This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/_n6jeEvw1fkyJDmhWTUIcmdEloQ.roa
File:                     _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (raw, json)
Hash identifier:          aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=
Subject key identifier:   FE:7E:A3:78:4B:F0:D5:F9:32:24:39:A1:59:35:08:72:67:44:96:84
Certificate issuer:       /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial:       019BBD7A2C3FF9F3158C169FA7C798ADE3EC
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/_n6jeEvw1fkyJDmhWTUIcmdEloQ.roa
Signing time:             Wed 14 Jan 2026 17:07:39 +0000
ROA not before:           Wed 14 Jan 2026 17:07:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     397477
IP address blocks:        185.46.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:bd:7a:2c:3f:f9:f3:15:8c:16:9f:a7:c7:98:ad:e3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
        Validity
            Not Before: Jan 14 17:07:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fe7ea3784bf0d5f9322439a15935087267449684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d2:14:a9:dc:8c:8f:64:a0:54:5f:84:86:bc:
                    40:24:4c:0c:11:30:b3:e3:15:d2:07:5b:c0:2f:84:
                    d4:0f:14:5e:1d:b3:17:e3:29:9f:d9:54:9e:7b:d1:
                    ce:b4:ea:74:b3:92:ab:18:d7:c3:ec:e5:7d:81:95:
                    0f:81:97:ee:2b:1a:e5:f1:f2:5d:57:c2:c4:76:4a:
                    48:aa:59:21:da:cf:db:79:a1:09:f8:be:af:a7:3f:
                    6c:04:40:b8:9d:42:57:86:31:b6:dd:66:89:e9:76:
                    d1:2f:60:50:4d:8a:37:de:d8:41:e1:98:f7:7b:08:
                    17:a5:80:30:1a:d3:79:d6:7e:df:37:34:a6:88:a2:
                    db:d9:f4:fc:c0:46:42:49:1f:08:8b:39:41:a1:cc:
                    6d:63:79:4d:49:28:80:33:6e:1f:2f:e8:c2:48:fe:
                    73:2b:92:c1:b2:6f:56:b3:f6:74:d9:e4:39:8a:10:
                    79:bb:f1:1e:95:e9:02:d5:e8:70:98:15:5b:03:c9:
                    6d:0e:19:e9:ea:3a:19:a0:44:3c:2a:49:d7:83:93:
                    ce:7e:b0:53:c5:63:19:4a:30:ac:ee:28:cc:7d:48:
                    98:e1:72:11:4e:80:91:43:45:3c:fa:fc:45:5a:17:
                    01:9c:25:df:9e:c4:86:03:98:be:10:16:e7:40:7a:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7E:A3:78:4B:F0:D5:F9:32:24:39:A1:59:35:08:72:67:44:96:84
            X509v3 Authority Key Identifier:
                keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/_n6jeEvw1fkyJDmhWTUIcmdEloQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:be:f5:5f:b1:79:d6:20:a7:ec:c7:0f:e8:46:5b:2b:d5:bd:
         2d:2b:0e:67:1a:01:b9:5a:d1:0e:0a:c4:19:8b:cc:61:43:b3:
         5d:35:07:bf:5c:6a:05:b0:a7:25:95:88:55:29:5d:8b:63:ac:
         cf:c2:5f:ab:af:c5:1b:b8:30:71:21:45:32:d9:cb:b3:72:b9:
         b2:d9:9a:02:62:1a:b8:b5:5e:59:62:06:ce:63:39:7c:46:50:
         20:dc:93:01:0e:f8:f7:00:ac:08:dd:a3:fe:ac:c5:23:e0:51:
         66:86:61:ff:b6:b9:e3:bf:8d:6b:e6:b7:c3:1f:e9:64:03:bc:
         ff:61:1e:0f:64:dd:30:b9:f5:d7:e9:d4:d6:40:21:ca:c2:68:
         29:58:42:e7:e9:66:2a:21:bf:34:4c:84:e6:65:de:a3:b3:63:
         67:d8:f0:22:c8:ba:ca:63:98:44:68:27:6d:91:39:8c:18:ac:
         42:61:6f:e1:cb:2f:b2:17:20:98:95:e2:5c:bf:dc:82:0c:21:
         43:b6:ca:09:45:b7:8d:bd:e7:b2:8a:f1:f1:4c:85:22:3a:f8:
         79:1d:aa:08:69:49:e2:ab:d5:d2:50:4a:e2:fc:fa:ce:d9:65:
         d0:66:16:76:48:f0:9c:3c:c9:0e:71:3a:08:3f:35:18:0e:03:
         44:38:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:35:59 2026 by rpki-client