This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa
File:                     Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa (raw, json)
Hash identifier:          D3QDtFMR0sLy/F2jguYpH4IAE7IC8B7SWcgluJtwmKs=
Subject key identifier:   39:EF:92:7A:80:82:21:73:79:C9:C0:E7:42:55:7A:33:F7:48:D5:72
Certificate issuer:       /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial:       019B7C127DFB29421B82EEFE61E0E997CED5
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa
Signing time:             Fri 02 Jan 2026 00:19:05 +0000
ROA not before:           Fri 02 Jan 2026 00:19:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215182
IP address blocks:        46.227.160.0/23 maxlen: 23
                          46.227.162.0/24 maxlen: 24
                          46.227.164.0/24 maxlen: 24
                          46.227.166.0/24 maxlen: 24
                          46.227.167.0/24 maxlen: 24
                          95.143.0.0/21 maxlen: 24
                          95.143.4.0/24 maxlen: 24
                          95.143.5.0/24 maxlen: 24
                          95.143.8.0/23 maxlen: 23
                          95.143.10.0/24 maxlen: 24
                          95.143.11.0/24 maxlen: 24
                          95.143.12.0/24 maxlen: 24
                          95.143.13.0/24 maxlen: 24
                          95.143.14.0/23 maxlen: 23
                          185.72.224.0/24 maxlen: 24
                          185.72.225.0/24 maxlen: 24
                          185.72.226.0/24 maxlen: 24
                          185.72.227.0/24 maxlen: 24
                          193.242.176.0/22 maxlen: 22
                          2a02:1328:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:7d:fb:29:42:1b:82:ee:fe:61:e0:e9:97:ce:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
        Validity
            Not Before: Jan  2 00:19:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=39ef927a8082217379c9c0e742557a33f748d572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0b:ea:45:3e:7b:40:c8:22:83:09:13:83:ea:
                    68:40:28:7e:a3:1a:ce:b0:b6:96:26:83:4b:62:70:
                    35:46:00:9b:90:98:82:6b:ef:ef:ba:05:9f:aa:c3:
                    51:f1:94:62:29:5c:4c:10:b3:63:5d:99:43:a9:ae:
                    ed:5b:79:1a:d3:ec:00:64:3f:cf:46:59:8f:b4:b3:
                    49:73:b5:75:f0:0f:89:22:f6:2d:ec:f0:db:24:b4:
                    09:49:4a:54:63:75:4a:a0:c5:c7:2d:52:b8:ca:5f:
                    e7:1f:ce:73:0f:cd:84:cd:a0:7d:dc:69:9a:ca:60:
                    9b:f7:d8:3b:06:53:6d:77:49:c2:82:48:d3:1f:88:
                    73:d8:0e:6e:bd:87:a3:23:09:c6:06:a0:04:0f:46:
                    51:55:88:1d:64:3c:d3:3c:ce:86:06:32:8b:3e:95:
                    a6:b6:d6:ce:ca:ad:4c:41:a7:9c:ca:40:0a:9b:59:
                    32:1b:d2:d1:01:c2:ba:7d:d9:bf:32:45:22:25:f3:
                    b7:29:17:a0:ce:e1:79:c6:d2:a3:8c:dc:4c:4c:40:
                    19:77:77:55:21:3b:cd:5a:62:1c:49:30:29:10:19:
                    0d:96:19:8f:d9:0d:23:0d:b8:e8:df:c4:5f:f9:6c:
                    2e:3f:58:88:57:11:91:5b:f9:da:e8:fd:d9:16:3f:
                    83:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EF:92:7A:80:82:21:73:79:C9:C0:E7:42:55:7A:33:F7:48:D5:72
            X509v3 Authority Key Identifier:
                keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.227.160.0-46.227.162.255
                  46.227.164.0/24
                  46.227.166.0/23
                  95.143.0.0/20
                  185.72.224.0/22
                  193.242.176.0/22
                IPv6:
                  2a02:1328:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:b1:7a:45:c5:b1:d0:58:3b:1c:ee:8a:93:68:71:9e:af:fa:
         a0:d6:c1:d4:8f:12:44:77:06:b8:51:91:83:c2:83:01:7b:ee:
         78:ff:69:8c:d2:89:32:d2:3c:cb:71:86:84:17:b5:23:8e:dd:
         af:f6:27:81:75:17:9a:8a:0a:bd:e7:dc:7a:cf:1e:80:fc:20:
         36:9b:c3:78:9e:36:b1:8b:ee:f3:f1:32:19:ee:92:4b:d0:a9:
         39:0b:64:4f:33:1a:2f:d2:c6:5b:92:63:c0:80:c4:54:8f:00:
         ea:0d:ed:56:77:fd:49:ea:e1:19:50:dd:43:7a:d8:f0:83:8d:
         a4:33:3e:5c:74:36:37:cf:ad:f9:b0:18:b5:b7:10:28:12:25:
         cd:d1:d7:66:bc:cd:07:6e:a2:56:92:9d:ea:c1:4a:8c:4b:ec:
         a8:59:8c:f7:92:e7:0a:28:fd:3e:69:f5:f8:62:fc:41:13:a9:
         d2:2e:cf:ef:f7:f3:c5:aa:a5:f5:ce:27:86:bc:d8:0d:8a:68:
         fe:7b:76:6d:02:5a:08:71:d5:9f:ab:dd:b3:b6:b8:f6:d8:d7:
         f0:da:f3:4f:d4:8e:4c:d3:19:57:23:3e:8d:86:37:d5:ae:79:
         03:58:3d:b7:6e:b9:78:9f:70:a5:00:42:4a:b6:5b:8d:70:cd:
         3d:15:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:51:25 2026 by rpki-client