This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/40mGcXCMHPuRla1zKGXyXZBVzvs.roa
File:                     40mGcXCMHPuRla1zKGXyXZBVzvs.roa (raw, json)
Hash identifier:          WfYQcn+9zI1kuNsKzotUcFlUBcLcTv4/3QyWYbcWs7o=
Subject key identifier:   E3:49:86:71:70:8C:1C:FB:91:95:AD:73:28:65:F2:5D:90:55:CE:FB
Certificate issuer:       /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial:       019B7B36E08A3277BCAEF4FB697C9A645F64
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/40mGcXCMHPuRla1zKGXyXZBVzvs.roa
Signing time:             Thu 01 Jan 2026 20:19:12 +0000
ROA not before:           Thu 01 Jan 2026 20:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214273
IP address blocks:        45.94.184.0/24 maxlen: 24
                          45.94.185.0/24 maxlen: 24
                          194.164.176.0/24 maxlen: 24
                          194.164.177.0/24 maxlen: 24
                          2a01:f680:10::/48 maxlen: 48
                          2a01:f680:11::/48 maxlen: 48
                          2a01:f680:20::/48 maxlen: 48
                          2a01:f680:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:e0:8a:32:77:bc:ae:f4:fb:69:7c:9a:64:5f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
        Validity
            Not Before: Jan  1 20:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3498671708c1cfb9195ad732865f25d9055cefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:a5:63:6f:cf:1b:8c:c9:9d:f5:58:fd:29:
                    e8:6b:d9:9f:3f:1d:93:cf:0b:65:7a:8e:e8:73:ab:
                    7d:60:77:c1:bc:f8:14:5f:74:6d:fd:cc:29:2d:e9:
                    75:71:ef:b9:56:c3:2b:51:5f:b2:a5:6e:8e:c3:ca:
                    70:c9:99:77:e1:04:45:bf:3c:55:d5:25:c7:8c:1d:
                    bf:77:31:81:1b:c5:99:4b:ce:aa:87:32:22:1e:8b:
                    ea:ff:cb:33:d2:b2:1a:d2:4e:2b:98:9e:cc:e0:a4:
                    be:c3:76:7c:85:aa:d6:a1:37:6a:04:b3:59:8f:b9:
                    6b:52:f7:6d:2d:d2:47:47:a5:fc:dc:e4:03:53:d9:
                    3b:e9:a4:dc:3e:44:dc:4e:5b:f0:8f:7c:c6:42:6d:
                    74:a2:a0:66:d4:71:ee:38:de:f7:62:07:bf:8d:d6:
                    af:ba:62:67:6c:ef:1c:34:1d:63:81:8d:f0:0a:d1:
                    cc:2a:c5:60:26:3c:22:13:29:fe:42:8a:35:56:72:
                    a2:42:11:c8:a4:7e:a6:2c:a2:39:ef:f7:27:a1:f8:
                    ae:e3:8e:b7:67:a2:7e:2b:cf:59:1f:e1:af:17:17:
                    da:c0:9f:f6:35:f1:2a:9c:e6:cf:d2:31:f8:69:50:
                    39:5d:0b:1b:15:71:81:1c:ea:49:30:8c:2f:49:95:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:49:86:71:70:8C:1C:FB:91:95:AD:73:28:65:F2:5D:90:55:CE:FB
            X509v3 Authority Key Identifier:
                keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/40mGcXCMHPuRla1zKGXyXZBVzvs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.184.0/23
                  194.164.176.0/23
                IPv6:
                  2a01:f680:10::/47
                  2a01:f680:20::/47

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:63:ec:ec:86:f6:07:e9:f8:2d:f0:d3:9d:21:c8:8e:29:
         8a:55:c7:a0:6c:de:56:ba:0f:4f:65:9f:9a:59:94:4e:7a:88:
         62:1a:a5:6b:49:3b:2b:ab:61:b7:02:10:bb:48:76:dc:df:73:
         42:8d:82:1b:66:57:99:31:e2:4f:17:9a:46:53:34:ec:f2:ad:
         7c:25:68:73:30:9d:ab:05:8e:c7:5a:9a:69:16:aa:52:fc:63:
         31:57:b1:22:83:da:5c:da:f9:8d:aa:77:3b:b2:44:2d:30:42:
         1c:b7:6f:99:1f:df:80:30:6c:18:be:21:dd:d7:b3:41:75:b7:
         fa:ee:95:bd:5e:43:a1:15:ad:97:40:53:1a:10:af:48:32:a6:
         1c:f6:2a:dd:99:8e:ea:c5:30:99:ee:9f:c6:f2:29:1c:d2:fd:
         a3:9d:b0:a8:7c:30:eb:85:0e:46:d6:1b:93:65:da:ce:4c:aa:
         22:b6:31:1f:fa:29:7c:db:60:50:0c:23:d3:33:c9:74:05:e6:
         e9:8f:f0:25:bd:ed:43:b2:95:07:ab:34:aa:02:90:b8:22:7c:
         2f:66:36:6c:54:6e:8b:9d:c9:1c:15:0a:e0:2b:cc:21:6d:b6:
         1a:1b:6d:40:70:72:85:61:3b:de:0c:14:92:f0:6a:35:54:57:
         44:46:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:35 2026 by rpki-client