This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/oV0JLOMHWgEPodfJD7fettcMDKo.roa
File:                     oV0JLOMHWgEPodfJD7fettcMDKo.roa (raw, json)
Hash identifier:          8byXH6iwa9ptsygTXF7KrIJlXXNBNYRMHn/3mZG+lWQ=
Subject key identifier:   A1:5D:09:2C:E3:07:5A:01:0F:A1:D7:C9:0F:B7:DE:B6:D7:0C:0C:AA
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       019B7DCA2E10141E9E3C329A137494726EF8
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/oV0JLOMHWgEPodfJD7fettcMDKo.roa
Signing time:             Fri 02 Jan 2026 08:19:20 +0000
ROA not before:           Fri 02 Jan 2026 08:19:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41209
IP address blocks:        62.118.106.0/23 maxlen: 23
                          62.118.108.0/23 maxlen: 23
                          85.140.60.0/22 maxlen: 22
                          85.140.60.0/24 maxlen: 24
                          85.140.61.0/24 maxlen: 24
                          85.140.62.0/24 maxlen: 24
                          85.140.63.0/24 maxlen: 24
                          195.34.18.0/23 maxlen: 23
                          195.34.18.0/24 maxlen: 24
                          195.34.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:2e:10:14:1e:9e:3c:32:9a:13:74:94:72:6e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Jan  2 08:19:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a15d092ce3075a010fa1d7c90fb7deb6d70c0caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bc:7f:cf:7f:f8:f7:78:10:5f:5b:1f:e0:81:
                    c3:7c:53:e9:4e:fb:6b:97:84:fb:cd:ed:6b:f0:78:
                    c1:a8:e4:24:58:43:09:1b:31:05:0c:6b:9c:39:b1:
                    ea:e0:a0:ad:8e:b1:69:2a:5b:ba:0b:89:6e:17:d4:
                    41:ee:e0:ee:c3:dd:d1:10:00:d4:26:91:58:3b:eb:
                    47:60:52:2a:cd:e1:37:d2:d9:b3:9a:83:72:17:6f:
                    f5:f3:1b:dc:ba:d0:37:95:bd:56:59:30:e0:9f:e6:
                    37:72:71:0c:05:a2:4d:c5:15:91:be:bb:de:48:b4:
                    85:a5:37:02:2e:08:2a:14:3f:11:7a:fa:82:e7:00:
                    e6:f7:6e:4b:78:1e:e7:e4:3c:fb:c0:0c:9a:b1:b0:
                    3b:2e:e2:fe:b9:d5:d0:55:9c:1a:8d:cd:7c:66:82:
                    17:cc:f8:c4:bb:e5:ed:79:df:2d:87:50:f4:35:a1:
                    40:d9:37:7f:1c:e8:eb:7c:26:0d:2c:d4:97:67:e9:
                    dc:36:25:6d:08:3a:1b:79:ce:82:0a:59:2d:f8:61:
                    ea:4a:38:d8:7a:24:f6:a4:b9:d5:f8:14:1f:e8:db:
                    d0:1b:7b:d3:c1:5d:ca:dd:0c:15:62:67:05:67:d9:
                    01:e0:77:2a:0f:11:f4:dd:79:38:d7:1c:61:00:0b:
                    99:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5D:09:2C:E3:07:5A:01:0F:A1:D7:C9:0F:B7:DE:B6:D7:0C:0C:AA
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/oV0JLOMHWgEPodfJD7fettcMDKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.118.106.0-62.118.109.255
                  85.140.60.0/22
                  195.34.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:58:79:bb:8a:c5:9c:0b:9a:f2:f5:8f:c6:1f:09:81:79:37:
         fd:ff:52:fb:3d:6f:d3:39:5a:14:93:d3:d5:c1:ad:ed:22:8f:
         46:ed:dd:a1:48:ec:03:a0:eb:d0:bc:a7:91:14:7d:d3:cf:23:
         cb:50:cf:a0:51:93:21:f1:ee:dd:17:36:e5:10:3b:56:29:80:
         ab:1c:51:54:4a:f6:c9:e4:29:5a:bc:70:d2:d4:d9:aa:39:e1:
         94:cc:a7:86:de:66:76:e4:68:3b:26:a6:3e:80:ec:7f:2b:76:
         1d:b0:c2:a1:59:79:fb:ab:1d:7e:2c:5f:0e:39:1c:97:5c:49:
         30:38:90:99:3f:05:e8:08:08:7d:d5:51:3d:0c:83:fb:bd:f3:
         0b:6f:3d:dd:1e:18:c0:0d:cd:96:db:53:5c:69:b7:fe:d0:ae:
         01:30:f9:6b:0d:a3:1c:4a:23:7a:56:a8:63:c8:93:ae:6a:1e:
         55:ad:b1:24:87:a1:1f:56:0d:10:b9:8c:40:65:87:b7:93:40:
         d1:78:76:08:00:47:e3:51:bf:83:15:34:60:02:a3:30:66:41:
         71:36:aa:db:d4:92:32:2a:d9:2d:25:1f:a8:7b:58:0e:95:81:
         ce:95:f2:25:6b:b6:68:ff:81:6f:7a:5d:8a:c0:57:8a:41:39:
         2c:7c:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:30 2026 by rpki-client