This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa
File:                     0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (raw, json)
Hash identifier:          6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=
Subject key identifier:   D2:30:2C:77:88:C7:BB:63:F8:62:24:A1:59:4F:ED:98:58:C6:F9:7A
Certificate issuer:       /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial:       019B783475FB9AF65B10FF648EF08C076310
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa
Signing time:             Thu 01 Jan 2026 06:17:42 +0000
ROA not before:           Thu 01 Jan 2026 06:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41960
IP address blocks:        185.246.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:75:fb:9a:f6:5b:10:ff:64:8e:f0:8c:07:63:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
        Validity
            Not Before: Jan  1 06:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d2302c7788c7bb63f86224a1594fed9858c6f97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:ea:13:bf:66:b6:df:ef:64:b2:b2:85:3b:
                    40:1e:6c:24:c3:f3:1c:25:2b:60:06:da:2c:18:95:
                    77:96:e1:7f:41:ea:23:18:d0:f3:95:bc:c7:95:6a:
                    a8:68:88:f2:4c:c8:5b:5b:c5:d9:24:75:20:25:bc:
                    88:a3:ea:48:53:9b:e5:5f:2a:37:18:cf:d5:5e:75:
                    ed:1d:c6:c3:b6:03:87:d2:3b:b0:f1:da:ff:87:a1:
                    aa:5e:23:77:13:d2:3a:32:66:ee:08:55:f4:d5:67:
                    96:2c:72:91:2f:ee:91:e0:dd:9a:f6:dc:0f:57:b0:
                    e9:8d:dd:93:1b:11:08:a6:37:d1:c9:38:78:99:cd:
                    25:b3:49:f7:57:0d:11:ae:22:6d:94:1f:6d:9d:4c:
                    29:54:c3:d2:64:70:ed:50:25:18:71:b5:62:56:c2:
                    dc:62:d7:bf:40:f2:85:cf:51:9b:05:a7:84:4c:3f:
                    82:31:ba:da:98:eb:f2:a6:99:1b:7f:9f:ba:2f:93:
                    d4:db:0d:66:22:57:f5:f7:49:90:7c:c3:03:d4:7e:
                    7a:99:ca:b8:57:f9:25:32:57:5b:69:a8:fb:2f:86:
                    2b:66:ca:15:c2:24:84:90:b0:47:b2:93:8f:6b:eb:
                    08:03:9d:b0:89:56:44:ec:b5:82:31:57:70:5d:50:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:2C:77:88:C7:BB:63:F8:62:24:A1:59:4F:ED:98:58:C6:F9:7A
            X509v3 Authority Key Identifier:
                keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:9d:42:5e:da:5c:d3:34:1f:db:03:4b:c6:fa:b9:3a:0d:75:
         61:97:4b:8c:e3:8f:63:ea:50:fa:43:93:cb:51:46:90:49:13:
         41:14:cb:6c:ac:c3:a1:39:a4:18:c4:9b:39:9a:b9:ec:8b:69:
         5e:8d:68:1c:33:5d:c6:9b:c0:36:77:11:39:3f:c5:c8:df:9a:
         99:8e:6f:06:01:d4:52:f2:ba:ae:50:ec:f5:07:a5:f3:f4:17:
         90:66:55:18:e7:38:c3:d9:34:1a:72:18:0a:d1:cd:0a:95:3e:
         c5:9e:6e:d2:cc:7d:8d:04:13:c1:f3:10:58:9a:69:bc:93:6e:
         43:94:f6:77:a6:53:3b:59:7e:a2:35:d9:24:4b:e0:5c:7c:f7:
         1f:97:4c:1a:5b:30:3b:df:74:17:cc:6e:a5:26:15:0c:23:ac:
         5e:3b:c3:42:a7:a7:d5:37:58:36:ed:be:c2:a3:67:c4:3b:32:
         6a:e2:5d:0a:b6:9d:67:5d:1e:e5:06:e5:69:c2:fb:dc:39:10:
         85:26:f6:e8:8f:3f:14:59:f1:60:e6:7c:e7:d3:a6:ab:7a:32:
         db:63:44:57:bb:45:e6:aa:0c:2b:b5:ed:26:f1:8c:e2:00:c8:
         5b:a2:72:26:a7:b4:2e:4c:2e:33:31:14:ca:bf:ee:77:be:05:
         31:32:75:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:51:40 2026 by rpki-client