This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/l6SM6ptT76dYR0t29i5gSk-UFyA.roa
File:                     l6SM6ptT76dYR0t29i5gSk-UFyA.roa (raw, json)
Hash identifier:          Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=
Subject key identifier:   97:A4:8C:EA:9B:53:EF:A7:58:47:4B:76:F6:2E:60:4A:4F:94:17:20
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019B7E37A9E572E532A1D8590D1E34E90F8C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/l6SM6ptT76dYR0t29i5gSk-UFyA.roa
Signing time:             Fri 02 Jan 2026 10:18:55 +0000
ROA not before:           Fri 02 Jan 2026 10:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        46.151.32.0/24 maxlen: 24
                          46.151.33.0/24 maxlen: 24
                          46.151.34.0/24 maxlen: 24
                          46.151.35.0/24 maxlen: 24
                          77.36.2.0/23 maxlen: 24
                          77.36.54.0/24 maxlen: 24
                          77.36.55.0/24 maxlen: 24
                          91.232.20.0/24 maxlen: 24
                          93.120.36.0/24 maxlen: 24
                          93.120.37.0/24 maxlen: 24
                          93.120.38.0/24 maxlen: 24
                          176.110.107.0/24 maxlen: 24
                          176.110.112.0/24 maxlen: 24
                          176.110.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:a9:e5:72:e5:32:a1:d8:59:0d:1e:34:e9:0f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jan  2 10:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=97a48cea9b53efa758474b76f62e604a4f941720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:af:81:fe:00:22:4f:a6:cb:23:ac:9a:77:71:
                    7a:71:b6:be:01:c6:c3:9c:88:69:a1:28:ba:15:37:
                    56:9c:e7:af:9c:a2:bb:4d:51:8c:91:96:fd:f2:36:
                    9c:69:70:10:68:c9:73:82:cd:5a:0c:65:8a:a3:11:
                    40:06:ef:6c:fa:99:8b:3a:41:1f:f3:97:7f:0f:a6:
                    da:56:cd:9b:29:a0:10:db:b5:f4:ec:f2:43:b0:cf:
                    c0:74:cb:83:a4:b4:aa:51:dc:c7:fa:52:eb:c6:6b:
                    96:9d:79:a6:9e:d5:00:28:a8:8f:65:26:5c:1b:e0:
                    20:2a:84:19:d8:35:4b:bf:24:39:f6:c0:bb:3e:26:
                    82:b0:0f:b4:8a:bb:e3:ad:2d:02:c5:7c:a2:17:ed:
                    93:46:04:fa:9b:3c:bb:34:79:09:87:24:92:84:e4:
                    aa:c4:3d:4d:53:06:ca:da:ac:34:93:b0:92:1e:67:
                    4e:5c:cc:5f:10:e0:51:5a:5d:0e:17:c1:73:ec:dc:
                    45:b0:bf:1e:90:7b:13:31:1c:f1:13:30:57:58:98:
                    86:98:5f:2d:47:47:bb:8c:ad:dd:5f:40:d4:35:3b:
                    5e:8a:17:b6:1c:b5:1c:e7:25:24:eb:7a:14:51:d4:
                    94:de:6d:8f:c1:93:de:8d:4a:4f:7c:29:c7:2e:63:
                    dd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A4:8C:EA:9B:53:EF:A7:58:47:4B:76:F6:2E:60:4A:4F:94:17:20
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/l6SM6ptT76dYR0t29i5gSk-UFyA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.151.32.0/22
                  77.36.2.0/23
                  77.36.54.0/23
                  91.232.20.0/24
                  93.120.36.0-93.120.38.255
                  176.110.107.0/24
                  176.110.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:5c:ca:70:6a:e6:99:8b:07:51:14:ff:6e:05:35:a6:f0:02:
         b2:95:d4:14:20:71:7d:a0:18:48:b8:be:cf:c1:dc:3a:7b:d6:
         77:45:25:f8:af:2d:eb:a3:66:31:1a:88:83:e3:ca:46:4d:2e:
         84:b4:dd:c5:be:85:ae:80:8b:0c:39:fd:05:32:f0:2e:70:8a:
         d2:9c:41:cb:b7:c4:32:32:9b:36:ac:ca:57:68:39:74:e4:86:
         43:40:68:09:45:c2:03:4d:b8:09:cd:ff:c0:02:6a:e7:a6:ac:
         d2:a6:3f:74:f4:be:32:d5:78:82:74:fd:71:be:f0:eb:07:5d:
         a2:38:b3:e5:2c:0f:68:fe:df:47:e5:5f:f5:36:27:b7:9f:c5:
         fe:cc:08:38:75:c6:61:c8:65:89:42:16:3d:cd:85:2d:dc:3a:
         d8:85:5e:14:53:95:3b:f6:75:34:de:0c:cc:96:c2:f8:5f:bf:
         06:2b:0f:92:e1:8a:39:11:e7:b3:66:7d:08:81:ea:8a:6c:4c:
         f4:3b:8a:c5:8a:75:64:2e:dc:b6:92:ba:bb:4d:23:12:b3:3e:
         6f:90:0c:39:71:4b:8b:c3:b5:1d:af:ff:d6:b2:f6:c9:7b:64:
         b8:72:fe:88:47:2b:c5:85:b3:6b:96:3c:06:86:68:3b:4f:7a:
         f2:34:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:57 2026 by rpki-client