This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/nNA82N_hjVXNM_yczV3h8R-2MFg.roa
File:                     nNA82N_hjVXNM_yczV3h8R-2MFg.roa (raw, json)
Hash identifier:          O4Af+6D81H3k5D2s05YzXco56fg23wfzXj6Epvc/dd0=
Subject key identifier:   9C:D0:3C:D8:DF:E1:8D:55:CD:33:FC:9C:CD:5D:E1:F1:1F:B6:30:58
Certificate issuer:       /CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
Certificate serial:       019B797F076E1BDDA11698A8C13DB65094F7
Authority key identifier: 93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/nNA82N_hjVXNM_yczV3h8R-2MFg.roa
Signing time:             Thu 01 Jan 2026 12:18:46 +0000
ROA not before:           Thu 01 Jan 2026 12:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38932
IP address blocks:        213.231.128.0/19 maxlen: 19
                          213.231.128.0/22 maxlen: 22
                          213.231.132.0/22 maxlen: 22
                          213.231.136.0/22 maxlen: 22
                          213.231.140.0/22 maxlen: 22
                          213.231.144.0/22 maxlen: 22
                          213.231.148.0/22 maxlen: 22
                          213.231.152.0/22 maxlen: 22
                          213.231.156.0/22 maxlen: 22
                          213.231.160.0/19 maxlen: 19
                          213.231.160.0/22 maxlen: 22
                          213.231.164.0/22 maxlen: 22
                          213.231.168.0/22 maxlen: 22
                          213.231.172.0/22 maxlen: 22
                          213.231.176.0/22 maxlen: 22
                          213.231.180.0/22 maxlen: 22
                          213.231.184.0/22 maxlen: 22
                          213.231.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:07:6e:1b:dd:a1:16:98:a8:c1:3d:b6:50:94:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a3fa4b78e50f4af97be285e2e910a5d1edc639
        Validity
            Not Before: Jan  1 12:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9cd03cd8dfe18d55cd33fc9ccd5de1f11fb63058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:4f:df:7b:b9:f5:c9:55:54:ad:79:de:b5:
                    d8:5b:a1:84:70:0f:34:8a:b1:14:54:91:9b:bc:54:
                    da:04:a0:6d:20:e0:eb:0b:e9:42:f2:a9:30:c7:aa:
                    b0:c8:02:77:48:27:d6:4d:30:2f:d4:0f:74:38:05:
                    a1:df:08:56:d1:3c:9d:2b:68:af:69:5a:42:a0:ea:
                    b9:96:fc:35:a3:26:59:1c:a3:37:c7:4b:06:d5:eb:
                    be:06:89:22:a8:82:97:05:27:22:de:70:03:ed:62:
                    b0:ec:a1:60:93:55:f0:5b:7a:1a:1f:1a:7d:61:ee:
                    49:29:d4:b3:f2:4a:3f:46:f3:46:74:73:0c:64:ed:
                    64:d4:1e:d2:44:b9:5b:b8:63:cc:71:f8:21:a9:85:
                    16:15:7c:25:5c:91:37:09:6c:75:88:77:5d:ae:d1:
                    c2:2b:30:2a:da:f9:37:ff:87:60:38:f8:46:08:2c:
                    1d:c5:c0:65:7c:41:73:96:bb:48:bc:c8:90:e3:5c:
                    bd:50:c3:ec:70:8f:fd:23:0a:53:8d:b9:ec:08:aa:
                    9f:87:6a:82:0b:b8:8a:28:11:5e:9b:52:51:17:07:
                    7d:c3:21:3a:8f:ad:bc:48:36:b1:b0:bb:99:42:66:
                    53:48:d5:e2:95:36:7b:7a:a1:48:02:5d:1a:3c:b8:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D0:3C:D8:DF:E1:8D:55:CD:33:FC:9C:CD:5D:E1:F1:1F:B6:30:58
            X509v3 Authority Key Identifier:
                keyid:93:A3:FA:4B:78:E5:0F:4A:F9:7B:E2:85:E2:E9:10:A5:D1:ED:C6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6P6S3jlD0r5e-KF4ukQpdHtxjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/nNA82N_hjVXNM_yczV3h8R-2MFg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b52ae1-09a6-4458-9d06-0b6908737d7f/1/k6P6S3jlD0r5e-KF4ukQpdHtxjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.231.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:fe:64:43:2b:17:c8:af:f9:32:05:fe:53:15:db:7a:53:83:
         df:30:08:b8:c8:73:ca:8a:4f:ee:78:cb:a6:13:6c:0d:3d:39:
         d2:a2:03:86:3c:8d:31:0e:1f:69:ae:aa:d9:23:4e:25:b5:0c:
         0c:ff:e2:c2:42:68:95:4a:07:a4:ad:f9:0e:d6:02:0a:83:17:
         ac:86:f8:71:6c:a9:7b:0c:9f:6f:2b:fa:b6:4d:8e:b5:05:14:
         a2:79:c2:f1:a7:e9:7d:47:e6:dd:ad:6b:9f:e0:d4:cf:0d:27:
         ec:9d:55:ac:56:60:33:82:1b:46:d0:3e:76:5d:5e:bb:73:24:
         07:60:20:20:18:b2:94:29:1e:08:64:15:ed:7e:6b:79:8b:4b:
         54:84:d3:94:33:02:1a:a8:68:45:4f:a9:15:38:95:01:74:18:
         7d:8e:e4:91:1f:8b:6b:9b:b8:63:32:83:8f:1f:1f:e7:53:07:
         e6:2b:6e:c0:db:c2:54:da:19:96:68:23:d9:cf:4a:18:af:f4:
         a7:94:b2:84:ca:a9:4c:c5:3a:b5:18:5a:1f:8f:e7:4a:7a:39:
         01:bc:d9:b1:eb:c8:dc:4b:a7:5c:7e:f0:00:a3:74:97:6b:75:
         19:13:b7:9f:9d:4b:d2:68:a4:b5:75:17:de:ae:94:6b:71:55:
         35:97:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:01 2026 by rpki-client