This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/lC16rIMMnqHHfbg9MNxvqn7mqxk.roa
File:                     lC16rIMMnqHHfbg9MNxvqn7mqxk.roa (raw, json)
Hash identifier:          Mdn1l4dZ+NSM4dG4u4z56RyJO1WeprirQF3/FTo90cM=
Subject key identifier:   94:2D:7A:AC:83:0C:9E:A1:C7:7D:B8:3D:30:DC:6F:AA:7E:E6:AB:19
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       019B7CECBFFBFB0EC58BDEF6EB8F6B736191
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/lC16rIMMnqHHfbg9MNxvqn7mqxk.roa
Signing time:             Fri 02 Jan 2026 04:17:28 +0000
ROA not before:           Fri 02 Jan 2026 04:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31715
IP address blocks:        146.247.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:bf:fb:fb:0e:c5:8b:de:f6:eb:8f:6b:73:61:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Jan  2 04:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=942d7aac830c9ea1c77db83d30dc6faa7ee6ab19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:12:70:75:a4:92:1d:7f:2b:65:2e:53:d2:
                    a6:c9:5d:56:09:39:fc:98:53:f4:fa:da:48:74:af:
                    b9:ee:71:33:ff:4a:e4:ff:bc:3c:fd:42:00:0d:0b:
                    b7:c2:9d:02:a6:d4:39:dd:68:26:59:52:7c:9c:20:
                    0d:d4:4e:15:35:ac:b6:f2:f5:62:88:18:6b:5c:ed:
                    58:9f:4c:fc:97:42:6c:8e:96:cc:1e:7e:8e:d0:c8:
                    68:9a:7f:ea:37:6b:49:93:17:11:92:31:d3:5e:4e:
                    3a:21:cc:8e:ee:57:77:a6:33:00:04:7b:42:0e:df:
                    ba:0e:45:c6:85:9f:a7:8f:05:3f:6b:22:7e:e5:0e:
                    47:09:dc:d2:e6:6f:29:5c:18:dd:24:6a:d4:37:3f:
                    19:1e:4a:7f:1a:68:4f:67:56:d8:4e:9b:43:b0:b0:
                    fb:30:89:9a:68:39:db:35:1f:91:55:fe:96:32:48:
                    34:e9:ea:77:3b:67:82:0f:b3:7a:5f:1a:18:46:02:
                    a9:d3:70:19:1c:1b:93:30:e7:c5:f2:36:49:09:aa:
                    2b:b0:5b:44:81:9a:db:2b:4f:42:77:10:7a:38:b0:
                    cb:68:b5:27:44:9b:2f:1f:cc:c9:2f:d2:aa:6b:43:
                    9f:6d:64:af:08:d5:7d:b5:eb:8b:ec:f3:3e:6a:7c:
                    06:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:7A:AC:83:0C:9E:A1:C7:7D:B8:3D:30:DC:6F:AA:7E:E6:AB:19
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/lC16rIMMnqHHfbg9MNxvqn7mqxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b9:9b:0b:d1:85:94:05:f1:09:e4:f7:92:41:64:74:54:15:
         b7:44:dd:37:cb:30:d9:08:3f:74:f9:40:5a:c9:ce:1e:8c:f7:
         7e:ca:d5:31:0d:d0:87:00:86:a0:42:ad:46:9d:b6:09:ae:df:
         ea:07:98:94:39:aa:e5:d1:9a:3b:29:da:8e:c2:c2:64:a2:82:
         f0:3e:13:55:32:f1:02:df:f1:ff:33:d5:e0:39:f6:89:de:e0:
         93:23:dc:34:b0:1d:dc:9e:53:e5:88:05:88:94:2b:de:8c:53:
         46:8e:70:93:40:5f:70:1b:e2:cf:2d:84:43:cf:5c:4c:76:2f:
         dc:b0:d5:f0:4a:df:ff:79:73:ce:94:84:35:1b:9c:03:a9:b0:
         43:97:5b:77:c6:3f:a8:bb:b2:e1:ea:47:78:9d:8d:24:a2:aa:
         8e:37:87:98:d5:ee:86:69:d8:17:39:dd:f2:f9:61:70:90:47:
         6e:a2:d3:75:4a:01:0b:bd:75:2d:4e:a9:dd:b3:50:88:52:2e:
         a8:36:fa:0f:4b:f7:62:03:5c:c0:7d:01:b6:28:f6:89:da:11:
         3f:fd:33:ac:30:2d:4e:ba:1d:78:17:13:c6:9e:34:89:4c:8b:
         c4:a4:b8:89:03:20:b5:d7:b7:25:36:cd:af:83:39:5a:20:c1:
         da:e8:ad:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87L/7+w7Fi972649rc2GRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDJkN2FhYzgzMGM5ZWExYzc3ZGI4M2QzMGRjNmZhYTdlZTZhYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBIScHWkkh1/K2UuU9KmyV1WCTn8
mFP0+tpIdK+57nEz/0rk/7w8/UIADQu3wp0CptQ53WgmWVJ8nCAN1E4VNay28vVi
iBhrXO1Yn0z8l0JsjpbMHn6O0Mhomn/qN2tJkxcRkjHTXk46IcyO7ld3pjMABHtC
Dt+6DkXGhZ+njwU/ayJ+5Q5HCdzS5m8pXBjdJGrUNz8ZHkp/GmhPZ1bYTptDsLD7
MImaaDnbNR+RVf6WMkg06ep3O2eCD7N6XxoYRgKp03AZHBuTMOfF8jZJCaorsFtE
gZrbK09CdxB6OLDLaLUnRJsvH8zJL9Kqa0OfbWSvCNV9teuL7PM+anwGZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQteqyDDJ6hx324PTDcb6p+5qsZMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvbEMxNnJJTU1ucUhIZmJnOU1OeHZxbjdtcXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvdlMA0G
CSqGSIb3DQEBCwUAA4IBAQCbuZsL0YWUBfEJ5PeSQWR0VBW3RN03yzDZCD90+UBa
yc4ejPd+ytUxDdCHAIagQq1GnbYJrt/qB5iUOarl0Zo7KdqOwsJkooLwPhNVMvEC
3/H/M9XgOfaJ3uCTI9w0sB3cnlPliAWIlCvejFNGjnCTQF9wG+LPLYRDz1xMdi/c
sNXwSt//eXPOlIQ1G5wDqbBDl1t3xj+ou7Lh6kd4nY0koqqON4eY1e6GadgXOd3y
+WFwkEduotN1SgELvXUtTqnds1CIUi6oNvoPS/diA1zAfQG2KPaJ2hE//TOsMC1O
uh14FxPGnjSJTIvEpLiJAyC117clNs2vgzlaIMHa6K3s
-----END CERTIFICATE-----
Generated at Mon Jan 19 11:25:09 2026 by rpki-client