8:eb:aa:a7:59:5c:10:73:ad:87:e0:b2:00:09:
         46:ee:e2:b3:fb:84:e1:73:ff:38:07:3e:38:5a:fd:5f:13:95:
         7c:31:08:af:5e:01:5d:2b:3d:92:ba:18:af:e6:05:93:e6:da:
         de:3b:a7:22:4d:72:27:da:d5:1e:0b:31:aa:ca:fd:71:29:c0:
         fc:6b:03:2b:31:da:c9:5b:f8:40:22:13:19:af:1b:c6:b4:59:
         aa:3b:9f:a3:0b:3e:11:30:93:e1:5e:4a:d9:c1:ed:5f:f2:fd:
         67:ec:69:b0:24:e0:5a:e4:35:80:11:51:f6:e4:99:92:89:00:
         40:44:c4:2b:b1:8d:5c:44:47:13:12:39:7b:14:32:c8:5b:01:
         ad:df:d2:56:50:58:ed:85:3b:3a:58:db:27:c9:38:9e:9c:1a:
         57:6e:9a:a7:d9:2b:ce:50:42:f9:14:02:96:d2:02:87:0a:6f:
         d2:e2:1a:67:70:a9:fb:1a:96:c4:88:bb:04:f5:ae:cb:a1:22:
         3a:31:71:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:57:14 2026 by rpki-client