This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/rjjSoAat_n07PoQnlpP54238J18.roa
File:                     rjjSoAat_n07PoQnlpP54238J18.roa (raw, json)
Hash identifier:          8lMbg8iLAkX/M5jc8c3TgyGl0DahY6oK1llhi2qDKko=
Subject key identifier:   AE:38:D2:A0:06:AD:FE:7D:3B:3E:84:27:96:93:F9:E3:6D:FC:27:5F
Certificate issuer:       /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial:       019B76EB06A13293EC31ECA16E6CD1146335
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/rjjSoAat_n07PoQnlpP54238J18.roa
Signing time:             Thu 01 Jan 2026 00:17:52 +0000
ROA not before:           Thu 01 Jan 2026 00:17:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8899
IP address blocks:        46.245.216.0/21 maxlen: 21
                          87.192.128.0/18 maxlen: 24
                          94.31.64.0/18 maxlen: 23
                          94.31.67.0/24 maxlen: 24
                          94.31.68.0/22 maxlen: 22
                          94.31.72.0/22 maxlen: 22
                          94.31.80.0/20 maxlen: 20
                          94.31.92.0/23 maxlen: 23
                          94.31.94.0/23 maxlen: 23
                          94.31.96.0/20 maxlen: 20
                          94.31.108.0/22 maxlen: 22
                          94.31.112.0/23 maxlen: 23
                          94.31.114.0/23 maxlen: 23
                          94.31.116.0/22 maxlen: 22
                          150.5.0.0/18 maxlen: 24
                          185.7.196.0/22 maxlen: 22
                          185.22.44.0/22 maxlen: 22
                          185.22.44.0/24 maxlen: 24
                          185.22.45.0/24 maxlen: 24
                          185.22.140.0/22 maxlen: 22
                          185.113.120.0/22 maxlen: 22
                          185.158.40.0/22 maxlen: 22
                          185.158.41.0/24 maxlen: 24
                          2a00:1f38::/32 maxlen: 32
                          2a00:6020::/32 maxlen: 32
                          2a00:6020:0:21::/64 maxlen: 64
                          2a00:61e0::/32 maxlen: 32
                          2a03:fc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:06:a1:32:93:ec:31:ec:a1:6e:6c:d1:14:63:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
        Validity
            Not Before: Jan  1 00:17:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ae38d2a006adfe7d3b3e84279693f9e36dfc275f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:9f:50:b5:77:5a:30:cd:97:eb:7c:75:07:
                    fb:85:81:14:a1:92:dc:a3:5f:1b:d4:0f:26:49:78:
                    01:e0:33:b4:0f:0b:d2:e8:35:ed:e9:29:2e:8e:00:
                    66:54:f0:8a:d3:06:21:a4:a5:1a:41:78:ae:3d:5b:
                    0d:df:4e:ec:8f:40:b2:13:ee:f3:15:4c:41:59:9c:
                    72:69:1f:ae:f9:11:4a:88:f4:4c:23:20:ca:26:30:
                    13:ff:dd:99:39:f9:2c:92:f4:03:6f:6a:7f:f6:e2:
                    df:d0:dd:95:cf:c0:20:19:93:3f:c1:84:c7:74:d3:
                    1a:0c:d1:77:dc:4e:0b:7f:49:11:cc:d7:24:42:36:
                    63:42:eb:6a:4d:ec:96:b0:b4:c9:1f:26:c4:25:24:
                    62:90:b2:be:51:da:f4:87:2e:de:11:36:61:6a:d8:
                    77:86:60:ea:b5:c7:ea:97:bf:9b:a8:d1:97:33:30:
                    89:7e:c3:0a:dd:1e:ab:9f:11:96:02:13:88:93:66:
                    87:f3:77:e1:f6:2d:54:4a:45:01:0b:fe:7f:70:00:
                    6a:10:da:7a:fe:a0:5b:0c:d9:8e:40:06:6b:26:84:
                    92:a2:78:d1:9c:b9:88:f3:30:97:6a:30:e7:28:f6:
                    7e:0b:9e:12:b5:51:d1:01:38:1b:d5:f2:a6:20:9a:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:38:D2:A0:06:AD:FE:7D:3B:3E:84:27:96:93:F9:E3:6D:FC:27:5F
            X509v3 Authority Key Identifier:
                keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/rjjSoAat_n07PoQnlpP54238J18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.245.216.0/21
                  87.192.128.0/18
                  94.31.64.0/18
                  150.5.0.0/18
                  185.7.196.0/22
                  185.22.44.0/22
                  185.22.140.0/22
                  185.113.120.0/22
                  185.158.40.0/22
                IPv6:
                  2a00:1f38::/32
                  2a00:6020::/32
                  2a00:61e0::/32
                  2a03:fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:ed:2c:52:83:22:41:9f:44:64:ab:17:f6:c3:8b:dd:b6:16:
         d8:ba:1f:7e:5a:56:eb:02:3c:98:88:65:75:03:3c:d1:e2:d8:
         9c:80:63:f1:78:b0:3d:3a:5b:e4:64:7a:90:c1:34:b3:c0:60:
         9e:14:2f:ef:6f:5f:c2:b7:ec:8d:52:01:5a:0f:d4:8c:47:b0:
         f2:7e:53:31:66:3d:00:28:fa:f0:5d:19:9d:d3:9b:64:53:13:
         8b:f3:87:61:81:53:29:ab:0d:72:4e:c9:39:e0:57:38:1e:08:
         b7:58:9d:e9:37:c7:a0:00:d1:d9:88:18:23:e7:1c:fb:1e:c3:
         a6:5f:f3:dd:54:9a:62:59:8b:cb:6f:4d:dc:6c:f4:65:f6:6a:
         d4:eb:99:29:2d:9f:d1:14:53:a4:17:64:67:fb:e3:0d:26:fd:
         9c:1b:73:fe:c9:79:e4:17:c8:f1:ef:08:fb:07:2a:16:4e:95:
         ea:41:4c:8a:c1:7d:82:9f:f9:59:76:c0:d0:4d:15:bd:87:42:
         46:0b:5c:e2:70:8d:22:c4:0e:04:4b:ec:39:32:5d:f1:93:4c:
         9c:4c:b8:cf:33:e2:65:63:e7:af:c3:67:5d:5d:e4:9a:55:4f:
         33:55:f8:63:40:eb:3d:8b:37:f5:ef:9d:20:b7:ea:2e:e8:49:
         26:3c:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:46:24 2026 by rpki-client