This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RRaFZPrbAwjL1TnVwvAhGRfy0Eg.roa
File:                     RRaFZPrbAwjL1TnVwvAhGRfy0Eg.roa (raw, json)
Hash identifier:          Jz+oA/sm14qxM0b5hi0yKc2FEFz4/YnBNDjaLvloPPA=
Subject key identifier:   45:16:85:64:FA:DB:03:08:CB:D5:39:D5:C2:F0:21:19:17:F2:D0:48
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       019C52461EEE4ACBCE002EAFCE3281EAAD23
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RRaFZPrbAwjL1TnVwvAhGRfy0Eg.roa
Signing time:             Thu 12 Feb 2026 14:34:13 +0000
ROA not before:           Thu 12 Feb 2026 14:34:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395434
IP address blocks:        138.249.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Feb 2026 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:52:46:1e:ee:4a:cb:ce:00:2e:af:ce:32:81:ea:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Feb 12 14:34:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=45168564fadb0308cbd539d5c2f0211917f2d048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:ed:71:ad:4c:6e:25:63:84:1c:f9:b4:78:
                    ac:c4:00:f8:a4:c8:9e:dc:4c:68:8d:66:2b:09:f9:
                    d0:5d:46:4f:d1:07:3a:8f:ca:e1:27:92:c0:6f:59:
                    8e:ae:35:46:84:67:7d:02:dc:34:fd:c9:4f:51:c3:
                    b7:0a:0b:46:6a:12:2b:be:be:db:82:f6:d5:d2:94:
                    24:69:80:52:a4:3b:74:7d:e1:2e:71:1b:b7:5f:dc:
                    52:75:b6:29:84:ec:f3:44:b5:d3:04:da:0b:e5:98:
                    e5:9b:5d:fb:2c:5b:4c:60:db:21:85:90:1b:ae:6f:
                    7e:69:f5:73:f2:55:18:4c:36:d3:0a:f2:ba:4f:87:
                    11:6d:0b:a8:e9:71:5d:8c:19:ba:50:de:69:c5:d7:
                    0e:4f:53:03:75:6b:8b:c2:d6:05:fc:f1:a0:61:7d:
                    38:fb:5a:f4:26:ba:e9:59:73:cf:ea:75:8e:fc:62:
                    2a:64:47:53:82:c3:51:60:e9:20:00:d5:54:92:ea:
                    f7:71:15:7f:d7:17:7d:70:b9:e0:ea:3d:2f:f2:83:
                    21:48:cc:97:dc:ec:51:4e:fd:e6:cc:8e:6b:8c:58:
                    04:6b:bc:08:69:fd:f8:46:32:18:78:2e:13:10:69:
                    85:71:9e:3c:b8:c0:d2:ce:63:4c:1d:72:a7:61:16:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:16:85:64:FA:DB:03:08:CB:D5:39:D5:C2:F0:21:19:17:F2:D0:48
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RRaFZPrbAwjL1TnVwvAhGRfy0Eg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.249.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:61:0e:81:e4:ba:f7:d5:e8:0d:c7:bd:b7:d5:54:ae:27:
         30:35:3d:9e:f5:8f:26:2f:e5:31:db:ca:5e:81:9f:d6:00:24:
         87:4e:0b:7a:23:8d:7c:ff:ba:2f:4b:b0:99:f8:68:e6:f1:44:
         87:fc:b2:4b:a7:0d:10:57:71:c3:76:5e:c9:b4:74:32:e9:a1:
         c4:af:0c:bb:55:7e:f5:9f:bf:2f:93:2f:d0:cf:29:52:1d:fc:
         4c:b7:40:49:87:50:35:15:cc:8a:cf:5d:3e:de:8f:1f:d9:80:
         f2:21:5f:d0:bf:5c:a9:87:77:35:b5:71:81:f8:80:58:6c:79:
         15:48:d0:b8:dd:f0:5d:61:99:6f:f1:bb:b6:ac:2a:76:03:ca:
         bf:08:b6:70:2b:56:85:9c:97:99:40:45:ad:42:9b:48:d4:1e:
         be:62:39:8a:16:bb:19:5a:e2:7f:4c:0a:b5:09:ba:32:36:fd:
         e1:46:e8:13:88:63:fa:62:f9:dd:4a:ba:99:27:a0:b0:30:13:
         67:96:e1:a8:94:a5:2f:cc:a7:8f:a9:5f:26:50:4c:55:39:84:
         db:6b:1a:83:59:b9:2f:72:8c:ac:5a:26:29:de:12:ff:d1:77:
         b4:93:7a:d1:69:68:d3:b3:9c:d8:76:4f:25:f8:84:4f:89:58:
         fd:cf:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 11:37:32 2026 by rpki-client