This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/Ej7B9J_rVO2zcIf5hAYu1ObfUcQ.roa
File:                     Ej7B9J_rVO2zcIf5hAYu1ObfUcQ.roa (raw, json)
Hash identifier:          V2zmAUg3oulZRaXhgL53OAZLNVTSebC9zUoEWgNUVyA=
Subject key identifier:   12:3E:C1:F4:9F:EB:54:ED:B3:70:87:F9:84:06:2E:D4:E6:DF:51:C4
Certificate issuer:       /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial:       019C42FA68BA502ED963B4EB15912A91C0AE
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/Ej7B9J_rVO2zcIf5hAYu1ObfUcQ.roa
Signing time:             Mon 09 Feb 2026 15:17:12 +0000
ROA not before:           Mon 09 Feb 2026 15:17:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25198
IP address blocks:        194.59.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:fa:68:ba:50:2e:d9:63:b4:eb:15:91:2a:91:c0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
        Validity
            Not Before: Feb  9 15:17:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=123ec1f49feb54edb37087f984062ed4e6df51c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:ab:c5:5a:84:34:fd:b9:7e:6d:2a:93:5c:
                    08:1f:91:5c:53:38:2e:35:7c:91:dc:0a:21:43:a9:
                    85:ca:38:bd:36:97:be:c0:82:03:64:71:08:da:86:
                    77:0f:46:31:bc:7a:ae:8e:0b:83:1f:e9:cf:2c:59:
                    5c:ec:26:d1:67:a5:6c:e5:38:cb:88:6b:e2:c6:10:
                    4b:32:1a:68:92:35:c5:86:f4:58:81:35:08:75:cf:
                    28:09:3e:25:35:ab:09:63:ff:ee:9e:ea:98:7d:37:
                    73:7d:5e:e9:de:90:a5:b9:df:4b:1a:70:c6:ef:95:
                    80:72:9f:14:44:84:40:99:e6:65:a9:77:31:18:cb:
                    a5:7b:64:68:28:57:70:7d:49:2f:ca:33:a1:4d:e3:
                    59:60:39:df:c5:9e:02:b1:a1:e1:57:06:3c:78:99:
                    3d:f8:02:3e:21:9c:cc:23:dd:1e:dc:5c:dc:be:e4:
                    dd:f9:85:ab:61:64:ae:68:a7:63:fa:89:f8:bb:dd:
                    17:2d:f3:3b:9b:8c:51:97:e7:d4:3f:5c:52:e6:f9:
                    75:b8:04:61:f4:cb:c3:1c:a5:74:a0:f6:63:c5:8d:
                    14:99:c1:25:e9:12:f9:4e:2a:b3:7e:68:93:e8:ee:
                    f1:c5:19:99:f7:37:0b:5b:13:9b:ac:e6:5e:39:ff:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3E:C1:F4:9F:EB:54:ED:B3:70:87:F9:84:06:2E:D4:E6:DF:51:C4
            X509v3 Authority Key Identifier:
                keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/Ej7B9J_rVO2zcIf5hAYu1ObfUcQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:16:84:74:16:b7:08:9c:a2:ed:69:e3:59:f6:91:b6:0b:0b:
         1b:da:80:0f:b0:1b:d1:af:73:e3:7f:a9:aa:00:fc:8e:6a:ad:
         10:5a:c7:3b:bf:59:62:fe:14:96:a0:8f:d9:db:57:45:fb:4e:
         a1:9c:4f:82:aa:dc:04:3c:66:d8:e4:2f:ae:e7:ee:cc:44:76:
         d4:3e:65:b9:59:07:7e:5d:b9:b5:78:73:d7:c6:84:34:8e:3b:
         79:2e:08:18:e3:56:b2:2b:37:87:27:19:67:a0:aa:ad:e5:a2:
         25:59:6c:25:19:0c:40:64:22:d2:bc:e3:0a:de:e8:b3:e6:d7:
         f2:95:1c:49:59:2c:29:ba:88:48:1b:37:61:c0:99:bd:ac:06:
         16:d1:fc:6f:e9:9e:c1:7a:43:4d:c3:8f:c6:11:5e:d8:69:48:
         fc:61:a1:93:a1:98:b4:04:9b:47:86:53:56:8f:53:33:9a:88:
         fb:2f:c5:b8:eb:12:fc:6e:d6:18:30:a3:6f:04:7a:01:d9:a9:
         aa:8a:be:57:cb:d9:b2:fb:a3:26:5c:83:f1:e1:51:2e:e6:d2:
         d5:dd:0e:38:e6:c5:25:30:52:ea:2e:41:37:23:7c:c7:42:2b:
         6f:20:f7:0b:39:7e:09:4b:83:4f:8e:6f:c9:56:95:2c:ee:f2:
         b6:c7:08:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 20:04:05 2026 by rpki-client