This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/0i0XuDvoPgs1nd1NeD83B2IScVA.roa
File:                     0i0XuDvoPgs1nd1NeD83B2IScVA.roa (raw, json)
Hash identifier:          YNJF/olVt/Dil/zKrwDDUgcE/N5peyDf18kFIpNKPX8=
Subject key identifier:   D2:2D:17:B8:3B:E8:3E:0B:35:9D:DD:4D:78:3F:37:07:62:12:71:50
Certificate issuer:       /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial:       019B7BA418E337030F6915159606BC5B412E
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/0i0XuDvoPgs1nd1NeD83B2IScVA.roa
Signing time:             Thu 01 Jan 2026 22:18:30 +0000
ROA not before:           Thu 01 Jan 2026 22:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61418
IP address blocks:        46.18.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:18:e3:37:03:0f:69:15:15:96:06:bc:5b:41:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
        Validity
            Not Before: Jan  1 22:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d22d17b83be83e0b359ddd4d783f370762127150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:01:a3:46:83:22:f3:f0:60:5d:c1:bb:08:
                    ce:18:b8:d5:0e:2e:0a:44:23:f7:f2:1c:84:44:89:
                    39:05:4f:c9:a1:79:51:82:86:55:71:7e:ae:85:56:
                    c5:de:e8:fb:7e:d7:56:54:1b:92:f2:28:86:a5:9f:
                    25:11:01:a4:b1:ac:1c:60:2b:de:75:fa:e5:de:01:
                    88:ef:32:b6:a8:a5:32:50:3d:e2:5a:d0:b6:12:a1:
                    74:35:56:b3:67:cf:4e:71:0d:a5:b2:d7:cc:2f:48:
                    c4:25:77:b6:88:de:b3:af:2e:51:5a:fe:4b:d7:ab:
                    7f:db:9d:87:e9:1f:8d:82:08:52:8b:4f:d6:a9:87:
                    34:6f:41:72:61:5d:b3:4a:3d:12:45:60:fc:0c:a5:
                    c9:bd:64:25:41:5d:a7:82:76:57:46:1a:6a:5b:32:
                    1f:0c:52:fd:99:df:8f:49:59:16:3b:b5:e1:a6:55:
                    a7:a9:fd:b7:c0:ae:3c:0c:c2:e3:ba:55:1e:19:8f:
                    bd:78:79:13:75:02:39:b0:4a:70:ee:64:f0:5c:ca:
                    80:df:84:80:a6:8d:60:04:86:d7:f6:ff:8d:ba:d5:
                    8e:d9:04:41:71:7c:f9:e4:b0:6b:5b:ea:1b:a7:3b:
                    c8:e7:33:e3:0e:75:92:1d:55:a2:12:d9:52:b5:21:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2D:17:B8:3B:E8:3E:0B:35:9D:DD:4D:78:3F:37:07:62:12:71:50
            X509v3 Authority Key Identifier:
                keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/0i0XuDvoPgs1nd1NeD83B2IScVA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.18.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ac:d0:00:79:a3:df:24:d1:85:ed:e8:fb:ac:2e:63:52:89:
         c9:2f:0a:08:d8:92:46:e4:33:db:49:4b:5f:32:eb:72:a2:94:
         69:ee:1f:d4:0c:5c:e3:8e:ab:9c:05:6c:1b:47:a8:93:bc:67:
         7c:6e:50:3b:8a:d7:ff:47:3f:95:4e:93:1f:d5:15:f9:d4:76:
         11:0f:b4:f2:2e:a8:55:87:f2:ad:99:b1:2c:7b:22:3a:8a:7a:
         a7:a7:fa:cf:9d:d8:cd:93:bf:e3:e7:99:45:e2:f9:36:fb:79:
         d2:ab:23:06:58:69:41:dd:62:51:82:a1:57:00:8c:08:7d:4b:
         7b:d7:e3:ed:63:f0:b6:f9:ce:e2:bc:14:d8:7a:90:5f:11:97:
         36:b7:be:86:8e:71:c2:ba:48:f3:71:22:b6:56:34:fb:e1:50:
         ca:d1:66:3b:6a:6d:99:b7:fd:f9:42:31:a7:32:ce:23:9c:68:
         b4:f1:27:e4:82:0d:e9:0b:16:a8:5b:64:7a:0e:43:ce:5d:a1:
         a9:89:f7:45:79:95:7d:9e:25:c1:6e:94:61:56:a6:2f:51:08:
         19:77:da:4f:61:cb:97:68:9d:e4:05:28:6b:49:ef:95:9c:ec:
         3e:c8:51:ea:7f:06:0c:a2:9d:a4:00:e5:e1:4c:0a:9b:7d:61:
         a4:b5:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:25 2026 by rpki-client