This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa
File:                     L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa (raw, json)
Hash identifier:          ei+lXL7zHDyqioDmtKobrd7etumhhT8ybyaaw4DRriM=
Subject key identifier:   2F:9E:4F:98:8D:59:C2:E5:47:65:5E:6B:10:50:8C:4B:1F:94:1F:42
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       019B7FF2AEF934B1ACD21BAFA32A70FD6904
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa
Signing time:             Fri 02 Jan 2026 18:22:49 +0000
ROA not before:           Fri 02 Jan 2026 18:22:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211440
IP address blocks:        212.46.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 15:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:ae:f9:34:b1:ac:d2:1b:af:a3:2a:70:fd:69:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Jan  2 18:22:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2f9e4f988d59c2e547655e6b10508c4b1f941f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7b:3f:c7:25:0c:32:d3:80:8a:da:d8:95:92:
                    85:72:14:92:33:a1:16:71:81:e2:e9:92:89:d4:af:
                    c9:e6:b9:0a:21:81:ce:f4:af:a8:86:49:14:90:90:
                    03:3f:c5:9c:7c:4b:52:ed:89:8d:a6:cc:3c:78:44:
                    87:56:8f:eb:cf:74:14:35:75:84:ea:a5:e3:2c:20:
                    d2:d9:5e:61:4f:e6:13:6b:7b:9c:3a:a6:20:c2:2b:
                    c1:a1:cb:63:02:80:05:30:8f:4a:3e:6c:63:8a:59:
                    a4:08:2e:1f:ba:91:12:70:b1:e0:1f:2b:34:91:97:
                    64:8c:ef:7f:41:b7:75:ba:40:4b:28:9f:64:21:d9:
                    53:46:9d:2c:d0:da:cc:d2:87:57:99:c7:52:6a:75:
                    06:f4:81:93:4f:25:4e:84:33:4d:e7:a9:31:8f:96:
                    38:8e:96:b4:95:b0:14:e5:c2:dc:94:8d:2d:cd:ab:
                    55:dd:0f:73:2c:cd:bf:23:ec:7e:2d:f1:9e:bd:05:
                    f7:1b:02:a2:6d:f3:dd:cb:1c:43:5c:15:1d:03:a5:
                    bd:e0:e7:cc:60:00:0e:e0:a7:fa:d7:53:46:1a:d9:
                    95:a6:6f:9c:92:47:aa:5e:b4:be:f3:8e:ae:5f:6a:
                    54:f8:bb:bf:ab:e0:dc:c3:9b:ae:ae:0d:15:9c:90:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9E:4F:98:8D:59:C2:E5:47:65:5E:6B:10:50:8C:4B:1F:94:1F:42
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:a0:1a:91:ea:7f:52:a9:ee:bb:c6:86:f6:e5:0d:0c:a7:db:
         88:55:dc:a9:a8:49:ea:49:af:63:e1:34:ff:0b:09:a2:6f:d2:
         96:e2:f1:0d:de:a3:d2:36:4c:cb:82:d7:c9:d2:82:15:ec:24:
         6a:3c:7b:f5:ef:26:0a:37:03:05:b6:34:27:d3:54:d5:e6:b6:
         09:b2:22:51:ff:f6:c1:16:57:d1:10:48:f3:a5:14:4e:d9:2c:
         0b:7e:b9:8b:e4:47:14:7e:87:77:1f:17:6c:50:0f:f9:ce:5d:
         92:fd:0c:2c:be:ea:7b:7d:24:1b:38:6f:c1:39:60:1b:0a:ca:
         91:ff:dd:d6:cb:bd:b4:7e:3a:d7:67:68:d9:23:94:ae:67:75:
         e5:b4:ac:e8:31:fc:db:6b:f1:13:6b:e6:8f:49:26:4a:64:fc:
         6b:63:5c:85:13:1e:90:cd:ef:82:16:45:0d:14:a3:49:3b:38:
         b2:15:96:ce:69:29:d1:a1:f3:a6:90:c1:59:4e:e9:94:08:55:
         ba:99:51:d0:e1:3d:4e:09:c5:ee:bc:9e:5d:59:40:b1:9c:ba:
         05:27:43:e2:ff:86:db:07:c1:a9:82:26:0c:19:09:07:55:dd:
         9d:74:27:d3:5c:11:e7:d5:da:97:b3:74:46:ee:e6:6b:f5:75:
         2c:08:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:29:26 2026 by rpki-client