This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/SDv_Hv3j1zQYKdMKKJahi--bpbA.roa
File:                     SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (raw, json)
Hash identifier:          wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=
Subject key identifier:   48:3B:FF:1E:FD:E3:D7:34:18:29:D3:0A:28:96:A1:8B:EF:9B:A5:B0
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       019B7C80C3E797ABD3E6B899703F19F91800
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/SDv_Hv3j1zQYKdMKKJahi--bpbA.roa
Signing time:             Fri 02 Jan 2026 02:19:32 +0000
ROA not before:           Fri 02 Jan 2026 02:19:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206346
IP address blocks:        46.253.11.0/24 maxlen: 24
                          46.253.12.0/24 maxlen: 24
                          46.253.13.0/24 maxlen: 24
                          46.253.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:c3:e7:97:ab:d3:e6:b8:99:70:3f:19:f9:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Jan  2 02:19:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=483bff1efde3d7341829d30a2896a18bef9ba5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:67:77:38:30:53:46:42:ed:34:19:11:9d:
                    82:46:34:7d:b6:31:9f:16:0c:b1:78:41:c1:3f:72:
                    76:02:74:0e:eb:0d:22:be:a3:de:da:c5:9d:7b:ca:
                    fa:a8:71:05:7e:14:18:ac:81:2d:42:5c:68:39:95:
                    4d:cf:ba:3d:cb:df:ba:2c:db:7d:9e:fa:ee:87:92:
                    9c:bb:16:e1:b1:10:e7:b5:eb:4c:cc:c9:87:59:55:
                    88:6d:a1:ff:ee:e6:d1:24:8d:50:11:47:8e:bb:ac:
                    da:d7:37:b1:8b:c5:e6:55:49:4a:7c:63:cb:39:82:
                    91:f1:42:37:f8:43:81:e7:4d:2d:11:b4:79:b0:d4:
                    2a:e0:d6:50:d5:5c:97:de:55:39:dd:32:cb:d9:eb:
                    06:c7:e2:d4:e3:8f:da:da:b9:86:a7:1d:a9:de:37:
                    78:ea:f0:6d:0a:3d:d2:04:28:ae:e3:d6:b3:eb:e6:
                    88:78:4e:61:ff:bc:a5:db:90:7b:22:bd:eb:8c:aa:
                    12:53:f0:db:46:94:8c:8e:dc:9e:35:13:e1:e8:4d:
                    2e:83:27:9b:ba:8d:66:a7:e4:e7:9a:31:6f:f7:55:
                    80:6c:ee:7a:63:e6:d9:8d:03:c9:9e:66:a1:7f:bf:
                    00:39:18:0c:f4:63:c5:52:d9:0a:05:2f:ce:f9:1e:
                    78:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3B:FF:1E:FD:E3:D7:34:18:29:D3:0A:28:96:A1:8B:EF:9B:A5:B0
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/SDv_Hv3j1zQYKdMKKJahi--bpbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.11.0-46.253.14.255

    Signature Algorithm: sha256WithRSAEncryption
         83:ab:9d:a4:2e:72:4c:09:47:b7:af:96:61:34:44:4d:6f:a0:
         7d:e4:db:f9:f2:5e:1f:8f:a2:e7:8a:4a:00:e8:1c:6b:b3:4c:
         f8:85:a9:c5:3f:1f:66:54:66:71:15:55:c5:6f:b3:2a:5e:35:
         96:7b:99:48:57:d6:42:db:a9:1d:4b:cd:e8:e7:c9:6a:21:a0:
         ff:f2:af:8f:92:2b:b5:15:41:23:d5:f9:89:0f:4a:b2:60:e3:
         57:e3:bf:da:e5:10:60:ba:39:93:19:9e:33:83:1e:cf:34:71:
         de:23:e6:6a:7a:3e:09:7f:e0:e9:25:f4:c2:66:22:a0:b0:ab:
         2f:18:78:57:f6:d0:62:a6:fd:66:bb:eb:e6:d7:9b:b7:85:22:
         62:e8:5b:bb:b0:88:71:af:a1:ad:99:63:95:b0:ac:bb:b4:57:
         9f:cd:16:c9:70:47:38:cd:71:6e:8f:7f:a2:30:88:fc:8c:0c:
         de:f8:d7:bc:83:33:40:10:45:90:7d:bb:14:7c:78:69:16:77:
         ac:05:3b:d5:e4:20:bf:39:37:00:d8:aa:c8:9a:7c:8d:d8:fe:
         24:bc:a9:a2:56:b1:43:ea:8a:46:5f:8c:13:3f:f3:8b:55:54:
         83:b1:86:ae:a3:72:22:a8:c0:1d:3e:29:c5:ee:5d:f8:81:77:
         81:03:30:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:30:47 2026 by rpki-client