This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/pGdakkFya_8KFAcwcCfw9mQMsfM.roa
File:                     pGdakkFya_8KFAcwcCfw9mQMsfM.roa (raw, json)
Hash identifier:          7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=
Subject key identifier:   A4:67:5A:92:41:72:6B:FF:0A:14:07:30:70:27:F0:F6:64:0C:B1:F3
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       019B79101B509B771F480DE90219A21E1864
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/pGdakkFya_8KFAcwcCfw9mQMsfM.roa
Signing time:             Thu 01 Jan 2026 10:17:37 +0000
ROA not before:           Thu 01 Jan 2026 10:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132244
IP address blocks:        46.37.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:1b:50:9b:77:1f:48:0d:e9:02:19:a2:1e:18:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jan  1 10:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a4675a9241726bff0a1407307027f0f6640cb1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:3a:c0:66:71:4f:d4:0e:59:41:1f:37:de:
                    65:23:cb:7f:bf:a7:0f:e5:31:ed:f2:e0:57:5a:9c:
                    7e:b7:a7:1e:cd:a1:96:03:25:5c:8d:c4:ad:d4:31:
                    ce:ae:2f:95:a3:34:d9:6f:1a:03:6a:17:75:ab:b8:
                    5c:b1:0c:5c:09:ed:10:dc:5e:a0:84:75:a3:47:59:
                    06:ba:d0:b8:2d:3e:45:e5:64:b1:95:f7:d7:aa:1a:
                    1f:c7:ac:55:42:0e:1f:e7:d7:a2:ad:df:ce:da:92:
                    4c:b8:e2:d1:ef:4a:d2:11:8b:d5:7a:8f:0f:d4:82:
                    07:d2:d6:b8:20:a8:a7:67:f6:a7:a0:bc:ae:d1:5f:
                    30:48:51:c8:40:11:a5:4a:ea:be:6e:50:8b:f9:6e:
                    ad:16:39:1a:00:28:3b:39:6d:16:79:7b:5c:cc:3a:
                    99:a8:fe:c8:3b:5e:c6:8e:8f:bc:83:43:cd:30:ba:
                    0d:c0:6e:da:e1:84:13:fb:96:a9:2e:de:f2:83:41:
                    ad:65:f9:75:8c:94:df:2c:ab:2b:2c:32:ed:65:f2:
                    3f:1c:f3:ba:1c:94:72:6a:e1:4b:1e:24:1c:66:bd:
                    29:ff:45:ed:b8:b7:52:0c:b4:d0:49:04:3f:02:59:
                    c4:ee:95:b0:10:38:09:91:d2:36:5f:97:5d:cc:82:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:67:5A:92:41:72:6B:FF:0A:14:07:30:70:27:F0:F6:64:0C:B1:F3
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/pGdakkFya_8KFAcwcCfw9mQMsfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:94:4f:86:4b:30:0d:0a:30:e5:69:19:15:f7:44:84:c0:16:
         c4:cb:cb:f0:7d:b9:79:0f:7c:19:43:1c:c8:cc:bb:db:28:30:
         4a:d5:f9:f9:1d:9e:09:95:76:6f:69:12:5e:4c:1e:63:5c:a6:
         10:ce:eb:cb:03:8f:aa:af:76:81:bd:ca:23:01:73:e2:63:e2:
         01:45:d5:95:f2:fb:00:e4:75:74:f9:f8:3e:6a:70:6d:4d:80:
         5c:ff:e9:75:88:20:d7:bf:18:02:34:6b:36:7f:8e:46:46:d2:
         52:26:e2:3e:95:67:56:79:24:74:49:91:e0:27:0c:5f:76:a6:
         7d:33:17:ad:98:c8:19:e1:8b:ef:64:05:d9:ba:41:c9:14:b1:
         7d:86:2c:99:73:a4:f5:be:da:45:7e:e7:b0:dd:28:b5:8d:e7:
         30:1b:26:04:b0:91:2c:b8:d9:70:d6:9c:14:56:21:47:6f:b4:
         25:c9:8f:20:39:6a:c8:50:c9:cf:8c:47:bc:05:48:d3:1e:5c:
         91:47:9b:df:64:9d:88:3c:54:cd:29:a6:3c:5f:d6:c1:30:18:
         a2:8b:d4:4d:4f:8d:48:27:40:85:74:66:34:25:97:77:8f:22:
         9b:a4:58:ca:7e:c6:b2:d0:b7:85:f3:0e:77:e3:a1:0c:f8:e8:
         af:ad:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:59:14 2026 by rpki-client