This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/emamOYQH7VSgnUMUP8mvfhqm5dQ.roa
File:                     emamOYQH7VSgnUMUP8mvfhqm5dQ.roa (raw, json)
Hash identifier:          MSxhtnoAd2af3qlANifc6U+2SnTTVeaXrUw3+bcJ3Dw=
Subject key identifier:   7A:66:A6:39:84:07:ED:54:A0:9D:43:14:3F:C9:AF:7E:1A:A6:E5:D4
Certificate issuer:       /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial:       019B7F84A5156AC2FB09161550C32A925C8D
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/emamOYQH7VSgnUMUP8mvfhqm5dQ.roa
Signing time:             Fri 02 Jan 2026 16:22:37 +0000
ROA not before:           Fri 02 Jan 2026 16:22:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51540
IP address blocks:        46.31.144.0/24 maxlen: 24
                          46.31.145.0/24 maxlen: 24
                          46.31.146.0/24 maxlen: 24
                          46.31.147.0/24 maxlen: 24
                          46.31.148.0/24 maxlen: 24
                          46.31.149.0/24 maxlen: 24
                          46.31.150.0/24 maxlen: 24
                          46.31.151.0/24 maxlen: 24
                          185.14.20.0/24 maxlen: 24
                          185.14.21.0/24 maxlen: 24
                          185.14.22.0/24 maxlen: 24
                          185.14.23.0/24 maxlen: 24
                          185.52.228.0/24 maxlen: 24
                          185.198.196.0/24 maxlen: 24
                          185.198.197.0/24 maxlen: 24
                          185.198.198.0/24 maxlen: 24
                          185.198.199.0/24 maxlen: 24
                          2a03:6c40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:a5:15:6a:c2:fb:09:16:15:50:c3:2a:92:5c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
        Validity
            Not Before: Jan  2 16:22:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a66a6398407ed54a09d43143fc9af7e1aa6e5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:c3:c4:cb:58:69:63:4c:6a:53:be:22:76:
                    6e:d6:cf:88:36:7e:70:81:fe:fe:a8:eb:97:2a:a1:
                    2b:ed:a3:f4:78:91:09:7e:fc:0e:4c:ce:97:b1:fe:
                    84:ee:fb:fb:94:c5:22:73:90:57:59:62:fa:0d:d1:
                    d5:bf:f4:3c:68:c9:89:2b:06:c0:fe:c3:51:4c:c3:
                    41:06:e3:1e:9b:19:3f:77:31:4b:e5:73:42:d9:f2:
                    ad:44:5f:a0:75:0b:ad:d2:8c:fe:81:f9:a4:e5:af:
                    c8:0b:64:01:4f:ab:bb:6b:c5:24:c2:7e:51:a7:68:
                    7f:5c:6e:64:a2:f8:d9:52:61:e8:38:fc:df:20:f5:
                    11:48:a4:17:fd:71:a6:5e:51:a6:aa:47:ca:14:eb:
                    ed:19:fe:89:fb:a6:2c:9f:20:84:6b:b1:de:c4:71:
                    ce:e6:fa:1b:ff:09:07:68:0b:00:18:80:52:e4:22:
                    78:33:a9:4c:07:bf:59:9d:21:64:4a:d5:3f:7b:a3:
                    a6:e0:7d:8c:42:c0:1a:98:45:b8:db:c7:b9:93:e5:
                    15:d1:83:53:87:a5:00:66:69:36:a8:16:8e:fd:cf:
                    ad:65:87:14:4e:91:5c:a8:91:c1:4a:f1:02:33:ff:
                    a6:12:55:67:03:11:83:cc:87:36:f8:50:ec:16:86:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:66:A6:39:84:07:ED:54:A0:9D:43:14:3F:C9:AF:7E:1A:A6:E5:D4
