This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/pVBaNjULwz0aOwWJHCR4FjSV1IM.roa
File:                     pVBaNjULwz0aOwWJHCR4FjSV1IM.roa (raw, json)
Hash identifier:          Q5gwvnLKrWIq0+4hK9BYbVE1a8YkPxKXaiFgI8rPsJo=
Subject key identifier:   A5:50:5A:36:35:0B:C3:3D:1A:3B:05:89:1C:24:78:16:34:95:D4:83
Certificate issuer:       /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial:       019AFD406FE5D52ED93A956C0EA62ECE5711
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/pVBaNjULwz0aOwWJHCR4FjSV1IM.roa
Signing time:             Mon 08 Dec 2025 09:17:29 +0000
ROA not before:           Mon 08 Dec 2025 09:17:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210560
IP address blocks:        46.243.144.0/22 maxlen: 22
                          46.243.146.0/23 maxlen: 23
                          46.243.146.0/24 maxlen: 24
                          2a11:f740:2::/48 maxlen: 48
                          2a11:f740:20::/44 maxlen: 44
                          2a11:f740:20::/48 maxlen: 48
                          2a11:f740:21::/48 maxlen: 48
                          2a11:f740:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Dec 2025 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fd:40:6f:e5:d5:2e:d9:3a:95:6c:0e:a6:2e:ce:57:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
        Validity
            Not Before: Dec  8 09:17:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a5505a36350bc33d1a3b05891c2478163495d483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:36:53:88:3b:cd:5e:ee:d5:9e:f9:6e:55:93:
                    74:65:f1:98:56:04:f9:4c:e1:ef:b6:90:e3:73:98:
                    7e:40:08:80:92:22:bc:d8:ec:ce:5f:88:54:b6:11:
                    83:b2:de:88:10:fa:0d:f2:ec:70:73:84:6f:81:ae:
                    fa:6f:2f:2a:72:71:7a:88:7d:f7:7e:13:c0:53:04:
                    ba:08:6f:5f:cd:a8:87:96:69:37:bc:a7:c7:18:90:
                    e9:95:54:cd:ba:3f:34:5d:56:49:b7:b7:53:37:e0:
                    94:f9:73:c1:74:c8:4d:aa:aa:4a:62:1e:46:f2:55:
                    ad:67:0a:65:df:ff:d3:21:8d:4f:e2:bf:62:0f:84:
                    99:80:c7:7c:4a:00:f2:d9:e3:c4:0c:02:ec:e1:b0:
                    c0:53:af:a3:0d:9a:b7:dd:fa:9c:82:38:96:83:fb:
                    1b:fb:bf:71:c3:1e:35:e6:d5:86:ce:d4:77:32:f1:
                    25:f6:ec:83:36:88:72:fb:74:40:56:8e:b0:79:69:
                    c6:17:f4:35:24:62:52:47:ca:05:3a:ea:54:30:5e:
                    bb:78:cc:2e:4e:60:65:56:73:54:e7:c1:ee:01:35:
                    16:f5:66:24:58:6c:bd:3e:92:b6:47:6c:ae:73:d5:
                    ed:32:7f:88:32:f4:b7:99:16:ed:88:1f:a6:d9:a7:
                    83:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:50:5A:36:35:0B:C3:3D:1A:3B:05:89:1C:24:78:16:34:95:D4:83
            X509v3 Authority Key Identifier:
                keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/pVBaNjULwz0aOwWJHCR4FjSV1IM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.243.144.0/22
                IPv6:
                  2a11:f740:2::/48
                  2a11:f740:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:57:47:61:f5:91:45:05:f7:ea:46:cc:f0:05:f3:45:37:0b:
         c0:c3:d8:a1:67:6f:64:62:b6:e8:09:b3:40:49:58:a3:27:da:
         e8:8f:35:de:e4:35:71:8a:d3:26:c8:94:d9:68:18:27:f1:e7:
         91:0c:96:12:7a:5b:43:63:df:84:ca:91:0a:3f:d9:ee:03:b3:
         97:9b:4d:a5:80:b2:0c:28:9e:b0:b7:eb:6b:3b:63:ed:72:b8:
         10:d3:1a:d4:bf:9c:c4:6e:7c:fb:12:8b:ac:d3:49:cd:8f:9f:
         1d:9c:99:3c:3f:2e:9d:70:80:a3:f5:58:64:80:8c:0f:a1:ca:
         22:fc:db:9e:81:f2:39:c9:a9:9f:dc:39:c8:a2:47:27:f7:df:
         49:99:fb:cf:50:7c:29:2a:3c:bb:f3:c7:1b:50:a2:a8:b6:63:
         1c:05:fe:3a:c9:65:bb:ec:ba:22:12:6e:3c:f0:21:cb:c9:9a:
         13:ff:66:11:b4:20:f7:9e:45:b6:94:bc:49:48:cd:25:8f:b4:
         66:70:80:2a:5f:bc:51:7b:a7:1a:d2:f9:1f:27:eb:35:a7:4d:
         29:40:87:72:e0:1c:8b:8d:e1:f9:4a:1f:f3:f8:e9:c6:e1:15:
         c7:c4:d3:25:6e:d5:61:4b:b6:72:16:b8:f4:30:e8:43:77:d5:
         35:a4:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 23:25:49 2025 by rpki-client