This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/vUue2NxwStvv8WEZ9HXG99tbx0s.roa
File:                     vUue2NxwStvv8WEZ9HXG99tbx0s.roa (raw, json)
Hash identifier:          6Ml6ChOmLrDH7MWz506DtN/4bVRAqULUEOsV8SF9ezQ=
Subject key identifier:   BD:4B:9E:D8:DC:70:4A:DB:EF:F1:61:19:F4:75:C6:F7:DB:5B:C7:4B
Certificate issuer:       /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial:       019B79111D98E1B6D632007D883B214AF02B
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/vUue2NxwStvv8WEZ9HXG99tbx0s.roa
Signing time:             Thu 01 Jan 2026 10:18:43 +0000
ROA not before:           Thu 01 Jan 2026 10:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201864
IP address blocks:        107.181.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:1d:98:e1:b6:d6:32:00:7d:88:3b:21:4a:f0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
        Validity
            Not Before: Jan  1 10:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd4b9ed8dc704adbeff16119f475c6f7db5bc74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:21:9f:c4:46:a1:2a:f4:4b:b2:47:63:23:
                    e0:e3:b9:c0:48:79:fb:6b:ae:26:c3:f1:fd:84:2e:
                    ef:cb:16:54:b1:8e:c6:df:ae:76:d1:d1:1d:ef:f2:
                    48:37:43:f7:5f:74:09:58:2d:7f:be:02:2a:68:d5:
                    cd:cd:62:70:ee:1c:3b:28:e7:cd:ce:c0:f2:5b:f3:
                    cf:61:78:8f:b9:8f:79:3a:ca:b4:8c:6f:d7:ee:a3:
                    4e:7e:cc:53:b7:67:59:5d:16:94:e6:23:9c:f5:9e:
                    12:8d:52:88:87:95:35:e6:e7:10:df:31:be:7d:22:
                    8e:d0:16:21:2e:27:3f:76:3c:47:d1:f9:42:17:74:
                    85:32:58:0d:05:33:91:8a:25:37:47:cb:89:c7:4a:
                    36:fc:85:41:f9:a4:62:51:95:ee:48:5c:58:e1:de:
                    6f:0b:97:cb:2d:d7:6b:fc:95:b1:4b:8b:d7:c6:df:
                    48:78:61:1b:30:43:63:89:0c:d2:1b:ef:f8:6d:18:
                    c0:7d:36:71:f4:c6:8f:79:58:22:67:f2:0a:2f:63:
                    dc:e2:3d:83:08:49:2e:14:38:bc:9c:8b:2e:45:e0:
                    b2:eb:7d:ad:73:66:5c:69:df:11:9e:d5:8a:a7:f6:
                    80:a5:fa:17:6d:f1:60:24:e8:78:a7:58:76:8e:f1:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4B:9E:D8:DC:70:4A:DB:EF:F1:61:19:F4:75:C6:F7:DB:5B:C7:4B
            X509v3 Authority Key Identifier:
                keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/vUue2NxwStvv8WEZ9HXG99tbx0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.181.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:73:2d:f4:6d:96:b7:fd:98:08:09:ed:04:3b:ee:58:ae:00:
         fa:07:96:1c:c2:91:13:8c:7c:56:65:41:2d:ed:2e:e6:0a:a9:
         60:4a:66:c9:ec:e5:ca:a9:a0:ca:ed:8a:74:87:8c:5a:7c:81:
         bb:b0:2d:03:47:ea:bd:3b:55:81:79:68:4f:af:11:0e:03:ad:
         91:98:12:1c:4c:ef:69:45:69:75:1b:d7:9d:50:d5:01:d7:dd:
         93:94:0a:8d:69:f1:bd:b7:32:f8:55:6f:57:51:87:1b:11:ab:
         68:cf:ba:11:02:1f:ad:1c:48:da:d6:3f:ac:0b:41:79:10:5a:
         a5:9c:86:12:a1:33:d9:9f:7e:d0:c8:1e:60:73:59:d9:61:55:
         2d:40:c5:09:fe:00:17:d1:20:56:fe:32:86:8a:54:4c:c1:a7:
         fb:c4:82:1e:27:f5:c5:1a:0f:4b:6f:ac:fc:32:30:fd:dc:66:
         ce:8b:9c:98:fd:46:d4:63:e0:0a:bd:3c:71:88:63:7d:b9:f0:
         ab:6a:36:fc:81:a8:cd:cb:15:36:89:8b:28:3c:91:72:ab:0b:
         a5:30:9f:55:57:e9:3b:e9:55:60:b8:04:25:71:6c:20:fa:ec:
         3b:d9:08:d5:52:eb:68:50:66:c6:c4:42:09:ed:5f:fe:2a:03:
         83:6e:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:06:13 2026 by rpki-client