This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/qC9TRPDEBU4tH34KGCdE-GtaQVo.roa
File:                     qC9TRPDEBU4tH34KGCdE-GtaQVo.roa (raw, json)
Hash identifier:          x+3EdF/VTAf945Szb8jBK7kDYlIbSVdzVeYTbe6GNVk=
Subject key identifier:   A8:2F:53:44:F0:C4:05:4E:2D:1F:7E:0A:18:27:44:F8:6B:5A:41:5A
Certificate issuer:       /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial:       019B7CEDCC2A89E016C4482960D93B307F80
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/qC9TRPDEBU4tH34KGCdE-GtaQVo.roa
Signing time:             Fri 02 Jan 2026 04:18:37 +0000
ROA not before:           Fri 02 Jan 2026 04:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201041
IP address blocks:        46.229.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:cc:2a:89:e0:16:c4:48:29:60:d9:3b:30:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
        Validity
            Not Before: Jan  2 04:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a82f5344f0c4054e2d1f7e0a182744f86b5a415a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:a5:83:fe:fe:32:82:35:d5:54:11:7e:ce:
                    65:16:42:0e:c3:2a:08:05:49:e2:19:b1:93:9f:39:
                    36:d0:04:3b:a3:a6:20:81:08:9a:2c:0f:54:0f:6a:
                    88:01:49:0e:14:84:e8:13:a0:43:45:0a:b9:19:92:
                    2e:83:bc:7a:31:b2:e9:eb:ed:8a:6f:ec:95:dd:84:
                    85:b4:7b:d1:df:0d:e9:c3:c2:2c:d5:81:55:28:1b:
                    bb:e9:c6:27:b9:16:16:6f:a3:5d:ce:e5:89:6b:c4:
                    ca:f9:6f:ee:d1:28:38:c9:1d:90:42:32:0d:43:3d:
                    04:0d:7d:42:f3:02:e0:54:c8:cd:63:bc:55:e8:82:
                    d2:7f:a4:a5:a3:68:7b:d1:db:5f:fd:0a:ae:31:d0:
                    50:a4:b7:63:5a:e7:38:fe:24:fd:c6:36:85:9c:53:
                    7b:bb:52:ef:11:92:a4:30:98:c8:d9:ad:98:6e:4c:
                    98:30:60:40:06:86:a2:1d:4d:05:e4:3f:a3:47:cc:
                    d5:ab:bf:c3:6b:ce:b4:47:de:bf:c8:50:5a:e0:09:
                    11:7c:50:1a:09:8c:f9:a2:21:9f:69:fd:aa:05:df:
                    f5:40:f6:d1:c8:10:c5:3b:ab:e5:dc:63:91:13:a0:
                    f5:0d:a0:09:db:03:26:8d:74:05:66:16:61:00:9b:
                    c3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2F:53:44:F0:C4:05:4E:2D:1F:7E:0A:18:27:44:F8:6B:5A:41:5A
            X509v3 Authority Key Identifier:
                keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/qC9TRPDEBU4tH34KGCdE-GtaQVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:c3:99:07:1a:ee:6d:a5:5b:ca:7d:ba:9c:b1:9c:b3:fb:a6:
         4b:0e:91:25:61:c2:5d:ff:2f:91:a4:cc:44:4b:68:d6:9a:78:
         81:a3:bc:cc:77:5c:ba:28:09:42:8a:31:76:a3:a0:e8:ad:0f:
         3e:28:a7:2b:bf:69:35:65:7e:18:5a:3c:86:6b:a3:65:48:ae:
         34:f2:ae:f9:1f:47:8d:8b:32:84:f7:96:77:b4:01:aa:dd:96:
         f4:c7:ae:4f:d4:b2:d7:fc:23:94:d7:e7:29:4f:51:d2:fb:a8:
         1d:bd:b7:a2:1f:db:34:bb:23:89:ac:9f:57:d5:10:f6:d7:a4:
         40:95:e2:5c:56:fd:da:a3:98:44:8f:4e:5a:ce:7d:cd:71:2a:
         29:ba:00:b3:17:1a:54:a5:50:fc:a7:28:ad:e7:bf:ee:a0:aa:
         56:bb:8a:bb:d8:31:23:2c:6f:4d:02:ff:88:1f:1d:8b:09:54:
         0b:95:fd:c2:a6:3d:c9:6b:02:f4:88:42:f1:9c:d9:90:99:af:
         3b:a4:78:84:ef:15:8c:e6:55:2a:02:fb:13:0a:2a:47:16:ed:
         4f:42:3b:0d:04:12:60:7c:ab:e8:65:d1:45:52:06:ae:bc:97:
         69:f8:a8:45:59:1d:21:3b:1c:d0:70:d4:cf:a2:3c:f4:67:f6:
         a7:d2:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:48:47 2026 by rpki-client