            X509v3 Authority Key Identifier:
                keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/emamOYQH7VSgnUMUP8mvfhqm5dQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.144.0/21
                  185.14.20.0/22
                  185.52.228.0/24
                  185.198.196.0/22
                IPv6:
                  2a03:6c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:4c:c7:ff:17:5e:27:d6:54:18:4a:c9:a2:3a:b0:71:3f:60:
         75:af:14:1c:3e:46:ea:8e:50:98:7e:d1:bd:e9:e7:11:c8:f2:
         62:25:a5:8d:69:0d:c7:db:79:85:6a:fa:a8:e2:1a:05:0e:fe:
         f6:a4:70:2a:e2:c5:40:11:41:53:2f:17:1b:c3:09:96:63:ce:
         02:f7:60:16:18:9e:5a:98:64:0c:ea:b2:74:a5:dc:68:5b:8f:
         b8:c9:65:42:b1:e9:0f:de:e0:bd:19:e0:0d:e7:28:3c:ab:8a:
         a7:e8:8c:3b:0d:6d:12:6a:ca:2d:db:f9:04:42:34:7c:e9:4f:
         b3:43:6b:02:cd:d8:c4:d7:bd:49:29:5c:e1:ef:6d:ee:35:57:
         ce:f2:91:5d:49:12:1a:a5:7f:90:54:94:c7:5d:23:a6:9d:f3:
         0b:df:c1:61:86:17:10:38:f5:6e:36:03:4c:ed:a0:a7:7f:d0:
         d2:14:9b:f4:77:5b:18:aa:ca:bb:7e:4e:24:6c:d4:aa:67:5a:
         8f:c1:3c:6b:34:b8:18:79:1f:66:94:99:6b:17:de:f0:88:f4:
         7a:d3:e6:2d:3b:6a:f1:b4:c5:74:4b:a4:87:79:a6:47:89:4a:
         bf:0b:02:a1:2f:54:b5:6b:72:23:2b:cf:7e:ac:a2:5f:bb:c1:
         24:f0:49:2b
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZt/hKUVasL7CRYVUMMqklyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNWNiMDk4Y2Y2ZjdmYjY4YTE4MWFlY2RhOGVhMzhlNjRj
NWFjOWQwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTY2YTYzOTg0MDdlZDU0YTA5ZDQzMTQzZmM5YWY3ZTFhYTZlNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhTDxMtYaWNMalO+InZu1s+INn5w
gf7+qOuXKqEr7aP0eJEJfvwOTM6Xsf6E7vv7lMUic5BXWWL6DdHVv/Q8aMmJKwbA
/sNRTMNBBuMemxk/dzFL5XNC2fKtRF+gdQut0oz+gfmk5a/IC2QBT6u7a8Ukwn5R
p2h/XG5kovjZUmHoOPzfIPURSKQX/XGmXlGmqkfKFOvtGf6J+6YsnyCEa7HexHHO
5vob/wkHaAsAGIBS5CJ4M6lMB79ZnSFkStU/e6Om4H2MQsAamEW428e5k+UV0YNT
h6UAZmk2qBaO/c+tZYcUTpFcqJHBSvECM/+mElVnAxGDzIc2+FDsFoYGtQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFHpmpjmEB+1UoJ1DFD/Jr34apuXUMB8GA1UdIwQY
MBaAFB1csJjPb3+2ihga7NqOo45kxaydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZ5d21NOXZmN2FLR0JyczJvNmpqbVRGckowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zZDgxMjctNDRkZS00MDdiLTk0OTkt
ZDZhNDMzMTlhYTIxLzEvZW1hbU9ZUUg3VlNnblVNVVA4bXZmaHFtNWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zZDgxMjctNDRkZS00MDdiLTk0OTktZDZhNDMzMTlhYTIx
LzEvSFZ5d21NOXZmN2FLR0JyczJvNmpqbVRGckowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLh+QAwQC
uQ4UAwQAuTTkAwQCucbEMA0EAgACMAcDBQAqA2xAMA0GCSqGSIb3DQEBCwUAA4IB
AQBsTMf/F14n1lQYSsmiOrBxP2B1rxQcPkbqjlCYftG96ecRyPJiJaWNaQ3H23mF
avqo4hoFDv72pHAq4sVAEUFTLxcbwwmWY84C92AWGJ5amGQM6rJ0pdxoW4+4yWVC
sekP3uC9GeAN5yg8q4qn6Iw7DW0Sasot2/kEQjR86U+zQ2sCzdjE171JKVzh723u
NVfO8pFdSRIapX+QVJTHXSOmnfML38FhhhcQOPVuNgNM7aCnf9DSFJv0d1sYqsq7
fk4kbNSqZ1qPwTxrNLgYeR9mlJlrF97wiPR60+YtO2rxtMV0S6SHeaZHiUq/CwKh
L1S1a3IjK89+rKJfu8Ek8Ekr
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:28:47 2026 by rpki-client