This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/aNasyvhnecUaGBiJJmKLy86blxw.roa
File:                     aNasyvhnecUaGBiJJmKLy86blxw.roa (raw, json)
Hash identifier:          SzBG9cwAKB7DYZM2SXTm4Asbf+eO0ZOQ6ca0yvr84RI=
Subject key identifier:   68:D6:AC:CA:F8:67:79:C5:1A:18:18:89:26:62:8B:CB:CE:9B:97:1C
Certificate issuer:       /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial:       019B79114DF99F1671806E96B624EED1F3DD
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/aNasyvhnecUaGBiJJmKLy86blxw.roa
Signing time:             Thu 01 Jan 2026 10:18:55 +0000
ROA not before:           Thu 01 Jan 2026 10:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51918
IP address blocks:        46.37.32.0/19 maxlen: 19
                          46.37.32.0/22 maxlen: 22
                          46.37.36.0/22 maxlen: 22
                          46.37.40.0/22 maxlen: 22
                          46.37.44.0/22 maxlen: 22
                          46.37.48.0/22 maxlen: 22
                          46.37.52.0/22 maxlen: 22
                          46.37.56.0/22 maxlen: 22
                          46.37.60.0/22 maxlen: 22
                          83.151.224.0/19 maxlen: 19
                          83.151.224.0/22 maxlen: 22
                          83.151.228.0/22 maxlen: 22
                          83.151.232.0/22 maxlen: 22
                          83.151.236.0/22 maxlen: 22
                          83.151.240.0/22 maxlen: 22
                          83.151.244.0/22 maxlen: 22
                          83.151.248.0/22 maxlen: 22
                          83.151.252.0/22 maxlen: 22
                          185.14.208.0/22 maxlen: 22
                          2a01:5d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:4d:f9:9f:16:71:80:6e:96:b6:24:ee:d1:f3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
        Validity
            Not Before: Jan  1 10:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=68d6accaf86779c51a18188926628bcbce9b971c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:10:29:c9:37:f4:3f:18:67:9b:0c:46:3c:
                    fb:67:ce:2c:a3:85:28:3e:db:1e:76:f3:1c:b4:7c:
                    21:40:e8:fc:44:cc:19:94:a5:68:12:e1:1f:c2:f6:
                    5e:af:c9:f7:da:67:e0:6b:33:61:91:28:bf:d9:72:
                    7f:f1:ef:e3:df:e3:b3:60:e0:e5:6c:f4:25:82:49:
                    dc:79:66:d0:20:f9:81:3a:db:23:33:3f:84:8b:28:
                    3b:d8:6e:c0:8a:c5:f7:a0:4c:7d:a5:27:c9:70:ca:
                    6e:4c:db:4c:f6:07:e6:7c:ef:b3:81:ba:bb:74:74:
                    9e:e7:cc:ba:b7:1c:b6:67:d1:32:1a:a8:ec:bd:2d:
                    83:91:00:09:06:84:a0:f7:ed:9b:f1:c5:1d:84:c7:
                    25:21:58:84:dd:db:68:a3:db:df:e6:8f:b4:a1:19:
                    5e:14:a3:48:8c:be:58:0a:5e:93:91:c3:42:fa:a1:
                    c4:27:7c:c7:b1:80:dc:7f:91:8e:c4:14:64:26:93:
                    63:61:9b:20:73:02:34:8d:10:f0:f9:da:5d:46:08:
                    38:9e:ec:b5:af:ca:88:8f:c5:da:05:c1:22:62:5a:
