This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/55lJ7aRN6GIyWx76DhXMl-EsW9s.roa
File:                     55lJ7aRN6GIyWx76DhXMl-EsW9s.roa (raw, json)
Hash identifier:          G5fDZfDdF/UdXSzqkrIqSIBvAXZx8jiKJDU264Jekto=
Subject key identifier:   E7:99:49:ED:A4:4D:E8:62:32:5B:1E:FA:0E:15:CC:97:E1:2C:5B:DB
Certificate issuer:       /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial:       019B7B366D4234978939F43A88F56345FDB7
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/55lJ7aRN6GIyWx76DhXMl-EsW9s.roa
Signing time:             Thu 01 Jan 2026 20:18:43 +0000
ROA not before:           Thu 01 Jan 2026 20:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62459
IP address blocks:        46.243.60.0/24 maxlen: 24
                          46.243.61.0/24 maxlen: 24
                          185.35.36.0/22 maxlen: 22
                          185.35.36.0/24 maxlen: 24
                          185.35.37.0/24 maxlen: 24
                          185.35.38.0/24 maxlen: 24
                          185.35.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:6d:42:34:97:89:39:f4:3a:88:f5:63:45:fd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
        Validity
            Not Before: Jan  1 20:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e79949eda44de862325b1efa0e15cc97e12c5bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:a1:37:de:ca:4b:ee:37:5c:b8:e1:89:1f:
                    b8:de:e7:33:e7:51:cb:e2:03:ed:fb:d2:3a:b2:ca:
                    40:33:23:ae:0d:2a:84:d2:64:ee:2f:b9:f9:6f:64:
                    73:b5:7b:78:be:76:94:bf:22:00:72:00:f8:e1:c9:
                    b8:e2:73:d7:34:f9:98:c3:6a:f8:0a:86:da:60:c3:
                    75:f0:50:bd:00:11:91:77:63:01:82:d6:27:b2:cc:
                    4e:05:28:f7:f6:53:d8:a2:df:53:fb:fd:25:a7:77:
                    3b:8d:e3:cc:60:7f:eb:67:a6:ec:78:76:80:a7:af:
                    ac:e0:44:a3:41:86:9d:34:79:2e:1c:22:6b:91:e8:
                    e1:91:fe:a8:08:57:f4:8e:2c:63:cd:18:be:3b:d8:
                    34:ce:89:1f:ca:83:60:14:9e:e7:8d:75:8c:77:82:
                    a3:11:00:58:0e:98:40:a1:52:b8:8b:44:89:1e:eb:
                    02:04:98:f3:a7:73:67:65:5c:b2:b4:7c:bd:99:f1:
                    de:e7:60:a6:44:3e:41:24:85:98:12:fe:41:16:e5:
                    8c:4a:03:83:8e:bb:b3:fd:ff:16:3a:eb:41:cb:f5:
                    b6:98:b5:8a:f1:16:13:00:20:8d:63:60:bc:c6:14:
                    94:4a:1b:a4:7e:4a:7b:91:33:84:d1:29:26:0d:a9:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:99:49:ED:A4:4D:E8:62:32:5B:1E:FA:0E:15:CC:97:E1:2C:5B:DB
            X509v3 Authority Key Identifier:
                keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/55lJ7aRN6GIyWx76DhXMl-EsW9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.243.60.0/23
                  185.35.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:48:3e:4a:52:c2:19:8d:36:cd:8e:89:21:45:58:ef:49:ac:
         a1:64:a1:22:b1:b7:22:9a:83:04:b8:50:69:4a:94:29:6c:65:
         3c:c9:c0:b1:74:8f:85:78:4c:bd:56:e5:fc:17:40:34:15:fd:
         25:15:6e:bb:98:1e:59:03:7f:8d:0a:9c:65:7d:cf:44:a0:b4:
         4c:4d:13:ca:a7:17:d8:d0:eb:08:c9:9d:b2:e1:46:4d:c6:d5:
         42:61:93:c2:6f:3a:02:a9:19:5b:bd:f7:a5:41:5a:e4:80:e9:
         86:d8:78:91:9b:79:87:36:89:9a:37:6b:6f:a2:a5:0a:7b:44:
         82:b4:ea:84:23:14:37:f9:51:1d:ed:6f:a3:29:96:ab:4e:3e:
         c6:cf:7a:67:da:35:b4:8d:19:0b:ac:75:d1:a8:5f:6b:0d:66:
         f4:66:c4:5a:e1:d6:68:50:a1:a6:4b:34:29:37:ee:bb:d8:cb:
         69:dd:e7:f4:d9:c2:23:78:77:a9:05:e6:ab:5e:45:10:46:a7:
         8d:56:9c:84:16:c9:e9:9f:b0:12:ec:dc:c7:6d:54:ca:c4:6c:
         ce:e3:08:7e:69:8c:12:7e:6a:35:f3:c6:fc:87:6e:c4:51:df:
         da:36:bd:00:6e:d9:80:a6:11:5e:8e:a3:64:65:6e:d7:1b:af:
         a8:b8:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:31 2026 by rpki-client