This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RP0MYwJ9iHKcAVUJQYDceq0Uh50.roa
File:                     RP0MYwJ9iHKcAVUJQYDceq0Uh50.roa (raw, json)
Hash identifier:          r+w8QAFRqzA3eY4GQZ0Dh2rOZF8K+Nq5NCaEDyu1avA=
Subject key identifier:   44:FD:0C:63:02:7D:88:72:9C:01:55:09:41:80:DC:7A:AD:14:87:9D
Certificate issuer:       /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial:       019B30876B447FD144BE6FE1DBC9415A031A
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RP0MYwJ9iHKcAVUJQYDceq0Uh50.roa
Signing time:             Thu 18 Dec 2025 08:15:39 +0000
ROA not before:           Thu 18 Dec 2025 08:15:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209372
IP address blocks:        46.148.209.0/24 maxlen: 24
                          46.148.210.0/24 maxlen: 24
                          46.148.211.0/24 maxlen: 24
                          84.22.151.0/24 maxlen: 24
                          91.204.180.0/24 maxlen: 24
                          91.204.181.0/24 maxlen: 24
                          91.204.182.0/23 maxlen: 23
                          91.204.182.0/24 maxlen: 24
                          91.218.139.0/24 maxlen: 24
                          91.218.176.0/22 maxlen: 24
                          91.218.179.0/24 maxlen: 24
                          91.232.8.0/22 maxlen: 24
                          195.234.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:30:87:6b:44:7f:d1:44:be:6f:e1:db:c9:41:5a:03:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
        Validity
            Not Before: Dec 18 08:15:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44fd0c63027d88729c0155094180dc7aad14879d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:61:bb:eb:fe:32:08:f0:c3:94:6f:19:9f:3e:
                    74:d6:6d:fd:ad:fc:91:89:1a:24:f3:87:00:f9:1e:
                    04:d4:d5:72:2a:59:ab:da:74:dc:e4:36:9b:93:e2:
                    ce:56:7d:ed:ba:39:07:c6:33:6e:e7:13:62:5e:2f:
                    8b:a5:57:7a:28:1a:14:6b:0f:0a:01:17:e4:5f:4b:
                    8d:02:43:0f:e3:7d:4d:77:dc:fd:71:bc:e4:56:cb:
                    70:7c:ab:9a:27:4b:29:1d:cf:57:14:66:e4:c1:4a:
                    d0:16:29:27:f1:4f:1c:e7:d0:7d:6f:d6:9a:b9:27:
                    0f:98:3e:25:28:66:60:8d:1d:0c:9b:39:8a:b5:5d:
                    55:ae:9b:dc:4c:a1:d6:42:0b:11:04:8a:10:aa:0b:
                    b1:55:1e:f6:e7:db:1b:ca:8b:d3:7a:88:93:92:e0:
                    33:59:ac:61:9e:54:00:f4:9c:8c:d6:6c:05:67:c0:
                    e8:8b:51:9c:9d:2d:e4:62:39:4d:10:42:56:ab:50:
                    06:50:30:3b:73:8e:39:b4:8c:95:94:7d:c1:e1:8d:
                    69:4e:ba:19:e1:24:f5:6a:e6:88:ed:84:f8:fa:51:
                    3e:33:cb:73:1e:de:0c:47:83:7f:6a:81:2e:99:8d:
                    e3:c3:68:3a:73:03:99:c6:a5:74:d3:b8:cd:d1:e8:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FD:0C:63:02:7D:88:72:9C:01:55:09:41:80:DC:7A:AD:14:87:9D
            X509v3 Authority Key Identifier:
                keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RP0MYwJ9iHKcAVUJQYDceq0Uh50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.148.209.0-46.148.211.255
                  84.22.151.0/24
                  91.204.180.0/22
                  91.218.139.0/24
                  91.218.176.0/22
                  91.232.8.0/22
                  195.234.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:bf:4c:65:94:94:70:5a:c0:26:0f:8a:45:99:14:b1:4b:a8:
         e2:af:46:f7:e2:66:c0:e3:37:1f:60:fd:ed:d3:a5:99:41:3e:
         93:3f:d5:ab:f7:3d:f6:87:9d:fe:27:a7:aa:1c:d7:12:49:fc:
         8a:07:50:74:22:1f:6e:d7:e2:19:59:78:0e:34:7a:e7:41:3d:
         28:eb:5e:4d:69:ff:f8:06:1e:ba:24:68:a2:ca:ee:1f:54:02:
         a9:a3:12:5f:61:7e:2f:ae:47:29:74:da:8d:84:8f:b6:6c:41:
         9e:9d:bc:02:1c:30:79:19:89:69:eb:8d:04:06:c4:9b:55:c9:
         d0:84:f3:5c:49:f0:90:5f:0e:3c:79:d5:ad:38:bb:5a:1c:a9:
         15:94:6f:fb:9c:0b:a8:34:66:db:6f:7b:27:c6:ed:be:60:5a:
         cc:25:1a:a0:10:c4:b0:67:dd:59:5c:11:25:9c:8f:7c:b0:b7:
         92:c6:c5:e5:09:c8:fd:ba:ae:50:01:14:e2:c0:1b:63:ef:78:
         e3:7d:84:0b:be:73:9b:94:d5:01:48:61:4d:b9:0d:01:fd:3b:
         37:80:5a:bc:04:38:6d:58:75:ac:72:c1:e2:e3:16:eb:6b:3f:
         1d:ee:b0:70:72:62:4e:b1:f9:55:6b:0a:2e:2d:73:ec:de:59:
         52:1c:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 15:01:23 2025 by rpki-client