This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/_qyyRLxurgk6rJD6W1RlRxCToGY.roa
File:                     _qyyRLxurgk6rJD6W1RlRxCToGY.roa (raw, json)
Hash identifier:          mR70pAUlQ+v2tBDIObfNMRRXZIhEUqOChrzj0zRocgg=
Subject key identifier:   FE:AC:B2:44:BC:6E:AE:09:3A:AC:90:FA:5B:54:65:47:10:93:A0:66
Certificate issuer:       /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial:       019A96FDF79BB1F295BEB03F2CADC9B308A6
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/_qyyRLxurgk6rJD6W1RlRxCToGY.roa
Signing time:             Tue 18 Nov 2025 12:43:37 +0000
ROA not before:           Tue 18 Nov 2025 12:43:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49505
IP address blocks:        46.150.240.0/24 maxlen: 24
                          46.150.241.0/24 maxlen: 24
                          46.150.242.0/24 maxlen: 24
                          46.150.243.0/24 maxlen: 24
                          46.150.244.0/24 maxlen: 24
                          46.150.245.0/24 maxlen: 24
                          46.150.246.0/24 maxlen: 24
                          46.150.247.0/24 maxlen: 24
                          46.150.250.0/24 maxlen: 24
                          46.150.251.0/24 maxlen: 24
                          46.150.252.0/24 maxlen: 24
                          46.150.253.0/24 maxlen: 24
                          46.150.254.0/24 maxlen: 24
                          46.150.255.0/24 maxlen: 24
                          176.103.80.0/24 maxlen: 24
                          176.103.81.0/24 maxlen: 24
                          176.103.84.0/24 maxlen: 24
                          176.103.85.0/24 maxlen: 24
                          176.103.86.0/24 maxlen: 24
                          176.103.87.0/24 maxlen: 24
                          176.103.88.0/24 maxlen: 24
                          176.103.89.0/24 maxlen: 24
                          176.103.90.0/24 maxlen: 24
                          176.103.91.0/24 maxlen: 24
                          176.103.92.0/24 maxlen: 24
                          176.103.93.0/24 maxlen: 24
                          176.103.94.0/24 maxlen: 24
                          176.103.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:96:fd:f7:9b:b1:f2:95:be:b0:3f:2c:ad:c9:b3:08:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
        Validity
            Not Before: Nov 18 12:43:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=feacb244bc6eae093aac90fa5b5465471093a066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f0:f8:43:29:0c:e3:0c:54:ce:11:56:57:91:
                    5e:25:ef:da:35:e2:f6:25:78:0a:45:72:54:83:89:
                    32:1d:91:ed:58:95:f8:d6:08:7a:5e:72:f9:7e:6e:
                    67:82:2a:ee:79:d8:75:9f:cf:08:31:4a:63:4e:6c:
                    dc:64:a8:ea:0e:3c:08:96:32:33:6d:8e:91:cf:6f:
                    0c:4f:05:5d:7d:da:32:9d:2e:ad:e4:03:c4:80:36:
                    7f:31:86:8d:f6:57:cc:c6:5d:83:fd:0b:e6:76:83:
                    41:88:a6:62:c6:83:b0:30:c0:62:ee:9a:34:02:8b:
                    9d:dd:f3:fa:c9:c2:14:87:63:37:0c:e9:1a:54:d8:
                    d8:7c:88:c1:f5:1d:bc:6f:0f:ac:8f:0e:95:dc:73:
                    d8:c6:bf:8e:87:65:0e:2a:25:5b:a5:be:29:3c:b3:
                    b3:c0:21:9b:88:7b:50:42:06:ee:c5:e1:ff:da:14:
                    da:d7:56:7c:1e:a5:e5:1d:7e:99:92:54:98:63:c9:
                    9e:ba:f3:88:b1:30:92:21:e9:6d:4c:4e:1b:00:f1:
                    f7:43:1e:1d:38:9f:93:d3:8a:20:47:7d:33:79:5b:
                    0a:5d:4c:ae:ec:af:db:fe:65:a3:69:9b:95:7c:97:
                    c7:9a:05:15:1e:4c:c0:2e:30:42:b5:d6:c5:0c:45:
                    54:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AC:B2:44:BC:6E:AE:09:3A:AC:90:FA:5B:54:65:47:10:93:A0:66
            X509v3 Authority Key Identifier:
                keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/_qyyRLxurgk6rJD6W1RlRxCToGY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.150.240.0/21
                  46.150.250.0-46.150.255.255
                  176.103.80.0/23
                  176.103.84.0-176.103.95.255

    Signature Algorithm: sha256WithRSAEncryption
         04:a1:32:a7:1e:c9:ab:51:42:f5:f2:9a:12:65:df:e5:bd:d2:
         ad:f6:ba:a2:9a:81:41:9b:8d:10:99:1e:00:a0:36:56:59:e0:
         c0:03:af:7c:b7:b0:37:eb:55:0b:c4:99:a6:42:83:09:98:e1:
         ae:37:7c:8a:b1:37:df:35:06:26:c7:fa:23:f1:95:29:5e:d4:
         75:ed:05:40:4e:00:02:82:f3:fd:a1:a5:d1:be:ba:7c:c4:7b:
         dc:d8:ff:40:2d:9c:72:e5:be:30:93:28:fd:0f:4f:e7:f6:a7:
         fd:a8:d9:f7:1a:95:90:05:a2:ac:45:da:76:f7:c9:8f:b7:4d:
         ce:39:b4:3c:1a:8d:0e:a7:5c:54:a7:d3:fb:b4:8c:51:8e:99:
         eb:8a:49:d9:ae:21:4b:cc:85:3d:63:4b:90:60:15:5b:9b:a5:
         a6:ec:50:c8:7f:41:11:0a:14:1c:f8:74:9b:7f:a1:a4:79:66:
         9c:48:e5:fd:e6:d4:e7:71:7f:1a:55:26:1f:ff:0e:7c:cc:d3:
         87:bb:76:11:53:1c:14:73:8d:03:24:4a:64:12:7c:3c:fa:6a:
         ed:66:7e:eb:3d:f8:f6:41:d5:64:9f:10:13:a4:6d:c8:14:06:
         8c:04:a1:79:2c:79:59:95:74:14:f9:63:0c:bc:2a:ea:16:0c:
         76:6b:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:42:01 2025 by rpki-client