This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/93sTot__pOvELS3ZJJ_0IKYI80A.roa
File:                     93sTot__pOvELS3ZJJ_0IKYI80A.roa (raw, json)
Hash identifier:          cd3DiMi4zFZH02Z5vN9iUfleyfgwEhyhgnSYBKXSIqA=
Subject key identifier:   F7:7B:13:A2:DF:FF:A4:EB:C4:2D:2D:D9:24:9F:F4:20:A6:08:F3:40
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       019B7DCA2997844AC3049A151F2E22F8FB13
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/93sTot__pOvELS3ZJJ_0IKYI80A.roa
Signing time:             Fri 02 Jan 2026 08:19:19 +0000
ROA not before:           Fri 02 Jan 2026 08:19:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28884
IP address blocks:        85.140.96.0/20 maxlen: 20
                          85.140.96.0/21 maxlen: 21
                          85.140.104.0/21 maxlen: 21
                          213.87.112.0/23 maxlen: 23
                          213.87.114.0/23 maxlen: 23
                          213.87.116.0/23 maxlen: 23
                          213.87.118.0/23 maxlen: 23
                          213.87.120.0/23 maxlen: 23
                          213.87.122.0/23 maxlen: 23
                          213.87.124.0/23 maxlen: 23
                          213.87.126.0/23 maxlen: 23
                          213.87.184.0/23 maxlen: 23
                          213.87.224.0/23 maxlen: 23
                          2a00:1fa2:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:29:97:84:4a:c3:04:9a:15:1f:2e:22:f8:fb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Jan  2 08:19:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f77b13a2dfffa4ebc42d2dd9249ff420a608f340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:ee:93:a3:06:8d:66:c0:6c:ad:72:91:4e:
                    6f:3c:09:37:35:a0:7e:2d:de:66:3b:be:a2:c3:2d:
                    15:1e:cc:72:f3:5d:c0:67:41:6c:80:2b:ed:df:29:
                    ef:5f:f6:f2:d3:6f:1a:5f:3c:15:b3:e3:2a:1f:83:
                    25:1c:90:ce:73:1c:a4:a5:0a:08:77:fd:93:8e:01:
                    12:6b:04:5c:b2:6d:cc:c6:f7:54:d1:07:0b:11:b5:
                    c0:2d:5e:d9:f5:1c:17:90:84:1e:5d:01:70:c5:e1:
                    af:ea:d0:ea:51:74:0c:4f:8e:25:7b:f0:ff:6b:c8:
                    a7:3f:eb:29:62:45:d5:5b:53:55:99:5d:2b:14:85:
                    7f:a1:d1:bb:4f:be:c2:ab:7a:11:01:3a:bd:9f:b5:
                    b9:03:9d:94:9f:2c:82:7e:d0:00:66:16:b9:df:b4:
                    b9:42:73:af:39:0b:ca:51:0f:7f:db:8a:ef:eb:4e:
                    8c:9f:1d:7c:fc:cf:94:6f:98:53:36:31:8d:ce:59:
                    fe:1a:d9:3d:e7:bd:ce:45:38:d9:f3:16:54:2a:87:
                    c7:cc:d8:c2:a9:ca:94:55:3b:a6:b3:b8:52:eb:fa:
                    68:96:9a:ee:da:78:1a:b5:19:57:50:a6:35:08:ce:
                    a6:68:f3:7e:48:bc:d9:23:c7:ad:e8:81:6e:87:02:
