This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kNNw7Ibyf4CvAdKNk4hQGmHwCsk.roa
File:                     kNNw7Ibyf4CvAdKNk4hQGmHwCsk.roa (raw, json)
Hash identifier:          QT15dRlg84j3J4ImLeReTkPNXiJV9k6FXMUy0NZrUiQ=
Subject key identifier:   90:D3:70:EC:86:F2:7F:80:AF:01:D2:8D:93:88:50:1A:61:F0:0A:C9
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019C56601652AB441855CBF5E1240935811B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kNNw7Ibyf4CvAdKNk4hQGmHwCsk.roa
Signing time:             Fri 13 Feb 2026 09:41:03 +0000
ROA not before:           Fri 13 Feb 2026 09:41:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213887
IP address blocks:        45.128.235.0/24 maxlen: 24
                          85.31.46.0/24 maxlen: 24
                          85.208.136.0/24 maxlen: 24
                          87.120.92.0/24 maxlen: 24
                          87.120.205.0/24 maxlen: 24
                          87.120.216.0/24 maxlen: 24
                          91.92.21.0/24 maxlen: 24
                          109.206.243.0/24 maxlen: 24
                          178.215.239.0/24 maxlen: 24
                          185.218.138.0/24 maxlen: 24
                          194.113.38.0/24 maxlen: 24
                          194.113.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 02:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:56:60:16:52:ab:44:18:55:cb:f5:e1:24:09:35:81:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Feb 13 09:41:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=90d370ec86f27f80af01d28d9388501a61f00ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:4b:d1:3b:0b:e0:55:94:07:f4:9e:08:58:
                    da:49:8e:64:08:88:94:4d:c0:45:ef:46:c9:c5:82:
                    65:e4:9a:7a:df:2f:18:58:72:4e:da:90:36:d6:f6:
                    8a:60:88:b7:23:60:f5:2e:7d:06:fa:8f:3e:88:bb:
                    fe:65:17:64:5a:37:6d:3b:42:6a:7e:8d:07:83:71:
                    cd:4c:96:cc:10:55:14:52:a4:09:49:04:40:43:7f:
                    ee:ff:ce:24:a5:4b:e8:bf:7b:97:d2:56:80:0e:42:
                    2f:a0:fe:f3:5a:6e:b8:13:6c:5c:02:84:a4:02:80:
                    3f:63:47:4a:7a:08:0c:1f:5c:e9:cb:50:77:8a:cb:
                    f1:ce:0d:4a:a6:d5:5d:cb:fb:15:0f:9c:a4:90:79:
                    b5:9e:b5:8c:bf:34:a0:b8:ec:46:86:9a:9f:b9:54:
                    6b:a3:d6:36:c4:ad:24:93:68:7a:e1:56:50:9f:00:
                    b0:0d:2e:f0:8f:77:2e:49:ad:75:af:cd:91:cf:91:
                    8a:9d:94:cd:ef:a1:38:42:8a:fd:8a:5d:32:ba:aa:
                    89:62:06:88:9c:e1:07:c3:bd:70:f9:16:85:16:f5:
                    a1:fa:5b:44:c4:82:f3:ff:87:76:77:09:07:00:e0:
                    8e:a6:72:a4:46:24:dd:c4:09:a8:08:d1:b2:5d:37:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D3:70:EC:86:F2:7F:80:AF:01:D2:8D:93:88:50:1A:61:F0:0A:C9
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kNNw7Ibyf4CvAdKNk4hQGmHwCsk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.235.0/24
                  85.31.46.0/24
                  85.208.136.0/24
                  87.120.92.0/24
                  87.120.205.0/24
                  87.120.216.0/24
                  91.92.21.0/24
                  109.206.243.0/24
                  178.215.239.0/24
                  185.218.138.0/24
                  194.113.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:bf:c2:75:1e:d3:04:7a:31:f8:83:0a:17:27:d4:0f:2e:e7:
         50:b0:c9:5b:f8:da:a5:d5:7e:3e:30:08:fd:d9:bc:d7:5b:13:
         c3:40:4d:0d:fa:23:14:60:47:f9:fe:aa:ae:67:af:39:fc:b7:
         3d:80:e3:3f:76:22:54:d5:7a:35:4f:43:bc:38:dc:d8:43:df:
         90:0c:a3:38:8c:a0:2e:a8:98:26:05:35:07:7a:d0:93:21:6a:
         64:76:1b:6b:35:15:15:f9:51:e6:0c:86:09:c5:ae:c4:6d:93:
         82:d7:df:4a:a2:fb:80:04:0b:0a:5d:0e:eb:30:16:cb:f0:9b:
         53:b6:d1:28:1b:89:ff:92:2d:43:ce:e0:54:8d:c1:bd:32:3a:
         9d:22:54:0b:54:88:3e:68:cf:37:ef:ea:82:38:55:15:48:79:
         02:c1:a8:96:9e:e2:e8:0e:da:c0:98:5d:61:15:28:59:01:1d:
         16:ca:2b:3d:3e:89:64:f2:03:8f:d7:34:d3:76:62:15:18:07:
         aa:b3:82:6e:97:6a:da:5e:c1:00:5c:48:cd:d9:f9:35:9e:ab:
         6b:f8:41:21:d0:e9:ec:3c:4f:9e:bc:3c:bc:0e:ac:78:88:22:
         fb:d4:e6:95:bb:aa:65:73:69:05:c2:26:f2:49:69:08:8b:31:
         e2:21:cf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 10:45:36 2026 by rpki-client