This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wOU9aMdER98sPekS4MEPyEOSZUM.roa
File:                     wOU9aMdER98sPekS4MEPyEOSZUM.roa (raw, json)
Hash identifier:          fyP1+WfbQMjBodG1sjfQbuHrnmZod0aoG3fzD6DGcYA=
Subject key identifier:   C0:E5:3D:68:C7:44:47:DF:2C:3D:E9:12:E0:C1:0F:C8:43:92:65:43
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       019A822E831C5197BD6E6B9A248BFEF8B629
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wOU9aMdER98sPekS4MEPyEOSZUM.roa
Signing time:             Fri 14 Nov 2025 11:44:37 +0000
ROA not before:           Fri 14 Nov 2025 11:44:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42431
IP address blocks:        46.233.0.0/19 maxlen: 24
                          46.233.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:82:2e:83:1c:51:97:bd:6e:6b:9a:24:8b:fe:f8:b6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Nov 14 11:44:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c0e53d68c74447df2c3de912e0c10fc843926543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:94:60:03:d9:3a:48:61:36:e7:44:9e:a7:1f:
                    09:f4:93:77:81:05:1e:a2:0d:9b:ec:2b:00:b5:0e:
                    c2:16:34:9f:df:18:3f:b5:5d:60:2b:e7:db:5a:1c:
                    44:4a:9e:dc:e1:e6:3e:3f:fb:e5:e7:8a:5f:2e:fd:
                    3f:e2:0d:11:4d:f8:24:d6:3a:8a:80:97:9b:68:f0:
                    d7:45:ae:65:9a:a0:e6:02:22:95:a3:84:ae:31:d1:
                    53:01:88:f5:92:34:a1:f3:a7:26:b9:5d:72:71:54:
                    93:c6:b0:eb:88:f8:2f:1a:cf:08:f7:4e:5a:12:65:
                    31:a6:7f:a5:75:73:62:63:e2:bb:c7:3d:73:f8:fb:
                    8d:72:47:0f:9e:94:c4:4d:34:5f:12:f7:46:12:3e:
                    a6:1d:00:dd:08:f4:a7:3e:99:ce:17:1c:f3:05:1e:
                    4f:58:1b:cb:e8:cb:71:db:af:52:38:bf:71:c1:93:
                    45:e7:ba:25:a8:5a:c8:e4:b3:65:d8:20:dc:6f:59:
                    79:0f:45:4e:c5:bb:1f:83:38:4a:41:18:92:cf:83:
                    f4:c8:fe:54:67:39:6c:9b:53:07:05:10:67:13:f5:
                    16:75:73:77:79:d7:bc:a0:5d:cc:09:58:13:ab:7a:
                    2c:c0:f9:f7:73:a2:16:f2:e3:7a:fe:a4:ca:0a:67:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E5:3D:68:C7:44:47:DF:2C:3D:E9:12:E0:C1:0F:C8:43:92:65:43
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/wOU9aMdER98sPekS4MEPyEOSZUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.233.0.0/19
                  46.233.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:b1:ed:3c:85:97:88:ef:e6:c4:62:73:46:86:b0:3d:c2:
         13:29:03:7a:eb:ea:f1:9b:e9:e0:c8:00:1b:de:65:27:40:dd:
         fd:c6:a7:a2:6d:6e:12:80:5e:cc:e1:37:ce:6c:22:9a:84:1f:
         6a:a7:91:44:22:13:1d:a6:5d:b1:75:2f:0e:2a:68:2a:f1:e2:
         1e:f6:a2:60:06:b8:51:d8:b6:63:ff:e4:7a:b7:d8:d2:a8:69:
         97:0e:97:8c:86:44:62:6e:1b:05:5c:c1:c7:48:74:b0:62:5b:
         47:80:a8:7f:e4:fd:bf:e4:5b:2e:42:72:0f:dd:53:d5:74:8a:
         65:3a:3f:26:71:06:39:9e:62:93:d6:f9:5f:28:a5:c0:68:f2:
         3b:e2:f4:96:50:8c:25:2e:31:e4:ec:07:f3:42:89:72:40:c3:
         ee:64:45:95:c8:48:e7:20:8c:0b:7b:bb:04:aa:e1:d0:57:b8:
         66:7e:87:b8:f3:55:f6:2d:52:1b:c5:bf:79:82:8b:5b:b3:58:
         5f:4c:79:c0:13:7d:97:ed:86:c2:df:c6:dd:fb:a0:c9:98:82:
         3f:f6:48:01:9d:dc:8d:97:df:b6:88:5a:fe:c7:b6:72:be:0f:
         45:38:d5:c2:70:9f:ec:b4:78:0b:1e:da:e5:d9:8b:89:f1:43:
         4d:73:c6:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZqCLoMcUZe9bmuaJIv++LYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1
ZDU2ZjUwHhcNMjUxMTE0MTE0NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGU1M2Q2OGM3NDQ0N2RmMmMzZGU5MTJlMGMxMGZjODQzOTI2NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZRgA9k6SGE250Sepx8J9JN3gQUe
og2b7CsAtQ7CFjSf3xg/tV1gK+fbWhxESp7c4eY+P/vl54pfLv0/4g0RTfgk1jqK
gJebaPDXRa5lmqDmAiKVo4SuMdFTAYj1kjSh86cmuV1ycVSTxrDriPgvGs8I905a
EmUxpn+ldXNiY+K7xz1z+PuNckcPnpTETTRfEvdGEj6mHQDdCPSnPpnOFxzzBR5P
WBvL6Mtx269SOL9xwZNF57olqFrI5LNl2CDcb1l5D0VOxbsfgzhKQRiSz4P0yP5U
Zzlsm1MHBRBnE/UWdXN3ede8oF3MCVgTq3oswPn3c6IW8uN6/qTKCmc1pwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMDlPWjHREffLD3pEuDBD8hDkmVDMB8GA1UdIwQY
MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt
M2MxNmZmODQxYWIyLzEvd09VOWFNZEVSOThzUGVrUzRNRVB5RU9TWlVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy
LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLukAAwQB
LukkMA0GCSqGSIb3DQEBCwUAA4IBAQB+N7HtPIWXiO/mxGJzRoawPcITKQN66+rx
m+ngyAAb3mUnQN39xqeibW4SgF7M4TfObCKahB9qp5FEIhMdpl2xdS8OKmgq8eIe
9qJgBrhR2LZj/+R6t9jSqGmXDpeMhkRibhsFXMHHSHSwYltHgKh/5P2/5FsuQnIP
3VPVdIplOj8mcQY5nmKT1vlfKKXAaPI74vSWUIwlLjHk7AfzQolyQMPuZEWVyEjn
IIwLe7sEquHQV7hmfoe481X2LVIbxb95gotbs1hfTHnAE32X7YbC38bd+6DJmII/
9kgBndyNl9+2iFr+x7Zyvg9FONXCcJ/stHgLHtrl2YuJ8UNNc8aV
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:07:09 2025 by rpki-client