This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RvoB02LV3HAYyjSpTynuepFZgZQ.roa
File:                     RvoB02LV3HAYyjSpTynuepFZgZQ.roa (raw, json)
Hash identifier:          IJ1ixOVD+h2rJ9Dsin8DqExrSUj/mMAvMHLaqQwlHdg=
Subject key identifier:   46:FA:01:D3:62:D5:DC:70:18:CA:34:A9:4F:29:EE:7A:91:59:81:94
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       019B7D5C78EC67744C51FCDEA597A3805CF8
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RvoB02LV3HAYyjSpTynuepFZgZQ.roa
Signing time:             Fri 02 Jan 2026 06:19:30 +0000
ROA not before:           Fri 02 Jan 2026 06:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135391
IP address blocks:        46.255.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 11:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:78:ec:67:74:4c:51:fc:de:a5:97:a3:80:5c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Jan  2 06:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46fa01d362d5dc7018ca34a94f29ee7a91598194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:8f:13:4f:4e:0c:da:8f:e2:4b:d2:0f:6a:
                    8b:78:38:17:09:a4:d8:3f:4f:fb:72:de:01:34:b1:
                    da:bb:1d:a8:3d:e7:e9:df:be:2e:6e:ce:63:81:65:
                    8e:29:fe:ba:38:7b:f4:29:e9:a1:a3:be:40:c8:77:
                    a4:80:01:06:50:f9:1e:52:47:3e:ed:7c:d5:8b:d0:
                    30:84:53:b1:26:eb:66:ae:72:0d:c4:4b:47:43:5a:
                    b8:21:90:74:ec:10:9e:b8:e0:2a:d4:b2:f3:8f:90:
                    16:a6:72:fd:f1:11:9f:3c:74:c1:cc:c8:58:ed:8e:
                    38:67:e3:92:ce:29:92:41:83:33:f3:33:c7:4a:f2:
                    07:60:f6:f3:73:48:37:a0:d5:67:8e:55:54:1b:9b:
                    0c:c8:07:90:10:7e:74:3d:df:47:bf:aa:64:ef:6e:
                    6a:5b:35:4d:ce:3f:57:c1:39:7c:9e:69:01:69:77:
                    70:45:19:bf:86:40:0e:35:42:c7:3a:92:c7:f7:db:
                    4e:a6:d5:12:cd:e2:36:d6:c1:77:91:97:dd:e1:24:
                    19:54:bf:82:82:75:30:bb:73:d2:e2:f4:07:e2:92:
                    af:9f:d2:9f:65:4c:99:96:fe:c2:f5:dd:45:5f:a7:
                    29:15:65:29:c8:90:7a:26:37:62:81:5a:a9:83:c9:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FA:01:D3:62:D5:DC:70:18:CA:34:A9:4F:29:EE:7A:91:59:81:94
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/RvoB02LV3HAYyjSpTynuepFZgZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.255.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:51:3e:c3:2a:f3:c4:28:35:83:fe:35:88:8d:a4:b5:1b:55:
         68:ce:d1:fa:0d:6d:bf:85:90:46:30:7d:56:28:a8:40:68:97:
         ca:51:c0:8b:43:89:a4:61:5b:b2:87:25:f2:79:57:3d:83:4f:
         93:3f:7e:9c:ec:bb:bd:5a:96:05:99:1d:88:fc:11:07:26:a9:
         06:09:12:08:43:b4:f5:a9:9c:fb:b7:44:c6:de:b8:3a:53:98:
         33:7f:1d:93:e1:fa:ad:0b:02:1a:4a:c9:b0:08:59:c4:28:c3:
         f9:38:91:5e:01:99:fd:9e:12:15:14:4f:34:89:b3:05:12:22:
         58:07:8a:69:5d:04:2d:d7:8b:7a:62:c6:42:60:ce:85:d6:b9:
         26:a6:85:ca:35:f1:48:ee:43:53:87:6e:27:d4:ed:4a:5e:1e:
         c5:88:aa:9a:19:70:cd:6d:d6:da:7c:ec:8f:c9:f1:b7:c3:ef:
         43:88:97:bf:5d:48:ba:34:ff:8e:ce:95:fb:28:61:cd:92:db:
         fc:80:e1:6a:9d:b8:5b:f2:50:c7:6a:a8:45:71:dd:17:a4:83:
         79:85:ba:0e:27:e6:c9:7a:9f:10:4b:83:cf:8e:85:ff:68:2b:
         ea:20:88:a7:23:1a:b4:6c:6b:d9:ea:1d:fd:b5:d3:a7:5b:1d:
         e8:b5:33:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 14:41:03 2026 by rpki-client