This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa
File:                     Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa (raw, json)
Hash identifier:          GUP9CAOD/lZ7zRDp3tb1cccBeuujTmIae2sSdpt219A=
Subject key identifier:   46:B9:B7:A1:F0:9C:D0:B4:40:0E:41:6F:BF:9C:F6:9C:B5:35:2D:CE
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       019B791083ADB5435D9740C402E2388171F4
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa
Signing time:             Thu 01 Jan 2026 10:18:04 +0000
ROA not before:           Thu 01 Jan 2026 10:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203114
IP address blocks:        45.136.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:83:ad:b5:43:5d:97:40:c4:02:e2:38:81:71:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jan  1 10:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46b9b7a1f09cd0b4400e416fbf9cf69cb5352dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:f0:b7:1b:48:ca:d6:22:06:bf:0d:c3:65:
                    66:a0:0d:14:b1:15:6c:6d:ec:7e:77:bd:1c:0c:b7:
                    aa:f6:d1:58:ba:87:d3:dd:95:89:e6:2a:59:05:79:
                    18:c1:c5:6b:6a:09:41:55:b5:cd:fe:d3:d3:b3:55:
                    ee:2b:03:e9:62:20:06:9f:8f:64:cd:dc:e9:55:5a:
                    43:e9:69:0d:6f:ac:00:56:ad:2c:b4:9e:63:ee:89:
                    bf:13:d0:bd:ea:2c:ef:6e:1d:6c:46:b7:3e:15:70:
                    3a:49:95:d0:1e:39:d9:22:02:92:25:2d:77:ef:3d:
                    14:7d:b9:91:c3:81:7d:53:f6:f3:f6:0e:16:ad:95:
                    16:67:13:76:8c:94:dd:f7:2a:dd:91:0e:50:cf:4a:
                    9d:51:54:f1:e1:f5:47:14:d8:0d:00:10:40:0f:11:
                    0b:6d:c7:4c:02:24:d4:d1:48:75:e5:a2:73:dd:71:
                    f9:cb:58:7d:72:5d:07:0c:62:39:5b:f3:fd:0c:16:
                    30:94:03:ca:1c:9c:5b:32:40:8c:59:12:4d:88:dd:
                    5c:92:32:3b:49:14:63:ba:d9:e1:91:46:cf:09:d8:
                    31:50:14:9e:e9:a3:8e:44:4c:8c:fe:e0:9c:4b:03:
                    a8:05:b1:16:69:1a:ba:dd:51:6a:a5:c2:66:b8:e7:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B9:B7:A1:F0:9C:D0:B4:40:0E:41:6F:BF:9C:F6:9C:B5:35:2D:CE
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/Rrm3ofCc0LRADkFvv5z2nLU1Lc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:9e:f7:a7:83:33:d1:af:6f:de:71:bf:d7:5f:81:b0:d9:
         67:17:4f:8c:8c:19:f0:b8:22:ee:cd:f2:dc:3d:62:aa:12:23:
         41:18:f1:65:08:f3:55:e3:19:e1:7f:be:48:b6:d9:b0:3f:a5:
         44:78:20:3e:b4:c8:a3:bd:fd:74:65:8e:3f:ce:f7:8b:49:08:
         ed:4a:cc:05:d2:f6:72:e6:3b:7f:bf:fc:b4:dd:f5:90:3d:0c:
         d3:eb:f7:e9:98:eb:40:a0:bc:5d:fd:a8:3b:27:29:c3:75:34:
         32:1e:60:f4:d8:d6:67:1f:e8:cd:c5:cd:bb:04:50:68:da:0e:
         dd:3c:67:75:02:d6:b9:bc:59:fe:50:16:8a:76:ee:5f:1f:51:
         9d:34:9b:cf:3d:94:a9:34:78:36:4a:d5:8f:1d:a9:3a:21:02:
         4d:fa:81:fe:7d:a5:cd:07:e3:60:14:f6:05:33:cc:0b:e0:31:
         33:52:72:ec:97:8e:16:14:54:79:36:0b:54:d6:75:eb:6f:7b:
         a6:b6:3b:f5:6d:f5:a7:e0:35:dc:37:2c:5e:32:03:e6:d4:96:
         2e:60:b2:fa:31:62:1b:6e:3e:c8:a1:1d:3e:7f:02:55:03:b6:
         98:51:7d:91:a2:bd:10:0e:e2:c2:89:ad:2c:d3:b0:8f:54:26:
         8c:8d:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:24:36 2026 by rpki-client