This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/aieeYAXcHf6iZv5A5jAAy7zNKfU.roa
File:                     aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (raw, json)
Hash identifier:          +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=
Subject key identifier:   6A:27:9E:60:05:DC:1D:FE:A2:66:FE:40:E6:30:00:CB:BC:CD:29:F5
Certificate issuer:       /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
Certificate serial:       019B7A5ADEDDE8B61CAEBDFDB0D75DB30D03
Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/aieeYAXcHf6iZv5A5jAAy7zNKfU.roa
Signing time:             Thu 01 Jan 2026 16:18:54 +0000
ROA not before:           Thu 01 Jan 2026 16:18:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208731
IP address blocks:        147.78.192.0/23 maxlen: 24
                          147.78.192.0/24 maxlen: 24
                          147.78.193.0/24 maxlen: 24
                          185.42.161.0/24 maxlen: 24
                          185.203.112.0/24 maxlen: 24
                          2a0f:98c0::/29 maxlen: 48
                          2a0f:98c0:d::/48 maxlen: 48
                          2a0f:98c0:12::/48 maxlen: 48
                          2a0f:98c0:13::/48 maxlen: 48
                          2a0f:98c0:14::/48 maxlen: 48
                          2a0f:98c0:15::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:de:dd:e8:b6:1c:ae:bd:fd:b0:d7:5d:b3:0d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2
        Validity
            Not Before: Jan  1 16:18:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a279e6005dc1dfea266fe40e63000cbbccd29f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:b1:4d:c5:3d:98:2d:d2:6c:a9:ac:04:33:
                    a4:4b:cc:d3:5b:e9:ce:6c:49:d0:9f:58:a7:ca:cf:
                    10:ce:60:be:40:89:c5:72:da:56:03:47:b6:af:21:
                    8a:90:c6:26:3c:ff:1f:7e:a0:74:42:cc:30:09:f3:
                    24:85:1c:e5:ab:e9:9a:d9:e7:10:7b:d8:d2:4a:57:
                    53:ef:d1:34:60:2b:d7:17:6b:94:ff:43:5d:ac:6d:
                    35:f9:42:82:a7:32:09:6b:d9:9d:6d:a9:9f:40:7a:
                    9a:f3:cd:81:81:ac:00:60:30:ee:ab:ec:c0:56:d3:
                    81:23:f9:50:87:20:d5:8b:2f:da:4f:75:49:5d:f6:
                    35:ca:b6:d9:2e:b4:97:fd:7f:7f:48:a8:93:d2:6a:
                    52:ac:5a:ee:8b:59:6e:23:cf:57:1e:fe:49:fa:db:
                    69:21:a6:02:35:34:e0:cb:f1:6d:40:5f:43:82:43:
                    43:8c:db:2b:43:37:8f:c3:57:0a:1a:1d:f8:90:18:
                    15:42:4d:ad:99:a4:60:31:59:1a:1b:9b:dc:bd:40:
                    da:67:43:1b:2a:a7:a5:a1:c2:89:37:1e:4e:3d:78:
                    49:b3:8e:86:36:16:47:a8:fa:8a:ce:f0:18:00:34:
                    69:a0:43:5e:7f:25:73:95:49:7c:29:98:a8:f7:56:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:27:9E:60:05:DC:1D:FE:A2:66:FE:40:E6:30:00:CB:BC:CD:29:F5
            X509v3 Authority Key Identifier:
                keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/aieeYAXcHf6iZv5A5jAAy7zNKfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.78.192.0/23
                  185.42.161.0/24
                  185.203.112.0/24
                IPv6:
                  2a0f:98c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         69:57:35:d4:ee:42:2c:2c:8c:f6:72:0c:64:63:26:d1:35:ad:
         97:91:a4:51:88:2d:3c:97:64:be:62:aa:6d:8e:5b:81:77:66:
         31:99:db:25:c7:65:9b:6f:8d:65:b6:0d:64:5f:0c:c0:90:75:
         3b:06:7e:22:f7:a5:dd:40:5f:93:8b:7f:8f:aa:70:d9:4e:67:
         b5:02:64:ed:c6:b6:ec:1d:6c:f7:2a:b8:f4:40:41:50:dc:d9:
         5e:17:03:25:83:c4:9a:2b:2b:30:d6:21:5c:a9:22:4a:ea:41:
         e9:14:f9:0f:58:77:f5:50:9a:7b:2d:25:e9:cb:cc:0f:c6:1b:
         78:38:b9:c6:44:13:df:06:77:98:f1:c1:ee:14:b0:46:16:4f:
         6a:99:7c:27:5d:8d:bb:fe:3b:75:70:d3:f8:76:91:e3:02:b3:
         79:dc:44:43:68:d9:32:20:72:b4:6a:ce:19:77:02:ed:7c:76:
         4a:9f:b1:35:cc:ee:6b:c5:fd:fe:85:b2:5e:7d:70:ea:8e:74:
         91:6f:a1:99:11:70:9d:4f:be:46:50:aa:b6:f3:f6:22:60:3c:
         96:f4:a9:e4:33:b7:cb:e6:99:27:87:87:50:d6:f1:7a:18:7a:
         73:86:93:46:df:f5:7c:08:ed:86:af:52:a0:79:ba:24:26:52:
         f7:b6:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:16 2026 by rpki-client