This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa
File:                     bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (raw, json)
Hash identifier:          JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=
Subject key identifier:   6C:27:2E:26:56:7B:33:9E:D4:95:BB:D3:6C:1D:F1:27:9F:91:55:8A
Certificate issuer:       /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Certificate serial:       019B7910A7E2F358C9542191AD246A90F7D3
Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa
Signing time:             Thu 01 Jan 2026 10:18:13 +0000
ROA not before:           Thu 01 Jan 2026 10:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213752
IP address blocks:        46.231.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:a7:e2:f3:58:c9:54:21:91:ad:24:6a:90:f7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
        Validity
            Not Before: Jan  1 10:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c272e26567b339ed495bbd36c1df1279f91558a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:37:97:76:7a:87:e5:dc:7a:e7:90:80:36:
                    da:3d:6f:cc:de:05:a3:fb:9e:1b:03:66:9c:88:df:
                    af:35:4a:02:8f:e0:5a:d3:6a:f5:9a:ca:a4:0f:bc:
                    67:b2:02:0b:70:bd:bb:6b:5e:1c:93:8d:90:b1:fd:
                    ca:93:25:ca:79:f0:cc:58:83:b2:22:46:fa:ea:00:
                    4d:2b:34:3f:e8:17:fb:4e:78:14:58:dc:fe:7d:bb:
                    7c:8b:47:20:af:3e:e1:30:7b:fe:4e:ff:be:4b:be:
                    81:e3:29:74:5e:86:69:2e:95:62:25:b2:71:57:88:
                    41:3c:66:b3:2f:bb:21:5b:10:c7:09:90:93:8c:41:
                    58:69:94:9e:f2:bd:e5:bf:60:b1:82:23:b3:27:29:
                    83:66:08:2b:7d:22:fe:72:2d:78:ed:81:7a:a1:d8:
                    f5:aa:a7:17:f4:e9:9e:4e:c3:49:86:08:7f:56:ce:
                    de:09:4f:c2:3c:56:f7:e9:10:7e:d3:51:12:96:e1:
                    18:f6:f0:35:bb:cd:75:b7:2b:a3:86:c5:2f:0c:e3:
                    5f:f0:c4:95:8e:e2:36:35:fc:2a:66:93:7d:53:31:
                    e7:ef:90:62:08:95:a9:57:fa:f0:f5:88:92:f0:a6:
                    da:68:3d:b0:34:f6:79:ca:53:67:77:35:8d:11:e7:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:27:2E:26:56:7B:33:9E:D4:95:BB:D3:6C:1D:F1:27:9F:91:55:8A
            X509v3 Authority Key Identifier:
                keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.231.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:91:e2:38:f8:1a:3d:ce:eb:86:3c:1b:72:ba:e3:3d:dd:8e:
         1a:a5:64:32:49:c3:9d:8a:ca:99:46:cc:22:e7:43:f0:62:2e:
         3f:78:d6:b9:0a:25:c1:d3:04:0f:54:f1:70:19:c9:64:f7:31:
         b5:ac:ed:1d:5e:1f:e1:47:6a:73:e6:3e:74:b3:aa:a0:c6:3b:
         18:83:f8:51:1d:7a:94:b7:37:e2:a5:32:45:44:35:bd:90:0f:
         ad:23:b4:47:4d:e7:69:ab:4c:e0:e4:43:42:3a:51:8e:82:e0:
         12:67:75:a8:72:ef:88:61:a5:e0:1f:da:07:0b:2c:a2:2d:20:
         cf:2c:6f:69:13:16:f7:84:ad:a9:08:6f:53:61:24:4f:be:16:
         ef:64:c0:a8:a3:38:ba:28:48:04:39:53:f1:e4:66:37:3c:93:
         09:a3:45:7d:39:13:62:de:36:99:22:c4:de:20:22:24:3a:6a:
         a1:95:74:74:3e:de:ab:d2:2f:bf:6a:d7:ae:54:a9:e3:6e:38:
         73:31:b2:61:ba:a0:57:aa:0c:3c:a9:cb:79:e1:cf:1d:43:96:
         a6:72:22:3d:de:8f:83:e4:e3:ab:16:43:e6:79:b0:60:16:f0:
         af:fc:8a:47:97:e9:a0:49:42:84:91:6d:f0:13:fe:52:30:c5:
         1a:40:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:42 2026 by rpki-client