This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/guFbtlOz-cVdnWuwUwSINPp7svQ.roa
File:                     guFbtlOz-cVdnWuwUwSINPp7svQ.roa (raw, json)
Hash identifier:          BNaICbUM99PP5akZrL/wYa4QckctHFIRaBrJZEL3Ams=
Subject key identifier:   82:E1:5B:B6:53:B3:F9:C5:5D:9D:6B:B0:53:04:88:34:FA:7B:B2:F4
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019B7C1186B40F18CECD333084530506FD64
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/guFbtlOz-cVdnWuwUwSINPp7svQ.roa
Signing time:             Fri 02 Jan 2026 00:18:01 +0000
ROA not before:           Fri 02 Jan 2026 00:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210676
IP address blocks:        46.151.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:86:b4:0f:18:ce:cd:33:30:84:53:05:06:fd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Jan  2 00:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82e15bb653b3f9c55d9d6bb053048834fa7bb2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:35:c3:48:ba:af:f3:9c:b5:7a:d0:c2:34:
                    bb:45:1c:6e:34:a2:06:6e:76:27:13:38:ca:a1:7f:
                    b2:79:d5:79:e4:d4:99:10:f1:69:af:91:60:61:d3:
                    05:29:22:f7:c0:fe:ab:fe:4d:3b:41:55:75:ce:20:
                    89:b8:61:f4:a4:0a:f1:21:fe:4e:b2:d0:15:9c:b8:
                    10:21:0a:5c:6a:ec:99:45:7e:c7:a6:95:71:7b:f7:
                    59:72:25:c0:ef:89:fc:4e:95:64:5b:70:59:ef:9a:
                    62:b1:be:77:e1:de:de:11:76:d1:c8:5e:9a:b9:9a:
                    3b:84:65:58:ac:29:e6:a9:f5:b4:01:52:18:fb:55:
                    f4:b8:ec:66:14:86:b7:68:90:d1:7c:b2:4d:6d:4d:
                    52:d2:ee:b2:9d:18:43:ee:be:9b:96:86:ef:d2:3b:
                    8f:73:c3:c7:d2:2e:73:54:80:f1:f2:64:dc:55:5b:
                    24:2a:45:d8:93:3a:7c:a9:21:ee:41:e9:3e:22:ea:
                    97:93:dd:7e:5e:41:f8:4b:a0:c5:7a:26:5c:fb:87:
                    5b:52:4b:0a:48:b4:8a:37:54:db:8b:fe:65:8f:5b:
                    14:76:d5:d9:a6:c0:0b:78:e5:5e:48:cd:d0:1a:24:
                    89:36:15:f7:06:e7:50:4e:90:f2:dd:75:82:6e:85:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E1:5B:B6:53:B3:F9:C5:5D:9D:6B:B0:53:04:88:34:FA:7B:B2:F4
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/guFbtlOz-cVdnWuwUwSINPp7svQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.151.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:cf:a3:e1:27:5c:3c:35:e4:4f:c7:61:d9:be:86:11:4e:2c:
         e8:b2:fe:37:02:7c:73:36:fc:08:dd:68:73:54:7c:75:d5:12:
         c3:db:68:c9:06:aa:2e:7c:ba:27:28:a8:a8:f9:84:26:fe:46:
         0b:b7:ac:b0:0a:e4:a7:22:f3:81:9e:98:d5:30:1d:97:c4:9b:
         72:ea:a7:a8:0f:89:18:50:45:c5:5d:91:fc:6f:1e:13:d3:a3:
         85:83:0c:d8:59:81:09:ff:64:aa:e7:29:48:49:b7:42:e0:19:
         4f:0d:2b:19:69:5d:6d:86:fa:9d:03:aa:52:5a:a4:f2:79:9c:
         ba:8b:de:24:c2:ec:94:6e:ab:63:32:1b:ed:38:2a:ff:f9:dc:
         c4:62:30:fa:89:58:dd:8e:37:82:de:3d:ba:49:ee:be:51:63:
         41:77:67:78:3c:38:05:d8:c3:f4:1a:1e:03:a6:bd:dc:4b:42:
         75:86:61:6b:b9:ac:e7:65:82:84:40:ea:1b:cd:c4:23:13:41:
         df:00:76:91:e3:f9:f7:6f:d9:68:d8:ee:cc:cf:55:d9:7c:68:
         b7:6f:01:6e:5b:27:a4:ff:60:dd:4c:c8:0a:77:0c:21:46:e9:
         15:2b:37:f5:82:02:0f:1e:fc:b6:f4:90:8f:28:a7:ce:ea:5b:
         cf:4f:6e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:55 2026 by rpki-client