This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/1urLz8sI-D-U1DWR00K73cOQtJw.roa
File:                     1urLz8sI-D-U1DWR00K73cOQtJw.roa (raw, json)
Hash identifier:          h9FTShSF6pUVjdu4OolKEkCN6zMb2Hm/ugBT1eJvw3M=
Subject key identifier:   D6:EA:CB:CF:CB:08:F8:3F:94:D4:35:91:D3:42:BB:DD:C3:90:B4:9C
Certificate issuer:       /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial:       019B783533A984E7890E7F6C96CAA9966470
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/1urLz8sI-D-U1DWR00K73cOQtJw.roa
Signing time:             Thu 01 Jan 2026 06:18:31 +0000
ROA not before:           Thu 01 Jan 2026 06:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60822
IP address blocks:        46.23.192.0/21 maxlen: 21
                          46.23.200.0/22 maxlen: 22
                          46.23.204.0/24 maxlen: 24
                          46.23.205.0/24 maxlen: 24
                          46.23.206.0/24 maxlen: 24
                          46.23.207.0/24 maxlen: 24
                          185.85.212.0/22 maxlen: 22
                          195.137.128.0/24 maxlen: 24
                          195.137.129.0/24 maxlen: 24
                          195.137.140.0/22 maxlen: 22
                          195.137.144.0/22 maxlen: 22
                          195.137.148.0/24 maxlen: 24
                          195.137.149.0/24 maxlen: 24
                          195.137.150.0/24 maxlen: 24
                          195.137.151.0/24 maxlen: 24
                          195.137.152.0/24 maxlen: 24
                          195.137.153.0/24 maxlen: 24
                          195.137.154.0/24 maxlen: 24
                          195.137.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:33:a9:84:e7:89:0e:7f:6c:96:ca:a9:96:64:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
        Validity
            Not Before: Jan  1 06:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d6eacbcfcb08f83f94d43591d342bbddc390b49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:2a:8e:e3:2d:17:e5:58:1b:87:40:cf:97:
                    44:4c:2e:c3:8a:dc:5e:39:e2:f3:e5:19:7b:b3:c5:
                    b7:a9:f1:93:9c:50:3d:ac:5d:43:51:fb:f7:62:d7:
                    f4:0f:1b:79:ef:6a:cc:5b:15:37:cb:17:f5:5b:54:
                    24:90:08:bb:92:a5:08:14:84:f4:69:39:cf:6e:7f:
                    72:5c:95:e1:3b:f7:18:c8:f2:a1:5a:27:e9:68:92:
                    6c:a2:f5:29:3e:b4:b0:33:1c:c1:30:ed:9b:8d:4f:
                    3c:53:6e:b7:a9:91:41:be:30:96:72:ea:d0:60:f9:
                    b0:5d:77:a4:91:59:40:1f:81:4e:de:f0:86:c6:d8:
                    61:72:9e:cb:c0:be:4f:4e:f1:a7:a7:19:5d:4a:cf:
                    4b:c9:dd:3e:b6:6e:cd:a2:ea:78:cd:5c:0f:d5:47:
                    28:d5:7c:2b:a4:47:92:ea:62:38:35:5a:6b:5f:02:
                    52:8a:4e:ae:20:de:72:17:59:a6:7d:c5:dd:be:e3:
                    76:3b:d1:27:bb:00:8a:65:1c:b5:5d:ac:eb:37:78:
                    a6:26:67:38:f8:06:9e:bb:d1:c6:09:48:4d:73:a5:
                    55:45:f4:de:0a:c1:5b:ae:0e:97:83:8a:b1:88:7e:
                    a7:0d:61:e4:5c:4c:06:d6:7e:04:e8:0f:98:1e:96:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EA:CB:CF:CB:08:F8:3F:94:D4:35:91:D3:42:BB:DD:C3:90:B4:9C
            X509v3 Authority Key Identifier:
                keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/1urLz8sI-D-U1DWR00K73cOQtJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.23.192.0/20
                  185.85.212.0/22
                  195.137.128.0/23
                  195.137.140.0-195.137.155.255

    Signature Algorithm: sha256WithRSAEncryption
         4b:18:39:86:3c:35:9a:4a:e8:85:3d:78:c7:92:c8:4a:8b:af:
         6f:bc:97:f2:11:be:99:4c:38:e4:0f:5d:db:79:cc:40:5a:72:
         1e:6c:33:c4:db:79:2b:f1:33:63:11:1a:8d:d0:c4:fc:ae:fc:
         0e:bb:bd:67:6b:21:0b:26:c8:ea:fb:4d:16:b0:96:61:a3:20:
         e4:55:4c:76:e0:7b:eb:a3:d1:e0:00:54:d3:97:75:5f:cd:b7:
         24:7c:52:d9:b9:e1:a6:d9:d0:e4:7b:7c:a5:91:e4:f8:45:3c:
         87:0b:af:34:8a:6a:87:10:23:5c:17:91:c1:e4:5d:f4:16:a1:
         b9:3c:42:07:17:f7:9d:90:13:d0:23:f9:8c:cf:02:9c:d4:b7:
         a0:08:1d:e9:01:da:15:08:29:53:20:89:2c:95:a0:34:ee:d7:
         5f:11:4f:f4:0a:44:ea:c1:fb:a6:a1:55:d2:87:fe:dc:90:b4:
         ad:f7:9a:40:71:62:d2:c5:f0:ff:ae:a0:e8:4b:8c:27:eb:f0:
         4e:d9:d1:a4:44:66:8d:e1:90:ab:61:eb:62:63:d4:bc:b2:9a:
         b9:2a:23:e2:3f:61:18:9b:ec:c0:cf:97:be:b1:39:94:a7:ba:
         13:b3:4a:31:a4:02:06:67:13:bd:46:35:b8:73:54:85:8d:59:
         8c:bd:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:04 2026 by rpki-client