This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/dwRGeRiPxu8Ert93hewpcLQlQPs.roa
File:                     dwRGeRiPxu8Ert93hewpcLQlQPs.roa (raw, json)
Hash identifier:          EAiXOznjLfpEqp6yCwCN/ahYsHXDQcQqsmXEqqAl9Vo=
Subject key identifier:   77:04:46:79:18:8F:C6:EF:04:AE:DF:77:85:EC:29:70:B4:25:40:FB
Certificate issuer:       /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial:       019B78A243FDCB1CFDD15BCAA9270D15B5CF
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/dwRGeRiPxu8Ert93hewpcLQlQPs.roa
Signing time:             Thu 01 Jan 2026 08:17:38 +0000
ROA not before:           Thu 01 Jan 2026 08:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206804
IP address blocks:        46.246.1.0/24 maxlen: 24
                          178.73.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:43:fd:cb:1c:fd:d1:5b:ca:a9:27:0d:15:b5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
        Validity
            Not Before: Jan  1 08:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77044679188fc6ef04aedf7785ec2970b42540fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:f0:75:a4:a8:e6:2d:1f:cf:25:6b:ba:b3:
                    c3:b6:87:92:59:06:f0:05:a2:71:a5:3f:bb:f5:93:
                    2e:fd:6c:c3:03:25:00:ab:a5:cb:a4:f3:c7:ad:06:
                    4c:60:11:67:e6:04:f7:54:5b:60:df:4f:a3:cd:ca:
                    83:6e:df:0e:84:26:ba:29:6a:a4:1f:08:c8:ef:2d:
                    f7:7d:3f:63:70:10:81:30:ce:f2:f9:40:b2:c6:d0:
                    10:0a:92:1d:d2:6a:20:15:b5:32:ee:3b:53:07:7d:
                    fc:2b:c4:92:58:22:a9:69:c7:00:3d:3a:eb:69:c6:
                    3d:f0:b4:a2:f5:19:c9:2d:46:f8:d2:3c:0a:22:db:
                    cc:5d:f7:25:66:01:89:8c:10:93:06:40:33:62:96:
                    95:64:fc:b3:09:8f:81:d2:e8:43:10:b4:94:2c:40:
                    44:1d:ff:d6:0f:18:31:8f:39:61:ce:0b:0b:d7:9c:
                    9b:5b:07:7f:00:48:0d:9d:17:26:dc:2b:fa:89:08:
                    0f:ed:bf:f5:1f:10:be:18:f3:97:cf:51:a9:99:c3:
                    c2:d3:f1:68:e6:8e:72:f5:2a:e6:be:3d:e2:8b:6f:
                    51:c1:2b:cf:a8:ac:1b:18:b0:bd:b0:cf:69:aa:eb:
                    6b:0f:3b:84:c2:7c:c3:ac:69:d7:cb:a7:40:2d:c3:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:04:46:79:18:8F:C6:EF:04:AE:DF:77:85:EC:29:70:B4:25:40:FB
            X509v3 Authority Key Identifier:
                keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/dwRGeRiPxu8Ert93hewpcLQlQPs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.246.1.0/24
                  178.73.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:71:75:a2:67:56:42:b4:e0:e7:27:ab:ca:60:2d:5b:27:0c:
         78:52:7e:c1:aa:cd:18:f7:52:52:a2:23:c5:22:d5:e2:e2:d0:
         8f:bd:e3:ed:16:9f:4f:92:c3:be:fe:67:f8:3d:9a:43:65:98:
         eb:b7:43:6a:ff:63:96:f9:4b:78:89:a9:0e:cb:77:06:f1:3e:
         21:a5:3b:8e:44:af:a5:d3:39:a6:61:6e:b4:ad:1e:3a:3f:4d:
         72:fe:eb:93:b6:54:c0:9e:fc:41:db:36:f7:d3:77:8a:06:8f:
         5f:6e:a4:3b:d5:76:0c:a7:58:b1:b5:e9:a5:62:df:f8:12:cb:
         75:e1:d4:94:ba:4d:c3:e0:70:4d:27:9a:1e:fd:82:dd:ab:9c:
         55:33:c5:1e:b7:f9:c2:4f:10:16:21:18:03:63:0e:19:8b:8f:
         a0:2d:15:55:8d:c0:2b:c9:9a:43:ed:e5:65:70:99:39:ba:84:
         f1:81:c0:db:3a:9f:54:d1:f2:23:0f:b0:4a:49:b4:55:d9:21:
         f7:06:8d:d8:e1:19:91:96:2e:8e:6a:69:51:5b:23:45:66:0a:
         cc:99:99:6d:60:e9:f2:0f:0f:35:1d:a2:aa:13:88:5b:9c:26:
         2c:08:1a:ed:51:00:64:d1:73:62:22:82:55:5c:d6:84:7f:42:
         6a:4c:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:08:43 2026 by rpki-client