This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/x_aZfes3cLbw9Iat1attYpGOZAA.roa
File:                     x_aZfes3cLbw9Iat1attYpGOZAA.roa (raw, json)
Hash identifier:          13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=
Subject key identifier:   C7:F6:99:7D:EB:37:70:B6:F0:F4:86:AD:D5:AB:6D:62:91:8E:64:00
Certificate issuer:       /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial:       019B7A5AD0C23CAF8C6C6CACC5E2F2FCFBDA
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/x_aZfes3cLbw9Iat1attYpGOZAA.roa
Signing time:             Thu 01 Jan 2026 16:18:50 +0000
ROA not before:           Thu 01 Jan 2026 16:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213300
IP address blocks:        46.232.187.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:d0:c2:3c:af:8c:6c:6c:ac:c5:e2:f2:fc:fb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
        Validity
            Not Before: Jan  1 16:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c7f6997deb3770b6f0f486add5ab6d62918e6400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:2b:af:cf:67:ce:a1:14:00:b8:ff:94:04:
                    b2:a2:b3:ef:61:db:fb:50:59:5b:de:89:1a:04:05:
                    06:ab:f4:4f:18:75:ac:a1:b7:dc:d6:67:47:32:61:
                    94:4c:2e:0b:18:1a:d5:fe:c0:e5:6d:94:38:24:24:
                    a2:65:eb:49:21:87:55:f0:20:50:fc:a4:a5:60:93:
                    dd:b6:21:b0:f6:0e:e2:e9:b0:d8:ca:e4:ea:6b:51:
                    c7:c3:47:55:9f:de:d3:2b:b5:f9:af:bb:b9:52:0f:
                    b7:52:63:72:96:aa:70:de:bb:69:dd:c9:0d:5d:f8:
                    ad:2b:51:39:be:a7:b1:75:22:03:77:5f:51:56:17:
                    61:20:69:9d:a6:63:e5:b7:93:bd:4d:9b:38:b8:e6:
                    da:96:be:32:4b:75:f1:27:7c:9f:14:ea:d1:41:3f:
                    1c:0d:9b:a0:9f:ee:36:61:82:5a:6b:51:f3:bf:8b:
                    01:34:52:5b:ce:56:19:9b:2b:b4:c6:6c:da:68:49:
                    4b:d4:55:da:c0:6c:3a:a9:4d:48:63:6e:85:2f:db:
                    b8:99:1d:98:ce:ed:bd:dc:02:28:fb:e5:0c:ca:d5:
                    9a:cb:77:ca:df:cc:0b:d3:a4:ce:76:c7:62:04:48:
                    1b:e2:9b:ca:8d:8b:3a:1d:26:1c:a4:ff:31:df:3d:
                    43:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F6:99:7D:EB:37:70:B6:F0:F4:86:AD:D5:AB:6D:62:91:8E:64:00
            X509v3 Authority Key Identifier:
                keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/x_aZfes3cLbw9Iat1attYpGOZAA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.232.187.0/26

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:97:f1:92:d9:1f:15:00:e0:fd:92:73:ab:3a:ac:53:1a:
         02:c7:e8:89:38:74:c4:35:b4:5d:1f:79:7f:28:23:bc:2e:34:
         10:d7:5c:6f:45:ab:15:19:59:f9:e7:ba:19:b6:b9:aa:1a:2e:
         b7:76:a4:c5:65:10:76:d3:39:6e:e7:71:72:03:17:eb:89:3e:
         38:c5:62:c9:db:09:67:21:02:82:aa:6e:fd:30:78:40:b0:f9:
         f3:fa:b1:7f:93:61:db:29:25:56:be:d9:1d:c1:4c:7b:75:8d:
         a8:8e:d2:90:fd:43:c5:ba:43:87:41:a8:02:e5:2a:2c:bc:05:
         d9:40:a5:e2:57:f8:12:69:a6:52:38:a4:15:58:9d:be:cb:fa:
         e1:3b:a9:b3:55:60:a6:fb:6d:30:c8:b1:ce:81:f7:ef:a0:75:
         36:83:a7:dd:58:4a:c7:e4:00:21:45:db:2a:df:3d:8c:5b:be:
         39:69:86:da:12:9c:e1:0d:96:5f:65:3e:89:24:34:bb:73:ef:
         60:fd:a7:dc:ab:9b:fe:07:97:1c:b6:12:ac:32:9c:87:57:ed:
         c3:b4:db:33:d9:3f:2f:7c:a8:65:de:89:7c:07:b6:0c:7c:ca:
         d7:69:6c:8c:ce:a7:94:2d:a6:fa:95:38:39:b6:c3:15:e0:f6:
         13:c9:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:59 2026 by rpki-client