This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/RlL6IgEXEHtlHG87R_tgHeGJuso.roa
File:                     RlL6IgEXEHtlHG87R_tgHeGJuso.roa (raw, json)
Hash identifier:          e4pQoIrHsDZ81Hd65Er2benKsfXZs73qgjEzBGazD/4=
Subject key identifier:   46:52:FA:22:01:17:10:7B:65:1C:6F:3B:47:FB:60:1D:E1:89:BA:CA
Certificate issuer:       /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial:       019B7CEE4A5DDB66725DB1A57DB87C8D2AA1
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/RlL6IgEXEHtlHG87R_tgHeGJuso.roa
Signing time:             Fri 02 Jan 2026 04:19:09 +0000
ROA not before:           Fri 02 Jan 2026 04:19:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62102
IP address blocks:        185.47.176.0/22 maxlen: 22
                          185.47.176.0/23 maxlen: 23
                          185.47.176.0/24 maxlen: 24
                          185.47.177.0/24 maxlen: 24
                          185.47.178.0/23 maxlen: 23
                          185.47.178.0/24 maxlen: 24
                          185.47.179.0/24 maxlen: 24
                          2a01:7ce0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:4a:5d:db:66:72:5d:b1:a5:7d:b8:7c:8d:2a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
        Validity
            Not Before: Jan  2 04:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4652fa220117107b651c6f3b47fb601de189baca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:53:7e:1b:bf:93:b9:d2:2e:f1:ab:62:27:
                    19:0e:5a:20:96:be:7c:7f:e8:6d:e6:56:1b:b9:3c:
                    bc:6c:68:92:1a:5c:40:5e:01:c0:e3:bc:d7:d8:49:
                    98:ef:bf:b4:f9:d2:a0:fb:9b:80:57:4e:49:2f:ee:
                    11:55:5d:8b:80:7c:c3:fc:2d:e7:a8:41:76:52:a8:
                    21:70:89:10:96:19:c3:86:8b:bd:44:a8:5d:96:d1:
                    7b:4b:b1:ef:2a:cd:38:54:35:0d:46:8b:29:33:86:
                    75:ab:8b:c6:d3:0c:40:b5:48:8a:f4:b7:07:a0:fd:
                    d2:58:f5:13:8f:af:ec:41:83:57:58:78:97:52:43:
                    ab:d2:c4:96:fe:4d:e2:25:3f:16:ef:0a:9e:b8:ff:
                    02:29:13:89:8e:fb:a6:60:98:88:ac:d8:91:5f:ec:
                    69:ef:04:22:0b:3a:bd:6c:15:2b:0a:71:07:07:e5:
                    cc:6f:5e:28:d5:f3:31:5e:84:11:ce:ea:8e:52:06:
                    9a:3d:80:4c:59:e9:be:90:bf:c7:1e:20:1b:1c:2a:
                    08:16:70:ec:a6:5b:22:8f:6c:6c:04:a0:45:e3:73:
                    ae:95:46:53:d4:44:4a:35:f2:85:26:17:df:6d:48:
                    94:d0:64:6a:35:6f:bc:49:22:0f:5c:ee:4e:ce:a4:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:52:FA:22:01:17:10:7B:65:1C:6F:3B:47:FB:60:1D:E1:89:BA:CA
            X509v3 Authority Key Identifier:
                keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/RlL6IgEXEHtlHG87R_tgHeGJuso.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.47.176.0/22
                IPv6:
                  2a01:7ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:99:81:1a:61:08:06:d7:36:7c:ab:d6:f8:3c:23:92:e3:8b:
         f9:74:36:dc:df:1d:43:4a:8a:24:d4:d1:d2:0b:a2:5a:6e:90:
         22:78:c4:55:c2:68:03:75:7b:67:94:30:3c:03:78:1c:13:3e:
         bd:e4:3c:17:87:e5:7a:c5:63:c0:67:0e:d6:ea:9f:e3:16:05:
         73:c7:57:c2:ad:6e:c0:bb:6d:2b:3e:b4:98:55:1b:1d:2f:76:
         87:b5:59:4e:c5:f1:4b:e5:0c:dd:01:be:d9:df:91:c7:d6:a2:
         53:c6:05:be:81:64:c6:8a:79:1f:49:0c:ab:e9:63:4e:0f:ca:
         59:41:fd:f6:e5:bd:34:70:a8:77:c7:ce:b1:f7:1d:74:90:39:
         96:af:f3:17:0f:bd:af:cc:3b:c4:b8:81:53:a8:23:23:ee:7e:
         99:e2:d9:74:1d:59:86:a6:46:b7:43:ba:e7:28:85:2d:ad:71:
         1c:d5:28:44:65:c8:f8:b5:5c:49:d6:af:e7:df:d6:dd:f4:3c:
         5c:54:36:28:db:3e:b0:cc:d7:41:7a:28:a8:f6:11:d5:0f:1e:
         02:d6:0f:08:b9:20:a3:9b:b3:3c:52:3e:e1:5b:dd:ee:8c:d3:
         1c:5b:5b:c2:b7:d4:e4:c8:c0:f9:6c:ef:16:06:6f:f5:f6:6f:
         c0:cf:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:51 2026 by rpki-client