This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/InrEL6AItP-qAx3zDPxzzGSnnwc.roa
File:                     InrEL6AItP-qAx3zDPxzzGSnnwc.roa (raw, json)
Hash identifier:          VAZV03zcP6WixPIwM4d9F3yUSuGQlQeBFRwSJpLKb3s=
Subject key identifier:   22:7A:C4:2F:A0:08:B4:FF:AA:03:1D:F3:0C:FC:73:CC:64:A7:9F:07
Certificate issuer:       /CN=1792806c34f57583899dc52dca407e25cf9d3622
Certificate serial:       019B7BA4499097CC8DF36B15207A1657B3D2
Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/InrEL6AItP-qAx3zDPxzzGSnnwc.roa
Signing time:             Thu 01 Jan 2026 22:18:42 +0000
ROA not before:           Thu 01 Jan 2026 22:18:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34688
IP address blocks:        46.227.240.0/21 maxlen: 21
                          2a01:7600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:49:90:97:cc:8d:f3:6b:15:20:7a:16:57:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622
        Validity
            Not Before: Jan  1 22:18:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=227ac42fa008b4ffaa031df30cfc73cc64a79f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:72:9e:12:92:8d:d9:b0:cb:82:12:88:b0:
                    b9:94:85:ae:18:fc:e4:f9:fa:d4:9a:94:82:35:4d:
                    61:56:b9:b7:ba:d5:12:6b:d6:e1:f9:fe:73:0c:1b:
                    72:24:76:a6:8d:2c:d6:07:0d:bd:73:86:07:95:c5:
                    fc:1e:ff:41:b9:cc:ef:fd:b1:1a:39:6d:35:28:52:
                    56:0e:29:da:6c:5b:46:3a:19:e9:87:4c:e2:bb:0a:
                    35:44:49:34:5f:af:42:4a:74:fc:7b:e6:71:5b:09:
                    87:e3:c9:53:fb:d5:87:04:c8:f5:3c:97:93:4b:5b:
                    f0:15:6f:a1:49:9b:9c:f3:78:75:00:57:cc:25:88:
                    1c:eb:d4:9f:15:2b:9e:d2:2f:5b:ea:56:83:2d:d0:
                    fd:44:ae:a9:bf:36:ff:91:9f:22:c9:61:a2:ba:67:
                    65:85:bd:16:35:3f:05:bc:e9:a7:08:ad:18:03:f0:
                    b7:41:7d:84:c1:a9:ce:14:2b:36:0b:50:8b:59:b2:
                    5c:c4:11:12:ef:e8:35:e6:ce:31:6c:8b:21:b5:e5:
                    a3:80:55:58:00:b8:7e:9b:39:8c:5a:06:4f:03:0a:
                    78:9a:b3:cc:eb:8e:61:a3:eb:48:95:15:05:0b:aa:
                    f6:c3:81:f7:ae:d4:5f:20:02:09:d5:ce:84:04:94:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7A:C4:2F:A0:08:B4:FF:AA:03:1D:F3:0C:FC:73:CC:64:A7:9F:07
            X509v3 Authority Key Identifier:
                keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/InrEL6AItP-qAx3zDPxzzGSnnwc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.227.240.0/21
                IPv6:
                  2a01:7600::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:4f:5d:74:da:97:40:43:a1:9d:67:c2:33:22:41:6f:2d:1a:
         42:58:e1:c6:41:13:33:bb:f2:58:49:01:7c:2d:e4:a1:87:0e:
         80:c9:52:67:fa:ec:1a:2d:20:9b:5b:13:1b:1f:f3:94:f3:7c:
         39:c5:58:ac:b3:14:17:f5:04:55:87:9a:76:f9:34:80:85:88:
         5a:d1:88:3c:28:44:4f:61:a2:a0:1e:71:82:1f:3e:53:bb:19:
         ea:1b:91:78:8a:f4:8d:9e:40:df:70:d3:b4:0b:b7:a0:9a:a8:
         4e:e5:19:fd:47:75:94:60:7f:45:83:c7:ac:71:e8:0b:df:17:
         cc:57:12:49:f0:c4:91:35:37:97:c7:6f:2f:f1:ad:0b:cf:f5:
         79:46:73:81:c7:6b:95:38:ee:8c:24:86:21:43:93:6d:ed:39:
         07:3e:72:20:14:34:20:5d:01:4e:37:40:18:5e:c2:69:31:f8:
         b3:ce:67:cc:62:22:09:ad:97:8d:0b:93:56:99:25:e0:ab:4b:
         5c:22:9a:ee:7b:f6:6e:56:e2:2f:75:be:a9:20:d9:38:45:dc:
         91:84:85:8c:8c:07:d6:92:e1:ab:3c:c7:9b:4a:83:7a:9a:99:
         30:12:14:b1:0a:dc:c7:92:65:0d:90:07:04:9e:43:48:2f:28:
         7a:9b:62:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:43 2026 by rpki-client