This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/2uv4A35uHTMpYA3zuKbwoHVzKho.roa
File:                     2uv4A35uHTMpYA3zuKbwoHVzKho.roa (raw, json)
Hash identifier:          1l7FhVG9aM98lzJEoZX89yaj7eW/134YEJfp3yB6jdU=
Subject key identifier:   DA:EB:F8:03:7E:6E:1D:33:29:60:0D:F3:B8:A6:F0:A0:75:73:2A:1A
Certificate issuer:       /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial:       019B7D5CBA651A1A3B19A5B3D0D01C39A874
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/2uv4A35uHTMpYA3zuKbwoHVzKho.roa
Signing time:             Fri 02 Jan 2026 06:19:47 +0000
ROA not before:           Fri 02 Jan 2026 06:19:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203318
IP address blocks:        45.153.84.0/22 maxlen: 24
                          2a05:b000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:ba:65:1a:1a:3b:19:a5:b3:d0:d0:1c:39:a8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
        Validity
            Not Before: Jan  2 06:19:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=daebf8037e6e1d3329600df3b8a6f0a075732a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:87:29:79:06:24:9c:e9:e0:5b:f7:b9:17:1c:
                    7c:28:a7:66:4b:cc:96:ed:97:c9:7c:3e:6d:42:68:
                    a4:41:b8:e0:53:5d:0b:fd:2b:5c:34:1f:fd:7a:90:
                    96:18:4d:51:4f:cb:74:4c:d5:93:b3:77:c1:82:55:
                    56:97:ba:60:f1:be:21:16:b9:3a:a2:6f:a8:af:b3:
                    21:35:93:e3:e6:1a:20:66:93:7c:ff:68:6b:1b:dd:
                    27:02:35:42:34:6a:05:f8:d0:79:2c:e6:fc:95:89:
                    5d:0a:d9:36:c0:d8:56:e3:a1:d6:e8:1c:8d:69:99:
                    c5:81:e2:b3:4f:aa:09:6d:b4:dc:50:f5:88:47:db:
                    5e:3c:df:0f:a3:1a:7b:18:d6:84:b6:6a:4f:8a:57:
                    c7:e7:2f:1d:42:ba:f6:51:55:c2:4c:a4:c2:b3:c5:
                    97:e1:85:f5:29:88:96:0d:57:74:07:49:19:a0:f7:
                    23:7f:49:3f:81:88:78:74:b9:99:7f:07:48:1b:80:
                    cb:60:da:31:9f:ed:e8:5a:36:a0:63:3b:b6:5a:06:
                    6c:dc:cd:e3:16:b0:e8:41:1a:45:72:75:ef:d2:89:
                    d3:71:bb:14:52:5a:f0:4c:9c:be:22:fa:bd:08:dc:
                    40:ec:92:f8:a7:68:22:a9:ba:ad:c4:a3:45:09:8d:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EB:F8:03:7E:6E:1D:33:29:60:0D:F3:B8:A6:F0:A0:75:73:2A:1A
            X509v3 Authority Key Identifier:
                keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/2uv4A35uHTMpYA3zuKbwoHVzKho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.84.0/22
                IPv6:
                  2a05:b000::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:9f:f4:2f:cd:68:67:c9:22:9d:33:6e:29:73:59:6c:f0:53:
         fd:07:96:36:ed:03:0b:e6:37:aa:85:c0:fd:7b:35:fe:1a:bd:
         a5:4d:03:53:b4:2d:ae:36:c8:00:39:5b:74:59:d7:11:d7:c3:
         af:59:d0:9b:44:3e:70:73:94:69:f0:d9:32:04:34:5a:ad:8a:
         7d:8e:65:c6:85:de:59:6b:ba:8d:19:b8:cc:89:e3:03:31:e8:
         71:16:20:e8:da:01:83:8d:f9:a8:98:aa:74:3d:16:14:06:f4:
         09:92:56:ef:da:31:7c:24:b5:5d:4a:08:14:30:3d:ea:18:ca:
         0b:65:29:7a:e7:bf:68:d2:a6:80:3c:b5:c9:cc:e9:79:36:5e:
         79:87:c0:fe:70:ea:2b:9a:e2:68:b3:0d:68:a8:65:0b:6b:5b:
         46:4b:cd:de:f4:95:f4:6b:c0:11:26:29:e3:ff:f6:2c:b3:f7:
         59:24:c2:9d:16:26:95:5e:46:d9:43:48:eb:d9:76:48:11:0b:
         5b:a2:39:d5:4c:5b:29:6b:bc:e0:d3:e7:f3:2e:c8:9b:27:a9:
         7c:b7:e3:c7:23:26:cf:59:e0:8d:de:cb:81:ce:38:75:cb:bf:
         65:e0:a3:2d:7c:d0:a0:46:7a:5a:08:e1:30:a4:44:5c:14:8a:
         d6:11:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:24:24 2026 by rpki-client