This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/R3DhBcv8V0AOfTezkWTdoBLAf9s.roa
File:                     R3DhBcv8V0AOfTezkWTdoBLAf9s.roa (raw, json)
Hash identifier:          7KUMnJst8rSc/hzAeb9anosotLYQ2sNoUSwykYhtBMM=
Subject key identifier:   47:70:E1:05:CB:FC:57:40:0E:7D:37:B3:91:64:DD:A0:12:C0:7F:DB
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       019B7F15157BCF48D5069853099DEF38F15F
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/R3DhBcv8V0AOfTezkWTdoBLAf9s.roa
Signing time:             Fri 02 Jan 2026 14:20:46 +0000
ROA not before:           Fri 02 Jan 2026 14:20:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213449
IP address blocks:        2a14:c380:390::/48 maxlen: 48
                          2a14:c380:391::/48 maxlen: 48
                          2a14:c380:392::/48 maxlen: 48
                          2a14:c380:393::/48 maxlen: 48
                          2a14:c380:394::/48 maxlen: 48
                          2a14:c380:395::/48 maxlen: 48
                          2a14:c380:396::/48 maxlen: 48
                          2a14:c380:397::/48 maxlen: 48
                          2a14:c380:398::/48 maxlen: 48
                          2a14:c380:399::/48 maxlen: 48
                          2a14:c380:39a::/48 maxlen: 48
                          2a14:c380:39b::/48 maxlen: 48
                          2a14:c380:39c::/48 maxlen: 48
                          2a14:c380:39d::/48 maxlen: 48
                          2a14:c380:39e::/48 maxlen: 48
                          2a14:c380:39f::/48 maxlen: 48
                          2a14:c380:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:15:7b:cf:48:d5:06:98:53:09:9d:ef:38:f1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Jan  2 14:20:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4770e105cbfc57400e7d37b39164dda012c07fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:97:47:2e:7e:54:d4:16:98:61:a3:b9:f2:
                    62:87:4e:52:42:df:b3:58:b7:14:d1:c1:c9:3b:b4:
                    c3:fa:f6:99:98:5a:2f:fb:59:5c:d1:d8:a4:2f:fe:
                    49:8b:b3:09:8d:b2:c0:47:08:67:3c:07:23:ce:32:
                    f5:15:b1:a0:a0:a4:39:1d:cb:90:2f:1e:72:85:10:
                    ec:31:51:5d:e2:cb:1c:20:cb:6a:57:0b:b8:b9:0e:
                    99:e6:bc:19:4e:5d:5c:92:1b:f5:71:61:0d:b7:73:
                    44:d4:87:e3:53:42:6d:be:b2:e9:32:7d:f7:21:2d:
                    a4:55:1b:27:5b:4a:d8:43:bf:d8:2d:77:3a:51:2a:
                    a8:fa:ae:b3:7e:cc:09:fa:ca:29:13:a0:f3:54:a3:
                    f5:eb:bc:3c:4f:af:8f:32:65:6d:08:0d:ab:10:46:
                    09:b8:33:0e:05:a0:5e:1a:7c:61:52:6a:27:2d:4f:
                    24:c6:e2:ce:e7:a5:aa:dc:bc:a4:09:ff:d6:0c:b7:
                    9f:22:c8:bb:36:bc:39:fa:ba:d0:d6:99:1a:cf:65:
                    b9:42:23:e3:a5:45:38:03:08:3a:a7:a7:82:b9:ca:
                    f2:3f:26:fc:4e:dd:8b:e5:49:be:6c:27:1b:55:84:
                    7a:74:3f:77:39:2a:9b:3d:15:b5:1d:06:cc:db:12:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:70:E1:05:CB:FC:57:40:0E:7D:37:B3:91:64:DD:A0:12:C0:7F:DB
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/R3DhBcv8V0AOfTezkWTdoBLAf9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:c380:390::/44
                  2a14:c380:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:07:1b:66:04:b2:60:ef:9e:9d:45:7f:9f:3f:ea:ed:52:96:
         86:86:cf:80:39:ba:17:5e:58:75:26:67:00:a7:5f:41:c1:4b:
         89:7c:4b:ab:ae:aa:88:83:73:bf:39:d3:8d:08:2e:88:c1:19:
         22:6d:44:49:8d:d5:d1:31:95:3d:5f:89:c1:33:cb:32:47:ad:
         8b:10:37:e8:be:31:38:5e:4a:68:83:d6:ec:43:3d:6a:8f:ba:
         4b:7f:72:06:62:c1:95:19:32:29:ba:fd:8b:f2:18:8c:28:28:
         7c:be:00:8c:0e:f3:ca:d6:ab:c0:29:1e:bf:08:6f:ea:c6:31:
         eb:81:ea:d6:25:ca:9d:ef:24:5b:f3:c3:2d:8f:e2:ba:3c:c6:
         11:2b:19:4b:65:09:11:a9:89:a3:d0:ad:dd:43:4d:59:61:42:
         76:37:58:5d:68:5b:14:52:30:52:10:28:e1:26:f2:45:c9:33:
         6b:8d:76:b1:94:a7:c7:f8:09:91:81:91:95:cb:41:51:9d:e4:
         94:80:36:d8:e0:2a:37:90:c3:ef:55:41:ca:8b:7f:3a:76:45:
         3f:d2:ac:2a:05:ee:c7:39:5a:86:82:86:9a:57:ff:ed:8f:9a:
         49:af:b6:b9:fc:db:df:0d:f2:b3:23:f8:4b:44:7e:37:65:38:
         12:71:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:39:55 2026 by rpki-client