This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/k6dlQXV0CNNHoojLjuToM3RWJts.roa
File:                     k6dlQXV0CNNHoojLjuToM3RWJts.roa (raw, json)
Hash identifier:          r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=
Subject key identifier:   93:A7:65:41:75:74:08:D3:47:A2:88:CB:8E:E4:E8:33:74:56:26:DB
Certificate issuer:       /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial:       019B7F83BD43A842B9C0A5809505A6408AA3
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/k6dlQXV0CNNHoojLjuToM3RWJts.roa
Signing time:             Fri 02 Jan 2026 16:21:38 +0000
ROA not before:           Fri 02 Jan 2026 16:21:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51889
IP address blocks:        45.147.76.0/22 maxlen: 22
                          45.147.76.0/23 maxlen: 23
                          45.147.76.0/24 maxlen: 24
                          45.147.77.0/24 maxlen: 24
                          45.147.78.0/23 maxlen: 23
                          45.147.78.0/24 maxlen: 24
                          45.147.79.0/24 maxlen: 24
                          91.226.246.0/24 maxlen: 24
                          2a13:1740::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:bd:43:a8:42:b9:c0:a5:80:95:05:a6:40:8a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
        Validity
            Not Before: Jan  2 16:21:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=93a76541757408d347a288cb8ee4e833745626db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:5d:a7:39:a4:8f:e9:03:ee:9e:d3:8b:fe:
                    e1:5e:4e:a5:5d:4d:5e:b5:d4:73:76:29:20:63:80:
                    77:dc:be:c3:d1:15:d6:0b:e2:51:82:f6:ee:87:44:
                    02:19:8a:9b:d1:89:88:bc:d0:cc:e2:93:3d:ca:f5:
                    0e:4b:4c:ce:cc:8b:37:5e:1b:30:cd:f5:62:1b:b5:
                    e4:97:9b:0f:94:60:24:bd:69:e9:3a:c4:38:cd:bc:
                    cd:19:6c:9a:4d:ee:e4:03:8e:bf:44:28:c9:87:e6:
                    ab:c1:0f:75:80:ea:e0:7e:69:73:f4:ec:45:9a:61:
                    38:0f:ed:9b:ad:e1:de:c3:3c:dd:05:d2:07:03:c9:
                    de:9e:e7:be:47:6c:28:fc:86:6a:25:8f:08:61:23:
                    54:79:69:f0:8e:86:64:48:a0:b7:4c:b8:46:34:17:
                    16:21:81:cb:cd:82:4d:98:8a:bc:1e:b3:e2:a7:0d:
                    6c:59:f0:b6:5d:b4:c4:27:ca:26:be:1a:fa:c0:4c:
                    c8:56:86:7c:53:54:78:34:ee:a2:e8:68:65:ac:26:
                    15:81:38:17:9b:05:17:de:23:78:ad:e2:28:2e:97:
                    74:66:e3:a4:c7:27:79:9b:a1:e9:b5:24:d3:02:b9:
                    21:8f:3c:01:41:0d:e4:cb:df:a8:b7:56:5d:67:4a:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:65:41:75:74:08:D3:47:A2:88:CB:8E:E4:E8:33:74:56:26:DB
            X509v3 Authority Key Identifier:
                keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/k6dlQXV0CNNHoojLjuToM3RWJts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.76.0/22
                  91.226.246.0/24
                IPv6:
                  2a13:1740::/29

    Signature Algorithm: sha256WithRSAEncryption
         02:9d:e0:c0:2a:94:57:11:ab:0f:bd:89:76:31:df:05:ba:87:
         af:c2:bf:c1:38:cc:7c:ad:a1:b2:87:6b:a6:b9:72:1f:37:f1:
         19:20:ea:62:19:34:d5:a8:0a:47:f3:dd:ca:3f:3c:fc:d3:3b:
         82:29:22:0b:86:7d:81:73:9f:50:2b:43:80:d4:01:fa:b1:44:
         6c:e6:c9:0e:f1:f0:6e:4c:73:27:61:09:f9:72:ae:23:7d:2d:
         fe:81:b7:29:33:9d:00:8f:cc:8f:26:46:fb:dd:b9:2c:69:c8:
         9f:1a:de:c8:01:e3:10:bd:01:0d:f3:10:57:4c:62:d5:43:c8:
         bf:9a:90:67:42:8c:18:ae:9c:8e:92:4e:a5:dc:54:c2:33:c9:
         93:58:ac:d2:b2:68:ba:2f:57:3c:5c:4c:14:83:cf:98:6e:db:
         4f:77:cd:69:98:a0:9b:d6:6e:5b:75:a9:c1:25:df:55:34:6f:
         61:25:99:4d:2b:f8:7a:52:37:e9:db:ac:1b:17:b5:5a:18:17:
         dd:b9:28:ef:d3:e3:9a:1c:ab:a8:4f:b1:34:5f:e5:10:1b:dd:
         d5:c4:7e:19:ba:f0:ad:66:00:90:f8:2c:ed:48:4d:1a:70:f8:
         46:13:61:0f:69:4d:ad:e0:74:e0:6b:83:a1:ca:7b:0b:18:64:
         44:db:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:57 2026 by rpki-client