This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa
File:                     Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (raw, json)
Hash identifier:          nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=
Subject key identifier:   46:C8:FA:47:FE:5D:5E:21:E2:D5:E5:12:2B:3A:43:29:9C:E4:4E:21
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       019B7910F2B6ED21EE381896708BEF2E9D0C
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa
Signing time:             Thu 01 Jan 2026 10:18:32 +0000
ROA not before:           Thu 01 Jan 2026 10:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51897
IP address blocks:        46.143.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:f2:b6:ed:21:ee:38:18:96:70:8b:ef:2e:9d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Jan  1 10:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46c8fa47fe5d5e21e2d5e5122b3a43299ce44e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:66:48:03:c6:b5:08:54:1f:a3:48:54:ae:
                    f8:9b:67:00:5f:f1:b5:10:c9:6e:c8:06:af:6b:0a:
                    28:53:d9:f3:00:80:e1:ac:ea:0c:e4:57:7a:9b:dd:
                    8e:4d:58:fd:3e:a3:dc:4a:33:84:fa:69:d6:98:db:
                    8a:25:f6:b7:3d:41:e6:e8:ab:da:0b:f7:4e:ba:91:
                    55:90:ee:28:88:bf:fe:45:3a:74:e3:a8:3f:98:2d:
                    1f:a5:7c:b5:c4:7b:be:26:fe:e6:e1:21:76:66:ce:
                    b0:f1:5a:ad:ce:32:45:87:90:ab:20:f9:cb:dc:b6:
                    0f:d6:d4:39:26:5d:26:54:a7:31:84:f7:ec:5a:4f:
                    bc:6e:34:f7:04:09:6f:63:a6:e2:87:11:51:4f:43:
                    a2:4c:1e:94:4c:0c:11:65:5c:a3:11:75:69:16:b1:
                    bf:5c:bc:5c:02:61:e0:44:26:54:cd:1b:67:f5:63:
                    99:ba:bf:f2:ce:ad:c9:f6:9a:38:44:e4:49:33:1e:
                    a1:ed:c1:ba:04:8f:e6:76:85:7d:c4:de:67:8f:45:
                    1b:6f:79:4c:68:5a:68:47:6d:f4:8b:95:e0:5a:50:
                    4a:dc:53:9e:69:e6:47:32:97:15:9f:b0:e1:cd:2c:
                    8b:d3:22:8f:f5:b0:61:fd:2d:d8:8e:c0:8e:07:12:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C8:FA:47:FE:5D:5E:21:E2:D5:E5:12:2B:3A:43:29:9C:E4:4E:21
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.143.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:66:69:cb:83:50:59:db:64:ea:28:e7:7e:6e:1c:51:18:df:
         50:67:58:99:68:4d:c0:5e:10:00:7a:d9:e3:7d:b9:dd:02:65:
         02:ea:8d:97:57:bb:39:30:e7:9e:e8:37:e3:71:51:c4:1b:44:
         4f:59:7d:42:fa:b5:99:4e:c5:5e:e7:b3:b5:3d:6c:e8:f1:b5:
         ea:98:0f:8e:f0:8c:6b:a9:96:3b:f2:8a:8d:12:76:8c:4e:c7:
         9f:e6:21:ff:e8:8a:52:ab:2f:73:bf:cd:14:1f:83:27:ad:dc:
         5d:a0:45:f8:f6:2d:87:da:d4:b5:4c:7f:dd:ba:49:35:b9:20:
         6c:85:14:71:7c:92:5a:62:e4:8b:07:55:8e:b7:51:4e:97:31:
         c5:db:2f:25:fb:bb:01:44:78:ab:cf:da:3c:4f:7d:de:a3:b0:
         e9:a4:4d:14:bc:e2:86:ad:02:9c:f4:64:ac:f7:95:39:99:a6:
         68:82:b8:ba:34:70:2b:8d:05:1e:68:87:49:06:0d:2c:ae:73:
         ab:fe:e3:0d:fb:9e:62:dd:ec:32:da:40:55:b1:8a:49:e9:95:
         a2:e6:d0:3b:da:10:59:39:ab:dc:63:77:e9:d9:a6:96:b5:61:
         d3:d9:26:02:16:e1:b2:42:2e:96:26:c3:01:46:e8:ff:33:86:
         34:a4:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:19 2026 by rpki-client