This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/PHo-_-c9dv_lcxCKA3owAiPB9_8.roa
File:                     PHo-_-c9dv_lcxCKA3owAiPB9_8.roa (raw, json)
Hash identifier:          y6kd5vbSF0PMFFGGRnVqyERClzVeKGyZBN4ku3rQmPo=
Subject key identifier:   3C:7A:3E:FF:E7:3D:76:FF:E5:73:10:8A:03:7A:30:02:23:C1:F7:FF
Certificate issuer:       /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial:       019B7D5C8DEB8E174627AEC29B3A9AECA0D3
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/PHo-_-c9dv_lcxCKA3owAiPB9_8.roa
Signing time:             Fri 02 Jan 2026 06:19:36 +0000
ROA not before:           Fri 02 Jan 2026 06:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39593
IP address blocks:        46.191.180.0/22 maxlen: 22
                          46.191.180.0/23 maxlen: 23
                          46.191.180.0/24 maxlen: 24
                          46.191.181.0/24 maxlen: 24
                          46.191.182.0/23 maxlen: 23
                          46.191.182.0/24 maxlen: 24
                          46.191.183.0/24 maxlen: 24
                          95.105.84.0/22 maxlen: 22
                          95.105.84.0/23 maxlen: 23
                          95.105.84.0/24 maxlen: 24
                          95.105.85.0/24 maxlen: 24
                          95.105.86.0/23 maxlen: 23
                          95.105.86.0/24 maxlen: 24
                          95.105.87.0/24 maxlen: 24
                          136.169.208.0/22 maxlen: 22
                          136.169.208.0/23 maxlen: 23
                          136.169.208.0/24 maxlen: 24
                          136.169.209.0/24 maxlen: 24
                          136.169.210.0/23 maxlen: 23
                          136.169.210.0/24 maxlen: 24
                          136.169.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:8d:eb:8e:17:46:27:ae:c2:9b:3a:9a:ec:a0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
        Validity
            Not Before: Jan  2 06:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3c7a3effe73d76ffe573108a037a300223c1f7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:b7:fd:a9:5f:44:b2:66:6f:b3:38:c0:61:
                    ab:ec:b2:55:50:c8:03:c5:92:86:25:65:0d:d5:3e:
                    ab:a8:4d:a7:b7:f6:3c:68:df:e6:b2:f7:36:02:10:
                    38:df:82:85:d9:0a:24:30:10:05:48:b8:31:7c:83:
                    62:39:fb:b3:d4:88:ec:57:c2:6a:35:8d:35:b8:9f:
                    5e:7d:09:80:99:30:54:ea:e4:88:28:9a:2d:ed:f9:
                    d5:e2:92:3a:f9:e0:11:8e:3d:dc:5b:6e:cd:cc:ff:
                    e9:c9:4c:e2:b4:3d:5d:1d:8c:52:a9:28:61:83:39:
                    4a:7c:99:3d:52:35:6a:58:d5:12:31:db:79:ad:f4:
                    56:6a:cd:e3:a9:5d:5e:c2:32:29:c3:95:f6:b0:3f:
                    52:58:04:6a:11:ff:96:c1:4a:f2:26:8f:5b:f4:cb:
                    b4:41:2f:8b:bd:17:7a:a5:aa:ab:cf:45:6e:73:2f:
                    21:ed:ae:99:cb:f7:2a:c2:78:e1:f7:d2:80:76:3b:
                    d9:2c:f2:e0:9c:92:94:16:8a:34:b1:3a:b8:5e:f1:
                    68:6e:5b:fe:77:52:d3:09:c9:78:b8:7c:bc:25:5f:
                    71:05:f7:1f:7e:de:44:ef:f9:1a:30:aa:34:4a:0c:
                    6f:a6:c9:4f:3b:58:05:0f:fd:c4:15:e8:c9:35:24:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7A:3E:FF:E7:3D:76:FF:E5:73:10:8A:03:7A:30:02:23:C1:F7:FF
            X509v3 Authority Key Identifier:
                keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/PHo-_-c9dv_lcxCKA3owAiPB9_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.191.180.0/22
                  95.105.84.0/22
                  136.169.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:68:84:16:e8:57:46:ab:0d:d1:59:ad:2f:8d:73:16:8c:1b:
         b0:04:67:31:6f:64:a5:60:e9:24:57:5e:b1:93:15:9c:e2:a0:
         21:87:c1:71:a6:3a:f9:50:53:ff:d0:52:b7:13:03:1b:a7:bf:
         c1:9a:d6:bd:76:66:22:1c:24:69:85:bf:58:92:21:20:69:23:
         88:3f:40:fa:38:d7:cd:bf:5e:52:69:43:fb:ae:e4:13:0e:d9:
         26:c1:c6:e8:40:d9:ed:d0:4b:34:76:76:f7:2c:ca:91:97:af:
         a4:95:5a:a3:22:4a:cc:b8:fd:5b:d6:75:dd:30:23:f4:0b:19:
         3b:87:4d:7e:c6:26:24:5b:80:37:65:c1:d8:63:48:a5:3e:51:
         eb:d5:10:30:fd:fe:ad:3f:ff:e3:89:07:3d:74:81:f0:a6:29:
         46:45:2f:d4:25:69:8f:0c:c9:cd:19:dd:57:77:1c:82:aa:12:
         45:66:d9:09:86:9f:c5:bb:41:70:c2:b8:71:80:88:20:cc:68:
         69:49:71:d3:b4:5c:c2:b5:a0:6a:e9:6d:69:42:d5:b7:0c:d6:
         d0:7f:64:70:6e:cc:50:e7:77:61:85:73:2f:9f:1e:28:b9:c4:
         13:f7:d2:19:3d:fa:9a:68:cf:13:63:de:25:f7:a8:4f:b3:e6:
         cf:87:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:51 2026 by rpki-client