This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/re6lB-rbYJ_Z7LLPBqEUb5KSVrg.roa
File:                     re6lB-rbYJ_Z7LLPBqEUb5KSVrg.roa (raw, json)
Hash identifier:          27WGZ3waRnvUaK/S6mQGfDjYmQYiQzBcLnujDU+XKKs=
Subject key identifier:   AD:EE:A5:07:EA:DB:60:9F:D9:EC:B2:CF:06:A1:14:6F:92:92:56:B8
Certificate issuer:       /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial:       019B7AC86CB7D4F877850E2FA6B20521AADD
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/re6lB-rbYJ_Z7LLPBqEUb5KSVrg.roa
Signing time:             Thu 01 Jan 2026 18:18:34 +0000
ROA not before:           Thu 01 Jan 2026 18:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        46.255.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:6c:b7:d4:f8:77:85:0e:2f:a6:b2:05:21:aa:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
        Validity
            Not Before: Jan  1 18:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=adeea507eadb609fd9ecb2cf06a1146f929256b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:52:2f:6c:23:f6:9e:aa:a6:58:8e:3c:53:
                    af:38:e0:9c:2a:90:69:c8:35:be:08:c4:d2:8a:b3:
                    c0:4f:f1:a0:3b:91:87:97:b1:2f:5a:d7:8d:33:89:
                    43:b5:30:af:06:e7:cf:b0:5e:b2:50:f5:cf:01:b0:
                    40:4b:ae:2b:4b:4d:82:74:d2:01:bb:ae:8f:8c:2b:
                    68:31:5c:ce:44:13:fd:17:0b:7d:1a:4e:ec:b0:f5:
                    b0:11:21:3a:b6:c9:d6:4d:56:98:1d:de:19:16:05:
                    2e:ef:37:f6:41:8c:2c:f5:a8:80:62:45:fb:77:4f:
                    b2:66:9d:99:dc:76:bb:6a:9e:79:7e:83:8b:ec:7c:
                    b5:7a:3f:8d:71:83:ed:2e:10:d4:1b:11:74:a1:ec:
                    94:c2:31:02:99:50:1c:ce:68:46:12:16:4b:ba:33:
                    69:7c:22:b0:71:c0:b6:ad:3a:49:d0:87:68:5b:36:
                    e6:ad:19:d1:3c:ad:78:5a:c3:63:a5:a6:44:55:2b:
                    98:c4:59:dd:be:4d:1c:4d:0e:bf:73:d4:97:a4:18:
                    53:4d:ac:2b:7a:e1:67:94:47:ec:37:00:5b:f3:66:
                    be:b1:51:8d:96:62:06:f7:3f:d6:65:da:b2:f6:44:
                    dc:8c:c6:1e:9b:91:a1:a8:fb:f3:0f:c8:68:43:61:
                    4d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EE:A5:07:EA:DB:60:9F:D9:EC:B2:CF:06:A1:14:6F:92:92:56:B8
            X509v3 Authority Key Identifier:
                keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/re6lB-rbYJ_Z7LLPBqEUb5KSVrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.255.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:49:f0:4e:ee:52:40:90:99:8a:a3:cc:db:15:78:3a:ef:
         84:d9:6d:65:01:3e:e7:cd:3d:36:9e:5d:7f:95:cf:b1:45:10:
         00:77:36:f5:2f:45:9d:38:10:f5:77:61:68:29:92:af:c8:03:
         42:03:2a:b9:41:6b:a3:d4:f7:15:55:a8:1a:3f:22:03:d9:75:
         8e:10:84:7c:6b:69:f3:0e:87:44:4c:8e:e4:2f:20:01:0e:4d:
         41:01:3b:1b:b5:bb:d0:15:a3:17:2f:9d:36:9a:b5:15:8c:16:
         7c:f9:39:97:40:8e:9d:ca:d3:81:5c:56:c6:ec:89:11:e9:8f:
         bb:e9:b2:e6:6a:be:03:fa:0f:5c:2f:df:6e:6f:1e:61:91:1b:
         4e:ea:21:0a:2e:34:b3:98:61:9f:b8:34:87:48:e2:99:3a:1e:
         63:fb:16:55:4c:8e:a0:3a:ca:be:5c:99:25:e7:df:3d:fd:45:
         bf:b2:ad:87:0e:dc:f7:6d:ba:b6:a7:de:bb:16:14:b1:e7:d6:
         42:a8:de:88:37:98:0d:32:3a:08:95:79:6f:58:7e:41:d1:7e:
         67:b3:a8:71:c9:79:2c:54:d3:be:4d:3a:33:9f:d0:92:05:58:
         f9:70:c4:e8:88:63:5a:d3:b0:f6:19:9d:5b:55:8a:7f:8f:af:
         f7:6f:72:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:01 2026 by rpki-client