This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/e6fhuOPwHgBC5tZioXiiJV5do9A.roa
File:                     e6fhuOPwHgBC5tZioXiiJV5do9A.roa (raw, json)
Hash identifier:          Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=
Subject key identifier:   7B:A7:E1:B8:E3:F0:1E:00:42:E6:D6:62:A1:78:A2:25:5E:5D:A3:D0
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019B7D5CC5CEC4ADD3526EA2EFCFF9064387
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/e6fhuOPwHgBC5tZioXiiJV5do9A.roa
Signing time:             Fri 02 Jan 2026 06:19:50 +0000
ROA not before:           Fri 02 Jan 2026 06:19:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205053
IP address blocks:        185.226.64.0/22 maxlen: 22
                          185.226.64.0/24 maxlen: 24
                          185.226.65.0/24 maxlen: 24
                          185.226.66.0/24 maxlen: 24
                          185.226.67.0/24 maxlen: 24
                          213.134.5.0/24 maxlen: 24
                          2a0c:5e00::/32 maxlen: 32
                          2a0c:5e00::/48 maxlen: 48
                          2a0c:5e00::/64 maxlen: 64
                          2a0c:5e00:8::/48 maxlen: 48
                          2a0c:5e00:8::/64 maxlen: 64
                          2a0c:5e00:8:100::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 15:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:c5:ce:c4:ad:d3:52:6e:a2:ef:cf:f9:06:43:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Jan  2 06:19:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ba7e1b8e3f01e0042e6d662a178a2255e5da3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:5c:a1:01:d6:9c:71:1d:a4:84:f2:1e:97:
                    d0:95:ed:4c:90:34:a0:fe:09:d6:01:f3:45:2d:cd:
                    fc:66:05:43:15:34:aa:ba:fb:ec:85:25:5e:b2:b9:
                    e4:bf:06:2e:6a:95:be:68:b4:e8:6e:ff:74:79:06:
                    f8:fe:a8:b1:7b:be:5e:cd:f2:af:4a:e3:56:39:af:
                    f9:39:01:80:a5:77:4c:70:22:53:f2:65:87:11:fd:
                    59:f8:09:7e:57:d2:f3:1b:e7:0b:b4:fa:71:55:ee:
                    62:f1:da:1d:fd:8f:20:17:9d:8b:7a:6a:ef:f1:8b:
                    1f:ff:d2:6a:32:b5:08:12:11:50:08:90:12:c7:b9:
                    13:f2:09:8e:2c:ad:b9:d3:9d:bb:c9:b3:56:59:4b:
                    eb:bf:a5:2d:6b:95:04:f6:bc:3c:c1:c4:ee:a7:9a:
                    16:6d:43:03:14:66:31:25:bc:13:94:a7:05:0a:dc:
                    f2:34:bf:d2:9a:f4:a8:8e:1d:a0:c5:81:43:9a:42:
                    ae:00:5e:cf:94:b4:4d:46:7d:08:cc:65:54:03:d4:
                    91:0d:05:b4:1a:22:12:9e:df:2e:02:a5:ea:89:b9:
                    a6:54:ec:7a:7b:61:37:dc:c3:07:79:f8:5b:32:26:
                    56:b1:16:35:28:2a:f8:d7:9d:9e:00:9c:4b:03:cf:
                    af:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A7:E1:B8:E3:F0:1E:00:42:E6:D6:62:A1:78:A2:25:5E:5D:A3:D0
