This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/pVduKYNLi9ZGPKENxhzjCULu_mc.roa
File:                     pVduKYNLi9ZGPKENxhzjCULu_mc.roa (raw, json)
Hash identifier:          beMvbOD2JslRH8yZzo+rpcPxa4uExV22otAFa3ZuVe8=
Subject key identifier:   A5:57:6E:29:83:4B:8B:D6:46:3C:A1:0D:C6:1C:E3:09:42:EE:FE:67
Certificate issuer:       /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial:       019B7EA735867259ADB9260DA9BC12B5CE32
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/pVduKYNLi9ZGPKENxhzjCULu_mc.roa
Signing time:             Fri 02 Jan 2026 12:20:46 +0000
ROA not before:           Fri 02 Jan 2026 12:20:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207758
IP address blocks:        46.182.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:35:86:72:59:ad:b9:26:0d:a9:bc:12:b5:ce:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
        Validity
            Not Before: Jan  2 12:20:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a5576e29834b8bd6463ca10dc61ce30942eefe67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ef:82:62:86:8d:08:75:81:fb:49:4b:9d:46:
                    99:17:f7:82:d4:c2:ff:28:0c:63:47:44:09:ce:85:
                    51:52:20:33:d6:c4:8b:ae:69:d7:0c:de:42:f3:f4:
                    3f:17:06:80:e4:03:11:ea:5e:17:c9:1a:25:04:6f:
                    df:aa:a0:cf:ef:65:a9:37:29:d9:9f:94:56:df:46:
                    8b:5d:45:d4:ce:94:50:cf:3a:17:8f:25:d1:5c:0b:
                    e0:2e:e5:9f:a1:fa:09:14:bd:6f:69:5d:53:d5:2c:
                    94:c7:e0:ea:93:7d:b0:0a:8a:a4:03:51:62:92:7e:
                    9e:6b:29:a5:b1:b3:a6:f2:80:06:3d:88:e0:a5:1b:
                    22:af:51:46:88:1a:68:7c:42:40:31:3a:fe:8e:ef:
                    1f:f6:d4:a9:41:2e:34:a3:c9:aa:f4:07:9a:78:dc:
                    2c:a2:b0:1f:9a:ff:8d:ad:69:0d:af:84:47:a3:44:
                    1c:bb:56:48:bf:c1:37:eb:de:7c:a3:e9:0e:30:b7:
                    47:cc:d1:a9:e6:21:3a:7f:3a:40:03:88:ff:f3:36:
                    86:ca:07:ba:6b:76:c4:fe:f5:23:e6:49:0e:a8:80:
                    b3:df:fc:79:ad:cf:b8:a5:c7:5b:c9:15:20:c3:62:
                    d7:fa:cf:98:2c:af:a5:05:8c:8f:ec:33:59:bc:d9:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:57:6E:29:83:4B:8B:D6:46:3C:A1:0D:C6:1C:E3:09:42:EE:FE:67
            X509v3 Authority Key Identifier:
                keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/pVduKYNLi9ZGPKENxhzjCULu_mc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.182.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:84:e0:9d:f8:81:3f:77:cf:2c:dd:3b:f2:e8:4f:72:00:52:
         78:a1:87:fd:06:36:05:f2:e5:f9:9a:5e:6b:7a:66:d4:d1:da:
         18:c8:33:a2:6b:90:41:f2:80:a4:5e:7c:75:14:94:2a:e7:14:
         86:24:9a:0d:81:46:8c:8c:6d:e1:a3:2b:26:d7:de:98:88:f9:
         2d:73:b0:7d:43:17:3f:39:e0:ff:da:87:23:1c:81:72:a2:92:
         5b:4d:1b:be:02:6f:d3:f6:44:60:97:f5:d4:f2:43:55:5a:a0:
         c5:03:c2:7c:f9:01:2b:54:1d:7c:8b:2d:d4:96:63:7d:70:d4:
         08:ce:6f:bc:92:f9:08:df:34:f1:13:31:af:a3:68:79:c5:9d:
         60:54:0b:1c:a3:94:0a:f5:4a:a9:07:2e:53:98:14:09:9f:30:
         d7:b1:0b:fb:a4:66:1a:5e:5a:96:63:f5:62:27:c5:91:fd:1e:
         d8:3b:52:4b:ca:f5:d1:30:4e:90:9d:db:d0:53:55:48:3a:c5:
         32:c2:d1:d0:84:85:74:6f:31:af:af:b8:84:ef:56:44:90:ed:
         28:dd:c1:4a:ed:9c:35:c2:03:de:6e:bb:d5:ea:41:d3:c5:54:
         4f:6a:ef:42:c0:e7:40:0e:66:28:87:78:3d:17:2a:7c:d6:0b:
         fd:36:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:12 2026 by rpki-client