This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/51g-o2vDOcK7KnBvVJsQtvynygI.roa
File:                     51g-o2vDOcK7KnBvVJsQtvynygI.roa (raw, json)
Hash identifier:          bL6lhghOUrnkFE7yuSSie4ePRwrM2EGwTa/emSLxBkg=
Subject key identifier:   E7:58:3E:A3:6B:C3:39:C2:BB:2A:70:6F:54:9B:10:B6:FC:A7:CA:02
Certificate issuer:       /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial:       019B7C11C7CA86D3E8618E09EBFE3358F3D2
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/51g-o2vDOcK7KnBvVJsQtvynygI.roa
Signing time:             Fri 02 Jan 2026 00:18:18 +0000
ROA not before:           Fri 02 Jan 2026 00:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48426
IP address blocks:        46.183.49.0/24 maxlen: 24
                          46.183.50.0/23 maxlen: 23
                          46.183.52.0/24 maxlen: 24
                          91.209.154.0/24 maxlen: 24
                          2a00:4040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:c7:ca:86:d3:e8:61:8e:09:eb:fe:33:58:f3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
        Validity
            Not Before: Jan  2 00:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e7583ea36bc339c2bb2a706f549b10b6fca7ca02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:b7:1a:df:4a:d4:7b:b7:8f:c5:0c:ed:5d:
                    da:a2:5f:5b:6f:58:0f:ef:e2:01:de:59:fe:7b:14:
                    16:20:3c:f1:59:3b:f3:a2:58:46:02:dd:90:36:38:
                    18:72:96:02:fd:89:7c:5e:b1:ef:f9:ed:0c:c3:5b:
                    53:4f:da:e6:c8:a0:37:59:eb:a2:ee:c6:ec:73:fb:
                    ba:39:de:8f:da:9f:29:c4:f0:fb:60:ca:e3:94:8b:
                    b1:d2:43:8b:03:5f:4a:da:af:c0:d1:45:b0:dd:29:
                    34:f8:d7:8a:ec:b7:49:2c:6b:ee:e5:0c:a4:c3:f8:
                    be:d5:e3:f6:e1:9c:cd:52:50:50:fa:0c:60:3a:fd:
                    95:78:4d:99:e9:d6:74:aa:98:75:f3:94:3e:32:15:
                    b4:0e:0b:6e:05:a7:d4:91:19:b3:06:e3:3d:ef:55:
                    ab:14:19:b4:6f:77:bc:15:d5:c2:75:e5:7d:3e:26:
                    23:3d:71:19:8e:4d:97:0a:ec:97:a9:b9:d4:bc:8c:
                    ad:2e:40:cb:5f:ea:f3:60:6e:38:af:af:e4:ff:c8:
                    0c:85:b4:36:52:bc:3e:07:82:fd:de:c1:54:98:1d:
                    60:70:e4:0f:dc:1a:1a:b7:81:ae:f0:c3:c3:11:6d:
                    6f:7d:8c:0c:f3:0b:1b:1d:bf:a0:99:3f:36:aa:5a:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:58:3E:A3:6B:C3:39:C2:BB:2A:70:6F:54:9B:10:B6:FC:A7:CA:02
            X509v3 Authority Key Identifier:
                keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/51g-o2vDOcK7KnBvVJsQtvynygI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.183.49.0-46.183.52.255
                  91.209.154.0/24
                IPv6:
                  2a00:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:67:33:29:45:e2:c8:4d:c1:83:a6:d0:26:0f:59:34:15:24:
         15:7d:3c:bb:4a:df:5a:8f:5c:fb:47:ba:4f:9b:1b:83:d4:6f:
         9e:f0:14:a6:31:d6:57:e3:bc:35:a7:f7:55:bc:03:b0:26:23:
         c0:06:3a:83:f6:46:b0:2d:3a:0f:3e:88:7f:22:01:f6:4f:be:
         31:5d:d0:25:b0:ff:de:e1:fd:55:be:1f:6d:04:c5:62:c0:c0:
         11:ff:24:1f:f1:1e:bb:99:fb:4e:ad:04:ba:b2:4b:5c:47:18:
         3e:e6:c0:29:65:ea:e9:b2:5c:8d:8f:53:b0:bd:5d:dd:fb:78:
         83:53:37:d8:e9:d6:0e:bf:ac:32:94:8a:c2:e1:f6:cc:7a:4a:
         82:65:07:f1:92:15:0b:d7:f1:01:fb:91:e8:7c:50:07:41:51:
         97:7f:cf:38:40:25:5b:ab:ce:87:27:13:50:23:af:e0:f4:01:
         29:0a:c3:39:c1:a6:4e:45:77:53:65:ca:9e:53:3b:89:4e:36:
         a0:6c:ac:19:7e:78:c9:70:b3:09:28:cb:3f:37:e1:01:4d:cd:
         1a:1e:3b:de:0d:61:84:9e:4a:87:1c:97:e7:90:fc:97:7b:6e:
         42:82:61:24:ec:99:2c:d6:c7:e7:c9:71:6a:91:ff:1b:53:89:
         93:f8:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:17 2026 by rpki-client