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/e6fhuOPwHgBC5tZioXiiJV5do9A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.64.0/22
                  213.134.5.0/24
                IPv6:
                  2a0c:5e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:fe:f8:77:05:bb:bc:b3:71:e5:d2:e6:77:fe:71:cc:b2:f6:
         bd:b9:59:4d:34:16:39:02:2f:f2:53:ea:f1:d8:8f:96:b9:7a:
         07:73:1d:00:81:6c:09:19:c4:d3:7d:b8:eb:09:09:0c:e3:59:
         07:d5:49:da:cc:bb:02:f8:4a:3c:bb:b1:f2:1b:3f:5d:8c:05:
         5d:15:13:31:2a:8a:e5:34:19:50:f8:98:97:56:d3:cf:59:c7:
         77:31:0a:1d:93:82:df:ea:e0:4b:82:e7:c1:b4:f0:a6:3b:5f:
         79:fd:af:5f:c8:f3:35:89:8a:4a:4d:77:49:a1:b7:36:c0:88:
         02:c1:20:2b:cc:6f:65:9a:9f:cc:0c:cf:4d:81:59:01:87:c1:
         99:c7:0a:25:1f:89:0b:19:c2:b7:25:eb:12:b5:50:de:73:7d:
         5c:4b:ac:57:18:c4:95:eb:70:59:8f:87:87:ad:3d:df:55:70:
         cd:52:9b:7b:d6:cb:24:01:08:fd:d3:4f:46:f1:1c:32:51:ae:
         a8:fa:3d:bb:8b:dd:4c:f2:a5:d9:cc:d9:c1:e9:d2:3a:f1:56:
         9d:ec:a7:6e:f5:33:e7:17:a2:ee:60:77:76:00:c1:9c:69:21:
         4d:f5:83:91:ba:f0:0e:8a:57:0a:43:1c:36:11:5a:6c:fb:aa:
         27:64:81:43
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt9XMXOxK3TUm6i78/5BkOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGIwOTc0M2VkMmFmZDZhZmI0N2M1ODM2MGVlMzExMmE5
NWNkMzQwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmE3ZTFiOGUzZjAxZTAwNDJlNmQ2NjJhMTc4YTIyNTVlNWRhM2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZJcoQHWnHEdpITyHpfQle1MkDSg
/gnWAfNFLc38ZgVDFTSquvvshSVesrnkvwYuapW+aLTobv90eQb4/qixe75ezfKv
SuNWOa/5OQGApXdMcCJT8mWHEf1Z+Al+V9LzG+cLtPpxVe5i8dod/Y8gF52Lemrv
8Ysf/9JqMrUIEhFQCJASx7kT8gmOLK250527ybNWWUvrv6Uta5UE9rw8wcTup5oW
bUMDFGYxJbwTlKcFCtzyNL/SmvSojh2gxYFDmkKuAF7PlLRNRn0IzGVUA9SRDQW0
GiISnt8uAqXqibmmVOx6e2E33MMHefhbMiZWsRY1KCr4152eAJxLA8+vNwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHun4bjj8B4AQubWYqF4oiVeXaPQMB8GA1UdIwQY
MBaAFDNLCXQ+0q/Wr7R8WDYO4xEqlc00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEt
NTllNzkyZmUxNGNjLzEvZTZmaHVPUHdIZ0JDNXRaaW9YaWlKVjVkbzlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jZDQxMGYtOWRlNC00ZDgyLTgwOTEtNTllNzkyZmUxNGNj
LzEvTTBzSmREN1NyOWF2dEh4WU5nN2pFU3FWelRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCueJAAwQA
1YYFMA0EAgACMAcDBQAqDF4AMA0GCSqGSIb3DQEBCwUAA4IBAQCY/vh3Bbu8s3Hl
0uZ3/nHMsva9uVlNNBY5Ai/yU+rx2I+WuXoHcx0AgWwJGcTTfbjrCQkM41kH1Una
zLsC+Eo8u7HyGz9djAVdFRMxKorlNBlQ+JiXVtPPWcd3MQodk4Lf6uBLgufBtPCm
O195/a9fyPM1iYpKTXdJobc2wIgCwSArzG9lmp/MDM9NgVkBh8GZxwolH4kLGcK3
JesStVDec31cS6xXGMSV63BZj4eHrT3fVXDNUpt71sskAQj9009G8RwyUa6o+j27
i91M8qXZzNnB6dI68Vad7Kdu9TPnF6LuYHd2AMGcaSFN9YORuvAOilcKQxw2EVps
+6onZIFD
-----END CERTIFICATE-----
Generated at Fri Jan 2 22:42:32 2026 by rpki-client