This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/neK2XJpGtxENiwluKI1Nc9rcRww.roa
File:                     neK2XJpGtxENiwluKI1Nc9rcRww.roa (raw, json)
Hash identifier:          4JvFz8LvX6hWtb2+k7f5WYEW+8p5Nkh6T42RNRqex7I=
Subject key identifier:   9D:E2:B6:5C:9A:46:B7:11:0D:8B:09:6E:28:8D:4D:73:DA:DC:47:0C
Certificate issuer:       /CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Certificate serial:       019B7B36AAC5902A6D63B842F7EEA04E291C
Authority key identifier: 5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/neK2XJpGtxENiwluKI1Nc9rcRww.roa
Signing time:             Thu 01 Jan 2026 20:18:58 +0000
ROA not before:           Thu 01 Jan 2026 20:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210760
IP address blocks:        178.216.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:aa:c5:90:2a:6d:63:b8:42:f7:ee:a0:4e:29:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
        Validity
            Not Before: Jan  1 20:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9de2b65c9a46b7110d8b096e288d4d73dadc470c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:fd:51:3c:3c:4d:4e:f1:7e:45:16:17:09:
                    75:61:de:ae:11:da:47:87:14:5e:45:2e:27:7b:2d:
                    3b:f5:a8:63:c0:5e:b2:65:9c:56:c0:b2:0a:aa:e3:
                    fe:0c:51:db:fd:a5:b3:ec:fd:13:ce:bc:fe:57:b1:
                    8e:ba:ac:b4:45:98:2f:21:7a:c2:0b:4b:2e:38:e1:
                    24:92:ca:97:cd:f2:8e:2a:0d:12:dd:1e:88:20:d7:
                    88:c9:27:54:24:01:58:26:10:a2:e6:e2:cb:e3:c0:
                    09:41:34:ee:a1:50:fd:3a:ed:ad:a9:14:b8:f3:05:
                    7c:1b:26:55:8d:d9:9a:ee:25:c3:00:68:13:2f:20:
                    41:98:d9:e9:41:d4:ee:65:c1:81:e3:f6:69:9c:55:
                    e7:17:08:36:25:b0:a9:3a:70:46:76:f1:fe:d8:5e:
                    d1:46:86:4a:0f:24:cd:3a:c9:48:c0:ec:49:54:57:
                    e2:06:75:7b:da:db:c9:8a:55:82:0e:77:31:39:b4:
                    46:0d:51:a6:e0:55:b4:3b:a5:12:ff:6a:62:1f:06:
                    07:a2:e0:29:92:79:26:12:b2:fe:22:1d:39:9b:c9:
                    81:fb:5e:66:0d:5d:7e:c9:08:74:a9:b2:ff:9a:c8:
                    7d:5c:ba:b3:98:d7:3d:be:e7:48:4c:18:7e:fe:43:
                    27:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E2:B6:5C:9A:46:B7:11:0D:8B:09:6E:28:8D:4D:73:DA:DC:47:0C
            X509v3 Authority Key Identifier:
                keyid:5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/neK2XJpGtxENiwluKI1Nc9rcRww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.216.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:8d:57:3d:85:33:4b:9c:c8:fe:8f:74:ed:47:1d:82:fb:89:
         ba:72:44:c2:fd:79:1b:41:0c:79:2a:7e:e4:e7:08:48:f8:a5:
         90:3d:6b:fc:93:ac:90:1c:60:c4:64:6b:be:47:cc:87:ff:b2:
         c6:aa:49:da:77:af:35:45:83:bb:14:30:62:34:91:d8:46:f5:
         35:b8:32:47:2d:c5:44:fc:ec:b6:c4:dc:94:3f:a2:b4:87:ce:
         28:48:29:60:9f:0c:5a:68:8f:d3:e8:07:d3:28:28:3f:8f:d5:
         6a:3f:58:d7:d6:e0:ea:44:97:ad:d6:1b:8b:ac:e8:84:06:19:
         19:99:a7:96:f5:af:17:83:fe:a5:4d:64:f3:50:e7:7e:69:1e:
         cd:5a:6d:e2:33:84:21:60:8b:71:6f:6a:93:ee:7f:61:4c:80:
         17:dc:49:c5:dc:17:3e:3c:bb:96:bc:4c:ff:5a:bb:4a:61:9e:
         cf:d0:ea:fa:6a:bb:ef:8f:12:d7:19:66:f5:d9:80:d4:a7:f3:
         ad:6e:af:11:c6:20:03:66:fe:87:ad:30:68:ea:00:bf:14:db:
         86:2b:77:6f:b0:a6:18:ee:1e:35:42:f1:2d:e3:ac:bf:91:01:
         3d:f3:eb:dd:c1:e5:29:7d:e2:72:6b:5a:f2:bc:c0:a2:95:2d:
         86:96:dd:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NqrFkCptY7hC9+6gTikcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjYyYmU1ZDEyZGZkYmUyNDc5ZTNhMjA3MTNmNDU3ZTkz
ZjA2OWIwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGUyYjY1YzlhNDZiNzExMGQ4YjA5NmUyODhkNGQ3M2RhZGM0NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWP9UTw8TU7xfkUWFwl1Yd6uEdpH
hxReRS4ney079ahjwF6yZZxWwLIKquP+DFHb/aWz7P0Tzrz+V7GOuqy0RZgvIXrC
C0suOOEkksqXzfKOKg0S3R6IINeIySdUJAFYJhCi5uLL48AJQTTuoVD9Ou2tqRS4
8wV8GyZVjdma7iXDAGgTLyBBmNnpQdTuZcGB4/ZpnFXnFwg2JbCpOnBGdvH+2F7R
RoZKDyTNOslIwOxJVFfiBnV72tvJilWCDncxObRGDVGm4FW0O6US/2piHwYHouAp
knkmErL+Ih05m8mB+15mDV1+yQh0qbL/msh9XLqzmNc9vudITBh+/kMnqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ3itlyaRrcRDYsJbiiNTXPa3EcMMB8GA1UdIwQY
MBaAFF4mK+XRLf2+JHnjogcT9FfpPwabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlZcjVkRXRfYjRrZWVPaUJ4UDBWLWtfQnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82NTBjNjQtMjc1ZC00NGUxLTg0ZGMt
ZjViODFjY2YwOWNkLzEvbmVLMlhKcEd0eEVOaXdsdUtJMU5jOXJjUnd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC82NTBjNjQtMjc1ZC00NGUxLTg0ZGMtZjViODFjY2YwOWNk
LzEvWGlZcjVkRXRfYjRrZWVPaUJ4UDBWLWtfQnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstgPMA0G
CSqGSIb3DQEBCwUAA4IBAQBxjVc9hTNLnMj+j3TtRx2C+4m6ckTC/XkbQQx5Kn7k
5whI+KWQPWv8k6yQHGDEZGu+R8yH/7LGqknad681RYO7FDBiNJHYRvU1uDJHLcVE
/Oy2xNyUP6K0h84oSClgnwxaaI/T6AfTKCg/j9VqP1jX1uDqRJet1huLrOiEBhkZ
maeW9a8Xg/6lTWTzUOd+aR7NWm3iM4QhYItxb2qT7n9hTIAX3EnF3Bc+PLuWvEz/
WrtKYZ7P0Or6arvvjxLXGWb12YDUp/Otbq8RxiADZv6HrTBo6gC/FNuGK3dvsKYY
7h41QvEt46y/kQE98+vdweUpfeJya1ryvMCilS2Glt0R
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:07 2026 by rpki-client