This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/p4lMHdo4l30tBAk1ODxehJl7wWg.roa
File:                     p4lMHdo4l30tBAk1ODxehJl7wWg.roa (raw, json)
Hash identifier:          GFcdFC6qL34sruvTk9IJu2tkqlWw6IlfX6Zy2WNxmQU=
Subject key identifier:   A7:89:4C:1D:DA:38:97:7D:2D:04:09:35:38:3C:5E:84:99:7B:C1:68
Certificate issuer:       /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial:       019B7F85704FF3DF6DEF92D14B47BC093138
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/p4lMHdo4l30tBAk1ODxehJl7wWg.roa
Signing time:             Fri 02 Jan 2026 16:23:30 +0000
ROA not before:           Fri 02 Jan 2026 16:23:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211240
IP address blocks:        176.116.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:70:4f:f3:df:6d:ef:92:d1:4b:47:bc:09:31:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
        Validity
            Not Before: Jan  2 16:23:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a7894c1dda38977d2d040935383c5e84997bc168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:be:0e:7e:d7:70:04:45:10:0d:ef:22:cb:e1:
                    88:9d:33:34:3d:50:b3:c8:55:76:5c:8e:ba:f5:c0:
                    8d:7a:b2:68:5b:fd:8e:70:96:2a:38:ba:2f:6a:f1:
                    bb:88:52:9e:d7:b6:c9:78:83:42:67:81:31:a4:a4:
                    7e:6c:fd:22:ad:95:85:5e:cf:d9:9f:ac:41:ac:25:
                    62:28:99:88:be:f6:3b:65:0c:89:69:3e:75:c1:00:
                    15:ee:72:e9:c3:5f:fe:45:11:e8:e6:25:f9:22:28:
                    c0:e7:14:f2:0e:c0:b3:4e:cd:ce:44:59:4e:55:68:
                    e1:18:4c:95:59:ce:b5:ed:26:fb:69:8e:4a:8c:bd:
                    df:7e:06:d8:27:07:3a:d9:79:a2:8a:63:57:f6:f6:
                    ab:62:3e:1b:c9:50:9c:55:ca:6b:e4:a4:00:70:91:
                    86:ad:62:cc:75:80:3d:e2:7b:7c:0f:66:1f:c0:90:
                    d5:83:ad:63:7b:3f:c7:64:30:e5:0b:88:0e:c6:26:
                    aa:77:8c:bb:dd:3e:87:12:2d:1e:1a:c2:1f:cb:31:
                    11:1e:c0:4c:29:85:0f:8a:7b:8d:9c:d4:5c:0b:c2:
                    68:90:6c:c7:93:2f:8f:27:98:70:9a:0f:d9:39:f8:
                    da:9e:32:e4:82:77:7e:43:03:8d:11:af:95:6b:77:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:89:4C:1D:DA:38:97:7D:2D:04:09:35:38:3C:5E:84:99:7B:C1:68
            X509v3 Authority Key Identifier:
                keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/p4lMHdo4l30tBAk1ODxehJl7wWg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:53:75:58:b7:e0:89:22:e8:94:d8:b2:1b:08:01:f1:2c:5b:
         ad:f0:7e:56:47:38:c5:d0:81:9b:5e:4a:65:00:9e:d6:71:7d:
         92:5a:f8:4e:1c:c3:d6:1a:57:08:09:b0:22:7b:b8:de:84:8f:
         b3:82:5c:63:40:73:33:ae:bd:ec:19:b3:cb:c9:00:4c:67:48:
         25:a0:4c:41:83:73:ca:bb:21:b0:12:56:5d:b1:a3:a7:08:c1:
         c0:0a:2f:83:e4:8c:8a:96:77:f2:82:3f:19:f0:38:95:21:8f:
         dc:d2:b4:71:cc:fb:fc:3c:13:71:6f:12:c8:07:4d:09:1b:ab:
         96:78:f6:2e:bf:e0:89:f7:89:bf:e2:23:df:4b:30:64:ce:68:
         2e:83:0f:6d:cd:27:05:d5:16:8a:66:d7:ba:61:fc:2c:f8:b2:
         0e:ad:94:c6:3c:d3:77:8b:76:e5:83:cc:07:b9:2b:a6:da:39:
         4b:2a:c3:e6:fe:b6:8b:7c:83:47:4b:d7:02:46:fc:7a:a7:5f:
         d6:a9:fe:ca:17:8d:47:a5:ad:3d:74:50:e2:f8:8d:7c:4e:68:
         69:ff:7c:2b:ea:3e:fa:d8:3d:7d:c9:87:d4:45:c0:7d:72:8e:
         d5:45:32:b9:20:a5:b0:c8:24:2b:1a:0d:ee:0e:86:64:0f:b0:
         1b:33:da:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hXBP899t75LRS0e8CTE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNjE4ZGYwMDZkNTQ4ZDFkODdlZDY0MTk1NTA2NjJkYjZm
YzA2MDYwHhcNMjYwMTAyMTYyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzg5NGMxZGRhMzg5NzdkMmQwNDA5MzUzODNjNWU4NDk5N2JjMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr4OftdwBEUQDe8iy+GInTM0PVCz
yFV2XI669cCNerJoW/2OcJYqOLovavG7iFKe17bJeINCZ4ExpKR+bP0irZWFXs/Z
n6xBrCViKJmIvvY7ZQyJaT51wQAV7nLpw1/+RRHo5iX5IijA5xTyDsCzTs3ORFlO
VWjhGEyVWc617Sb7aY5KjL3ffgbYJwc62XmiimNX9varYj4byVCcVcpr5KQAcJGG
rWLMdYA94nt8D2YfwJDVg61jez/HZDDlC4gOxiaqd4y73T6HEi0eGsIfyzERHsBM
KYUPinuNnNRcC8JokGzHky+PJ5hwmg/ZOfjanjLkgnd+QwONEa+Va3eqtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKeJTB3aOJd9LQQJNTg8XoSZe8FoMB8GA1UdIwQY
MBaAFFFhjfAG1UjR2H7WQZVQZi22/AYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEt
MzE3YzJmYjBhMzViLzEvcDRsTUhkbzRsMzB0QkFrMU9EeGVoSmw3d1dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNWZmZTctM2I0OC00ZjgwLThkNmEtMzE3YzJmYjBhMzVi
LzEvVVdHTjhBYlZTTkhZZnRaQmxWQm1MYmI4QmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHSwMA0G
CSqGSIb3DQEBCwUAA4IBAQCBU3VYt+CJIuiU2LIbCAHxLFut8H5WRzjF0IGbXkpl
AJ7WcX2SWvhOHMPWGlcICbAie7jehI+zglxjQHMzrr3sGbPLyQBMZ0gloExBg3PK
uyGwElZdsaOnCMHACi+D5IyKlnfygj8Z8DiVIY/c0rRxzPv8PBNxbxLIB00JG6uW
ePYuv+CJ94m/4iPfSzBkzmgugw9tzScF1RaKZte6Yfws+LIOrZTGPNN3i3blg8wH
uSum2jlLKsPm/raLfINHS9cCRvx6p1/Wqf7KF41Hpa09dFDi+I18Tmhp/3wr6j76
2D19yYfURcB9co7VRTK5IKWwyCQrGg3uDoZkD7AbM9oO
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:26 2026 by rpki-client