This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/2OTpT_iPVatmtzbTR3cTe1hubrc.roa
File:                     2OTpT_iPVatmtzbTR3cTe1hubrc.roa (raw, json)
Hash identifier:          96a4HaH7uBovr7v7aSF35lG60fSRXuRhdHuwp6lUb8E=
Subject key identifier:   D8:E4:E9:4F:F8:8F:55:AB:66:B7:36:D3:47:77:13:7B:58:6E:6E:B7
Certificate issuer:       /CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
Certificate serial:       019B7834D3E1B6C47BF95B8B6E7EF3671917
Authority key identifier: 01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/2OTpT_iPVatmtzbTR3cTe1hubrc.roa
Signing time:             Thu 01 Jan 2026 06:18:06 +0000
ROA not before:           Thu 01 Jan 2026 06:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209277
IP address blocks:        88.214.16.0/24 maxlen: 24
                          88.214.17.0/24 maxlen: 24
                          88.214.18.0/24 maxlen: 24
                          88.214.19.0/24 maxlen: 24
                          185.38.192.0/24 maxlen: 24
                          185.38.193.0/24 maxlen: 24
                          185.38.194.0/24 maxlen: 24
                          185.38.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:d3:e1:b6:c4:7b:f9:5b:8b:6e:7e:f3:67:19:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01127566a5ac41e66b4c7537a60fdcbbfab39a17
        Validity
            Not Before: Jan  1 06:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d8e4e94ff88f55ab66b736d34777137b586e6eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:d5:a2:a2:8f:6e:36:d4:52:4c:93:0b:38:
                    bb:ec:1b:db:98:a9:98:28:ec:66:4f:4b:02:3e:22:
                    cb:df:8d:08:d4:4d:e0:2a:de:24:33:6e:2f:bc:20:
                    ee:f5:b2:a4:8c:2d:59:72:ef:a7:83:80:02:bd:f6:
                    2a:75:e7:9a:88:16:e4:f8:ac:d8:24:e6:0f:2b:37:
                    a1:da:3a:ee:b0:11:2c:54:75:0e:0d:7b:e2:ca:4e:
                    33:37:4b:43:5c:59:f7:52:33:f5:f4:97:3c:9b:b2:
                    60:97:90:95:34:59:24:23:fa:de:22:b1:2e:2b:fb:
                    c3:7c:f1:a4:fc:ee:ba:59:6f:b3:e5:14:84:6a:27:
                    b7:37:02:67:6f:b7:3d:8e:03:38:f1:79:a9:71:7f:
                    65:99:a7:86:82:ec:12:82:70:b8:63:21:31:f0:4a:
                    58:37:6b:0a:82:0a:d3:c5:84:33:58:fc:a8:ea:30:
                    32:52:1b:e4:9c:92:43:05:65:31:d1:b4:f5:bc:7a:
                    11:bd:0a:a5:e3:42:68:c9:c5:9d:a3:c5:ce:89:e0:
                    7b:ef:d9:db:7a:d5:17:4f:9f:01:68:6d:06:f8:07:
                    42:eb:62:50:14:04:02:69:43:49:e3:35:3e:77:01:
                    22:98:74:3a:ce:cb:cb:40:1d:4d:d3:c5:d3:fc:ef:
                    89:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E4:E9:4F:F8:8F:55:AB:66:B7:36:D3:47:77:13:7B:58:6E:6E:B7
            X509v3 Authority Key Identifier:
                keyid:01:12:75:66:A5:AC:41:E6:6B:4C:75:37:A6:0F:DC:BB:FA:B3:9A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/2OTpT_iPVatmtzbTR3cTe1hubrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/51f7f8-0595-4654-943b-1beac7440262/1/ARJ1ZqWsQeZrTHU3pg_cu_qzmhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.214.16.0/22
                  185.38.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:bc:28:c0:33:06:41:4d:7a:97:45:d1:8c:f9:44:07:88:43:
         7a:1e:f4:f1:7b:b9:a9:cf:64:36:c0:96:61:c0:36:9b:d3:8f:
         08:6c:b2:1f:de:78:68:3b:20:d7:de:84:0d:93:95:98:17:de:
         83:92:0e:f1:cb:4f:fc:a4:ce:f3:01:e6:38:e1:f5:d2:a5:3a:
         7f:e9:cf:12:1c:03:bf:07:d3:97:90:29:0a:68:b1:b6:af:58:
         9b:83:2d:3c:8d:dc:e8:92:de:66:f9:b1:95:13:a4:32:05:93:
         3a:29:ef:5c:b0:4b:63:76:64:1b:83:c8:f3:2b:c1:9f:58:83:
         c9:de:e0:b3:0d:f2:aa:99:5a:3f:61:b0:63:75:5c:99:30:0f:
         98:00:ca:4e:0b:c5:9d:23:04:2a:e6:9a:cd:7e:d1:25:9d:ae:
         31:00:d9:8a:03:a2:65:b4:16:b1:38:dd:66:e5:9e:8e:cd:6b:
         09:b0:e0:f5:06:40:1b:85:68:2f:88:bf:f3:32:47:d3:77:dc:
         48:78:e7:58:d0:48:45:f0:85:e6:ad:6d:3c:4b:17:15:03:8f:
         02:58:ca:17:eb:c2:da:95:32:68:bf:f5:9a:52:e2:e8:13:ad:
         55:b8:1c:3c:85:d4:c3:26:ff:52:dc:c9:80:48:14:dd:49:ee:
         cd:47:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:04 2026 by rpki-client