                    8f:6d:22:79:5a:74:2c:5b:dc:80:1c:f9:c9:28:52:
                    47:e9:b9:50:a1:aa:37:a4:d5:61:35:77:a8:ca:e7:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D6:AC:CA:F8:67:79:C5:1A:18:18:89:26:62:8B:CB:CE:9B:97:1C
            X509v3 Authority Key Identifier:
                keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/aNasyvhnecUaGBiJJmKLy86blxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.32.0/19
                  83.151.224.0/19
                  185.14.208.0/22
                IPv6:
                  2a01:5d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:92:1c:cf:31:16:e1:db:74:21:6d:26:e1:ac:6d:86:8f:e5:
         c3:1e:fc:21:66:bc:ad:1c:a6:24:e2:09:01:0f:56:89:0b:a9:
         58:91:25:17:cb:77:d4:c0:4b:72:cb:14:0b:7f:c6:3d:e2:36:
         fa:1c:ac:b0:6a:26:78:2d:60:67:bf:21:5f:3a:a4:b7:ca:1b:
         07:83:5d:e0:0d:55:13:7f:97:d8:e6:33:8c:a9:dc:5b:05:6b:
         cd:78:a8:cb:3c:48:e7:5e:20:05:2a:92:71:eb:68:b0:bc:49:
         13:c6:28:52:b1:fd:2f:21:9c:3d:35:11:f0:f0:58:52:96:f0:
         e5:df:94:c5:98:3f:fc:b8:29:92:e3:d5:22:4d:98:d4:39:b1:
         a3:e4:90:47:f7:e2:9b:a3:61:8c:ae:a1:a6:04:a9:bc:b3:4b:
         e7:15:59:65:c2:ea:51:af:e8:35:f3:de:5b:18:99:04:db:b4:
         05:0a:ed:5c:17:e2:01:12:a7:1d:58:fc:b1:08:67:5f:e3:d2:
         7a:36:73:96:64:09:63:78:23:5b:16:3c:8b:7d:fb:20:27:d8:
         fd:7d:2f:0d:2c:e6:25:d8:5f:c4:30:30:bf:d4:f8:3d:75:5e:
         f3:e5:b9:93:24:f3:bc:86:f7:71:f7:90:cf:90:42:84:05:ce:
         45:b6:de:d5
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZt5EU35nxZxgG6WtiTu0fPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMGEyMTIzZjU0OTI2NGU3Y2JiOWZhMjFkMmM1MTM3NzIx
NDg2ZTQwHhcNMjYwMTAxMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGQ2YWNjYWY4Njc3OWM1MWExODE4ODkyNjYyOGJjYmNlOWI5NzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxewQKck39D8YZ5sMRjz7Z84so4Uo
PtsedvMctHwhQOj8RMwZlKVoEuEfwvZer8n32mfgazNhkSi/2XJ/8e/j3+OzYODl
bPQlgknceWbQIPmBOtsjMz+Eiyg72G7AisX3oEx9pSfJcMpuTNtM9gfmfO+zgbq7
dHSe58y6txy2Z9EyGqjsvS2DkQAJBoSg9+2b8cUdhMclIViE3dtoo9vf5o+0oRle
FKNIjL5YCl6TkcNC+qHEJ3zHsYDcf5GOxBRkJpNjYZsgcwI0jRDw+dpdRgg4nuy1
r8qIj8XaBcEiYlqPbSJ5WnQsW9yAHPnJKFJH6blQoao3pNVhNXeoyufZlwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGjWrMr4Z3nFGhgYiSZii8vOm5ccMB8GA1UdIwQY
MBaAFMEKISP1SSZOfLufoh0sUTdyFIbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUt
YWRiMzAwZjcyMjVhLzEvYU5hc3l2aG5lY1VhR0JpSkptS0x5ODZibHh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUtYWRiMzAwZjcyMjVh
LzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFLiUgAwQF
U5fgAwQCuQ7QMA0EAgACMAcDBQAqAV0AMA0GCSqGSIb3DQEBCwUAA4IBAQBLkhzP
MRbh23QhbSbhrG2Gj+XDHvwhZrytHKYk4gkBD1aJC6lYkSUXy3fUwEtyyxQLf8Y9
4jb6HKywaiZ4LWBnvyFfOqS3yhsHg13gDVUTf5fY5jOMqdxbBWvNeKjLPEjnXiAF
KpJx62iwvEkTxihSsf0vIZw9NRHw8FhSlvDl35TFmD/8uCmS49UiTZjUObGj5JBH
9+Kbo2GMrqGmBKm8s0vnFVllwupRr+g1895bGJkE27QFCu1cF+IBEqcdWPyxCGdf
49J6NnOWZAljeCNbFjyLffsgJ9j9fS8NLOYl2F/EMDC/1Pg9dV7z5bmTJPO8hvdx
95DPkEKEBc5Ftt7V
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:11:13 2026 by rpki-client