This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/746QFPJyT0Rq24L0EZYCq84Zm3c.roa
File:                     746QFPJyT0Rq24L0EZYCq84Zm3c.roa (raw, json)
Hash identifier:          AeIcxvfsKv+u4oYl0aaRx7pmRMFAkAPk+AYZdKgn4Uk=
Subject key identifier:   EF:8E:90:14:F2:72:4F:44:6A:DB:82:F4:11:96:02:AB:CE:19:9B:77
Certificate issuer:       /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial:       019B78A340BA1EFF03BD308B87B39290DE7D
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/746QFPJyT0Rq24L0EZYCq84Zm3c.roa
Signing time:             Thu 01 Jan 2026 08:18:43 +0000
ROA not before:           Thu 01 Jan 2026 08:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201104
IP address blocks:        94.45.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:40:ba:1e:ff:03:bd:30:8b:87:b3:92:90:de:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
        Validity
            Not Before: Jan  1 08:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef8e9014f2724f446adb82f4119602abce199b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:4b:5d:c6:16:cb:27:fa:e0:79:db:23:38:
                    3a:f1:7b:bb:ca:6b:a6:3f:14:78:40:b0:67:e8:86:
                    4a:77:7e:28:0a:9f:d2:09:61:32:b5:b5:b9:0d:74:
                    0d:83:a8:0b:e8:78:9f:60:30:f3:23:d9:9f:c2:42:
                    6c:ea:d3:4b:4d:c9:cb:c9:30:f0:08:1c:b3:1f:d2:
                    09:48:e0:5e:5c:d7:bb:ab:70:0f:ef:91:94:f9:62:
                    27:bd:8c:0d:06:0e:7b:50:5a:0f:2e:46:11:5e:66:
                    53:cc:e7:14:b8:0e:c9:b3:78:54:f0:3d:b7:77:1b:
                    d1:bf:5a:d4:9a:ff:7d:c2:2e:61:3a:53:5b:c9:35:
                    90:71:2b:f3:d5:b3:7a:08:ff:20:78:06:74:71:de:
                    74:22:8f:7d:93:14:28:1a:34:1c:4d:5f:1b:95:3a:
                    99:1e:e3:e2:9c:ae:1a:71:4f:df:42:85:28:0a:a3:
                    36:15:03:74:11:ed:fd:e9:09:18:d5:74:b4:f6:1e:
                    3f:f8:7f:8a:4a:91:37:34:23:85:0e:98:dc:75:6e:
                    03:ba:44:43:a0:06:de:ef:c7:3c:44:72:6d:9c:9b:
                    8a:72:e1:5e:86:ba:c6:51:24:0b:03:fe:df:15:f1:
                    eb:1d:01:39:7d:90:4e:d3:69:c2:fe:e6:e3:57:7d:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8E:90:14:F2:72:4F:44:6A:DB:82:F4:11:96:02:AB:CE:19:9B:77
            X509v3 Authority Key Identifier:
                keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/746QFPJyT0Rq24L0EZYCq84Zm3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.45.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:19:8d:c1:e2:a2:89:af:d6:c9:6a:bd:31:66:d2:41:ed:75:
         eb:dd:dc:e1:ca:2c:ba:e9:cf:7d:e7:24:4e:c3:3a:eb:01:42:
         23:23:81:93:be:eb:54:c2:65:e9:85:96:09:3b:55:be:61:0a:
         40:99:bc:bc:96:02:2c:64:d0:d5:09:b6:cd:12:e4:dc:9f:08:
         42:02:a0:c9:24:5c:1f:40:6a:ac:76:cb:43:ae:e8:98:88:6e:
         16:29:93:07:8e:88:94:2d:53:76:47:56:ba:da:a5:9e:ad:76:
         ee:89:5a:c1:95:80:42:81:1d:0b:a9:04:36:98:b6:01:6c:06:
         37:3c:08:94:d4:d7:5f:cb:f2:7a:cf:3f:f0:3f:bc:4e:c5:89:
         8b:bd:13:9e:1c:63:84:c2:a0:6a:a1:e0:90:32:72:2b:d8:63:
         37:ca:42:60:cd:38:f1:5b:86:81:5c:9a:e7:75:7a:94:2c:d7:
         f1:8b:0a:d0:ae:d5:8f:bf:1d:29:72:fb:c9:ec:99:b3:20:ec:
         57:07:26:93:72:28:ba:0c:37:6e:57:b8:d4:b1:f9:00:f1:e0:
         90:02:a9:3c:a5:d7:97:e6:7c:e6:41:7d:50:8b:d1:c3:fb:bc:
         f3:bf:d8:14:c7:05:75:27:b8:44:bf:5b:c6:78:06:43:2a:97:
         1f:b3:3e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:37 2026 by rpki-client