This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/rDteTEGGPxt7CaJGBgKr1ALLgTM.roa
File:                     rDteTEGGPxt7CaJGBgKr1ALLgTM.roa (raw, json)
Hash identifier:          TV2GDIQbIwm8aM3NmO/8wyhyHPMnS3b2eZNvh57dJ/4=
Subject key identifier:   AC:3B:5E:4C:41:86:3F:1B:7B:09:A2:46:06:02:AB:D4:02:CB:81:33
Certificate issuer:       /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial:       019B77592FAC6527EAC24E4AFABD02669BDA
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/rDteTEGGPxt7CaJGBgKr1ALLgTM.roa
Signing time:             Thu 01 Jan 2026 02:18:12 +0000
ROA not before:           Thu 01 Jan 2026 02:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     46475
IP address blocks:        2a14:fc80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 08:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:2f:ac:65:27:ea:c2:4e:4a:fa:bd:02:66:9b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
        Validity
            Not Before: Jan  1 02:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac3b5e4c41863f1b7b09a2460602abd402cb8133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:85:87:4e:d9:33:70:d7:3a:a4:2c:47:9d:
                    cc:38:b5:11:8d:40:ae:27:77:91:c4:a5:e6:89:50:
                    7d:21:75:25:d7:09:eb:f2:e4:d8:81:70:da:22:2a:
                    fd:78:39:5c:45:74:f5:17:3b:61:39:4b:5f:80:69:
                    1a:37:f6:c1:0a:b1:e0:a5:9c:5e:62:78:bd:32:b6:
                    be:67:58:76:3b:d3:68:d3:5d:b3:a8:dd:33:d0:ef:
                    b3:33:c9:e5:99:10:40:05:53:a1:5e:a2:fc:9a:b7:
                    5c:ae:49:36:30:32:8f:09:54:19:cf:9a:69:b2:a9:
                    2a:fe:33:f1:ff:7d:74:a3:98:a2:39:b0:b1:6a:61:
                    6b:8a:5f:9b:2c:68:6f:84:a0:2e:ea:9f:d5:d5:a7:
                    85:b0:cd:a6:6a:3c:70:a3:88:d1:4e:c8:cc:22:f3:
                    a5:41:1f:e7:8b:bf:8e:31:5d:0b:e3:52:07:a3:5f:
                    7c:3d:12:67:02:be:1f:5d:fd:45:9b:a2:93:e3:5e:
                    2f:8d:42:1b:22:85:21:57:21:73:b2:42:4b:24:4a:
                    6d:e5:08:6a:3f:04:16:05:da:da:85:fe:44:45:ac:
                    87:5a:8a:fe:c7:7c:27:7b:21:6a:73:a3:0b:6b:c7:
                    c2:49:8c:81:1b:f3:32:f0:36:16:64:c6:09:fe:fd:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3B:5E:4C:41:86:3F:1B:7B:09:A2:46:06:02:AB:D4:02:CB:81:33
            X509v3 Authority Key Identifier:
                keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/rDteTEGGPxt7CaJGBgKr1ALLgTM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:fc80::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:af:26:45:89:97:98:dc:cf:8f:76:3f:4d:66:66:a4:5c:5b:
         92:85:cc:1b:a0:59:7f:10:07:e0:2d:51:f4:e6:8f:a2:e5:a6:
         87:7b:25:27:d7:08:9b:ad:b4:64:8a:e8:7a:bc:7b:79:b4:64:
         cc:31:82:b0:c8:7f:66:63:b1:7c:3c:2a:a3:4a:ba:d8:4a:ef:
         e1:4f:f3:af:7f:7f:c1:d6:4c:54:17:10:0d:0f:c5:e7:e6:a7:
         09:7d:35:99:30:c8:1f:d3:b2:80:e2:7d:43:93:26:f4:6a:9a:
         4d:7b:da:58:b9:32:2e:ea:89:8b:67:3d:90:47:31:a5:4c:57:
         5e:21:1b:39:df:0f:3c:c5:3b:9b:67:7e:c8:2b:ff:62:dc:3c:
         19:7b:df:5d:42:b5:c6:cd:cd:4d:f0:99:0f:4b:12:6d:16:17:
         ee:6b:94:30:de:6d:81:1e:6d:65:c9:d2:39:2c:cb:ec:f4:2f:
         10:da:fb:48:06:ee:83:fb:c3:c6:9c:96:fe:13:ff:b6:4b:8c:
         94:b6:b3:6b:2b:0c:3a:9a:53:0a:8e:36:3f:24:73:25:01:b2:
         2f:dc:b7:cf:57:ed:14:21:3d:33:43:b0:92:7b:c8:2f:bb:78:
         6c:80:0c:5b:5c:3b:2c:1f:67:d2:95:34:c7:2e:02:aa:44:4a:
         58:64:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 17:32:16 2026 by rpki-client