This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/_rvy-296w0a-j-Nw33bBfHPQ78Q.roa
File:                     _rvy-296w0a-j-Nw33bBfHPQ78Q.roa (raw, json)
Hash identifier:          Bg8gLL5anRmVsyv6lsSlg5Xf04g+qeE2nvlaXoMSo6g=
Subject key identifier:   FE:BB:F2:FB:6F:7A:C3:46:BE:8F:E3:70:DF:76:C1:7C:73:D0:EF:C4
Certificate issuer:       /CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
Certificate serial:       019B7834B0BD12F0CE7BD687A52F1F554019
Authority key identifier: 79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/_rvy-296w0a-j-Nw33bBfHPQ78Q.roa
Signing time:             Thu 01 Jan 2026 06:17:57 +0000
ROA not before:           Thu 01 Jan 2026 06:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216293
IP address blocks:        185.208.202.0/24 maxlen: 24
                          212.46.60.0/24 maxlen: 24
                          2a13:d9c0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:b0:bd:12:f0:ce:7b:d6:87:a5:2f:1f:55:40:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bd5372e1e19d05beda353bd6a15bdd39291fa4
        Validity
            Not Before: Jan  1 06:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=febbf2fb6f7ac346be8fe370df76c17c73d0efc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:f6:04:ad:1b:95:d1:fa:3f:c7:ec:67:56:
                    c5:16:3e:d8:88:a9:f9:eb:66:f4:ca:5b:b5:20:98:
                    c1:74:e2:e5:df:a6:f4:aa:8c:70:26:6c:e2:cb:0c:
                    b6:00:b2:72:16:fa:40:d2:87:ac:f9:e1:8b:65:a7:
                    59:08:e8:9a:e2:ef:7e:b3:43:3f:95:21:6e:8c:87:
                    73:bd:5c:3f:8c:ea:11:1d:b7:f0:1c:4d:81:dd:25:
                    0e:d1:a7:55:40:3c:b1:40:25:a0:fe:b8:4d:86:9d:
                    84:0a:e5:88:1a:08:da:69:d9:8f:5c:7d:6d:5b:b2:
                    9f:1d:d7:67:6b:38:23:f9:32:23:dd:93:b3:e6:a8:
                    1b:05:73:95:8b:d5:8b:0b:61:37:d9:02:c2:67:3f:
                    ca:a8:7b:41:2c:47:b5:f5:55:3b:5c:ff:b3:92:0a:
                    c9:d0:0e:b0:94:b9:2b:b8:49:62:c1:d6:91:f6:56:
                    cb:e3:7c:ff:f4:03:57:54:04:ea:56:85:09:ee:6e:
                    22:6b:51:e9:f5:bc:07:b6:f7:2e:40:a3:c9:fc:04:
                    af:47:f1:ad:f7:f2:01:02:de:0b:47:bb:16:27:29:
                    de:28:dc:0a:90:02:ea:64:86:24:17:4d:3d:7b:20:
                    30:1d:90:f4:84:a0:45:f2:c8:a4:c9:94:f7:1b:22:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BB:F2:FB:6F:7A:C3:46:BE:8F:E3:70:DF:76:C1:7C:73:D0:EF:C4
            X509v3 Authority Key Identifier:
                keyid:79:BD:53:72:E1:E1:9D:05:BE:DA:35:3B:D6:A1:5B:DD:39:29:1F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb1TcuHhnQW-2jU71qFb3TkpH6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/_rvy-296w0a-j-Nw33bBfHPQ78Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fbe350-69da-495d-96e2-abfa83fcff67/1/eb1TcuHhnQW-2jU71qFb3TkpH6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.202.0/24
                  212.46.60.0/24
                IPv6:
                  2a13:d9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2d:6a:f3:49:86:29:9f:ac:39:fe:f7:e5:d5:e5:ea:b1:26:e1:
         6e:9c:fa:d9:14:1f:05:d7:a3:44:3d:7f:0e:2f:70:c4:09:23:
         3c:e8:3e:e5:e3:4d:f0:99:de:eb:0f:45:d0:fe:b4:a4:16:da:
         06:69:3a:b5:94:83:d4:7c:69:08:08:e5:5d:4d:92:9b:3a:57:
         f5:91:95:5a:17:7f:b6:f4:ce:fa:81:73:bb:b6:40:f3:28:63:
         7e:48:e5:20:90:9e:7f:37:10:61:eb:4c:4b:0a:38:11:e6:79:
         2a:7f:59:fb:f6:d8:db:88:48:05:08:ac:2f:0d:a0:1b:81:67:
         39:bd:84:41:6e:92:20:59:c0:04:15:c6:d0:eb:e4:eb:43:1e:
         66:85:ea:f5:c9:92:63:a4:61:95:f7:6f:03:71:8a:4b:32:6f:
         d5:2a:3f:7b:fb:d0:2f:0d:ad:75:26:e4:a2:d8:46:53:39:08:
         26:27:90:a0:dc:2d:23:1d:df:d5:c7:49:bc:ae:9e:ab:0e:27:
         4e:3f:4d:ef:2f:e2:cb:0f:cb:11:df:b2:ed:98:f2:16:d6:84:
         2b:f0:d9:e0:43:25:a8:24:8b:08:93:cc:18:88:8d:65:26:a3:
         7c:f2:5e:d1:be:3d:66:29:1d:ec:d3:ba:05:17:1e:a0:86:dd:
         a2:e0:1a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:28 2026 by rpki-client