This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/61nrJEHFH57EL2dzm9nur-S_azE.roa
File:                     61nrJEHFH57EL2dzm9nur-S_azE.roa (raw, json)
Hash identifier:          E1Dg8zQBDEy6x5x2XOz0O0CGWqS7nIL1BvYrVsKX5+8=
Subject key identifier:   EB:59:EB:24:41:C5:1F:9E:C4:2F:67:73:9B:D9:EE:AF:E4:BF:6B:31
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019C4BEC28C31FE30AA1C475F6CCAB667001
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/61nrJEHFH57EL2dzm9nur-S_azE.roa
Signing time:             Wed 11 Feb 2026 08:58:13 +0000
ROA not before:           Wed 11 Feb 2026 08:58:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        45.66.228.0/24 maxlen: 24
                          45.66.231.0/24 maxlen: 24
                          45.89.247.0/24 maxlen: 24
                          45.141.158.0/24 maxlen: 24
                          81.161.238.0/24 maxlen: 24
                          85.217.130.0/23 maxlen: 24
                          87.120.87.0/24 maxlen: 24
                          87.120.126.0/24 maxlen: 24
                          87.120.166.0/24 maxlen: 24
                          87.121.60.0/23 maxlen: 23
                          87.121.165.0/24 maxlen: 24
                          92.119.196.0/23 maxlen: 24
                          92.249.50.0/24 maxlen: 24
                          93.123.109.0/24 maxlen: 24
                          94.156.238.0/24 maxlen: 24
                          185.218.84.0/22 maxlen: 24
                          185.222.160.0/24 maxlen: 24
                          193.25.216.0/24 maxlen: 24
                          194.55.186.0/24 maxlen: 24
                          194.55.224.0/24 maxlen: 24
                          194.169.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 15:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:4b:ec:28:c3:1f:e3:0a:a1:c4:75:f6:cc:ab:66:70:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Feb 11 08:58:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb59eb2441c51f9ec42f67739bd9eeafe4bf6b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:d3:6f:5d:f1:54:56:93:35:22:10:d7:eb:
                    ba:7d:40:78:19:19:3f:1d:96:51:2b:75:f7:02:a6:
                    1f:8b:b7:65:3f:0c:37:48:f4:7f:78:2a:74:2c:ce:
                    3a:ad:6e:86:e9:cb:d4:1e:be:9d:f4:a4:4f:9d:df:
                    b4:53:08:1f:a4:91:07:b4:7f:1e:bb:d5:93:3d:d7:
                    30:77:98:0b:b6:88:60:ef:77:f6:26:ed:ca:18:d8:
                    ec:87:fa:6d:a9:c4:6c:d7:a6:29:ee:cf:da:a2:ca:
                    68:d9:31:91:f4:e9:bc:4a:24:eb:ad:ad:84:ec:63:
                    14:24:98:dd:44:a5:14:f0:2b:d7:55:0a:67:42:ff:
                    79:e2:99:2d:50:7f:ab:c2:47:a7:54:d8:d7:76:58:
                    48:14:d5:1f:a8:67:c5:26:ec:c0:09:df:d7:d1:b6:
                    53:fa:a2:81:21:65:9b:60:bd:82:0d:4b:bf:71:e2:
                    2b:4f:09:1a:68:f4:5f:66:92:33:d8:fc:a1:7c:99:
                    e2:62:0d:94:27:b4:ac:17:42:8d:96:a2:10:b1:30:
                    95:17:ed:10:c7:eb:28:24:33:52:c5:61:1a:7f:11:
                    58:6f:71:b9:d3:b2:89:c7:15:30:3f:70:5b:d1:0a:
                    30:df:21:4e:98:a4:4f:bf:1a:c3:93:07:7c:a1:b6:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:59:EB:24:41:C5:1F:9E:C4:2F:67:73:9B:D9:EE:AF:E4:BF:6B:31
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/61nrJEHFH57EL2dzm9nur-S_azE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.228.0/24
                  45.66.231.0/24
                  45.89.247.0/24
                  45.141.158.0/24
                  81.161.238.0/24
                  85.217.130.0/23
                  87.120.87.0/24
                  87.120.126.0/24
                  87.120.166.0/24
                  87.121.60.0/23
                  87.121.165.0/24
                  92.119.196.0/23
                  92.249.50.0/24
                  93.123.109.0/24
                  94.156.238.0/24
                  185.218.84.0/22
                  185.222.160.0/24
                  193.25.216.0/24
                  194.55.186.0/24
                  194.55.224.0/24
                  194.169.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ae:c6:2d:07:5f:4a:ab:21:b2:3f:49:ab:26:cf:c6:7b:55:
         12:f4:32:e9:fd:9e:6d:a7:a8:21:bd:7b:35:b9:2a:e9:b6:1f:
         9e:ed:5c:0a:f0:8e:38:62:08:d0:72:53:af:e1:06:1d:f1:d5:
         72:6c:de:14:b9:a3:cd:c6:0c:7d:c3:af:77:c7:94:d6:5c:a4:
         b9:2b:aa:e6:37:6a:92:6a:52:51:01:dd:67:84:35:75:72:79:
         a9:b6:4a:1a:cc:9b:ca:f3:89:f9:ef:5e:e3:b6:be:ef:84:f3:
         4b:41:9a:ca:6e:a8:94:9e:4f:7c:43:c5:09:8f:0c:8f:91:8c:
         48:bb:f9:4d:6e:18:93:8c:e1:cc:db:26:96:db:51:89:f0:be:
         51:bd:f2:70:1a:e2:98:f7:33:65:ac:d3:79:fc:49:37:d5:45:
         81:ac:b4:3b:d0:61:5d:a5:8c:a7:e9:fe:b6:2d:2a:76:0c:f1:
         d6:9f:8c:23:0e:4d:96:77:99:8a:91:8f:1e:1a:93:79:f6:40:
         34:9e:ba:6c:42:95:df:0b:e2:67:6c:13:16:0d:2e:3e:6d:8c:
         55:c5:da:a7:74:da:4b:fe:67:34:b7:5a:c0:32:4f:54:cd:7f:
         c6:8c:e8:ff:81:57:36:70:87:3b:82:35:14:31:f5:13:a1:68:
         a9:21:69:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 19:35:18 2026 by rpki-client