                    04:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7B:13:A2:DF:FF:A4:EB:C4:2D:2D:D9:24:9F:F4:20:A6:08:F3:40
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/93sTot__pOvELS3ZJJ_0IKYI80A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.140.96.0/20
                  213.87.112.0/20
                  213.87.184.0/23
                  213.87.224.0/23
                IPv6:
                  2a00:1fa2:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         30:f2:d3:6f:42:f1:34:a8:98:aa:3c:4d:9e:b6:c4:25:e2:a4:
         8a:c8:f5:3d:8e:4b:45:dc:c5:c2:d1:44:07:ab:65:5e:07:75:
         9a:a1:66:05:cc:d0:1e:dc:07:0f:6b:fb:9f:5d:a2:8b:10:de:
         3f:a0:f3:c5:f0:d1:04:ed:12:bd:30:7f:08:9c:43:27:92:ac:
         34:5f:34:9a:d3:0e:6a:03:32:53:d0:05:66:b2:24:9e:e7:13:
         ec:c0:81:e5:37:2a:be:e4:ff:70:f0:89:56:f9:5a:ac:de:98:
         dd:82:b7:ea:8e:f5:d0:fa:fe:79:fe:17:04:c1:49:fd:22:8f:
         40:89:52:04:b6:b1:e7:f9:39:6e:5d:b7:5e:cf:55:59:62:d6:
         29:36:e2:00:3e:f0:8b:6e:d5:e5:fb:4e:35:65:5b:63:69:90:
         0b:b8:26:e1:48:05:4d:f0:bf:30:23:12:e1:f8:10:64:f8:49:
         d1:39:03:3f:d6:f0:ac:01:ea:db:e1:cb:a8:5b:9a:a6:64:6a:
         a1:85:c0:58:6c:20:82:f2:92:c9:14:eb:44:60:ae:39:b8:19:
         89:31:66:13:46:43:ca:af:fe:b4:63:54:dd:05:30:46:a6:95:
         cb:06:6b:47:2d:23:fc:7f:b3:d8:29:04:9c:1e:10:28:6c:2c:
         11:4a:4a:09
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZt9yimXhErDBJoVHy4i+PsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjYwMTAyMDgxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzdiMTNhMmRmZmZhNGViYzQyZDJkZDkyNDlmZjQyMGE2MDhmMzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpvuk6MGjWbAbK1ykU5vPAk3NaB+
Ld5mO76iwy0VHsxy813AZ0FsgCvt3ynvX/by028aXzwVs+MqH4MlHJDOcxykpQoI
d/2TjgESawRcsm3MxvdU0QcLEbXALV7Z9RwXkIQeXQFwxeGv6tDqUXQMT44le/D/
a8inP+spYkXVW1NVmV0rFIV/odG7T77Cq3oRATq9n7W5A52UnyyCftAAZha537S5
QnOvOQvKUQ9/24rv606Mnx18/M+Ub5hTNjGNzln+Gtk9573ORTjZ8xZUKofHzNjC
qcqUVTums7hS6/polpru2ngatRlXUKY1CM6maPN+SLzZI8et6IFuhwIEwQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFPd7E6Lf/6TrxC0t2SSf9CCmCPNAMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvOTNzVG90X19wT3ZFTFMzWkpKXzBJS1lJODBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQEVYxgAwQE
1VdwAwQB1Ve4AwQB1VfgMA4EAgACMAgDBgcqAB+igDANBgkqhkiG9w0BAQsFAAOC
AQEAMPLTb0LxNKiYqjxNnrbEJeKkisj1PY5LRdzFwtFEB6tlXgd1mqFmBczQHtwH
D2v7n12iixDeP6DzxfDRBO0SvTB/CJxDJ5KsNF80mtMOagMyU9AFZrIknucT7MCB
5TcqvuT/cPCJVvlarN6Y3YK36o710Pr+ef4XBMFJ/SKPQIlSBLax5/k5bl23Xs9V
WWLWKTbiAD7wi27V5ftONWVbY2mQC7gm4UgFTfC/MCMS4fgQZPhJ0TkDP9bwrAHq
2+HLqFuapmRqoYXAWGwggvKSyRTrRGCuObgZiTFmE0ZDyq/+tGNU3QUwRqaVywZr
Ry0j/H+z2CkEnB4QKGwsEUpKCQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:23 2026 by rpki-client