This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/x2674gpeOOkrgbaldgBcetLScA0.roa
File:                     x2674gpeOOkrgbaldgBcetLScA0.roa (raw, json)
Hash identifier:          slI9OZiOgpY/PPO59egGhNigxJguaSBoswQUZlXaUCM=
Subject key identifier:   C7:6E:BB:E2:0A:5E:38:E9:2B:81:B6:A5:76:00:5C:7A:D2:D2:70:0D
Certificate issuer:       /CN=a040f968fa52e6cb2fe657109700fa074c190b85
Certificate serial:       019B7DCA3559B7080C2D7C860388A0EF5546
Authority key identifier: A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/x2674gpeOOkrgbaldgBcetLScA0.roa
Signing time:             Fri 02 Jan 2026 08:19:22 +0000
ROA not before:           Fri 02 Jan 2026 08:19:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62352
IP address blocks:        86.105.199.0/24 maxlen: 24
                          93.117.174.0/24 maxlen: 24
                          109.205.140.0/23 maxlen: 23
                          109.205.140.0/24 maxlen: 24
                          109.205.141.0/24 maxlen: 24
                          109.205.142.0/23 maxlen: 23
                          109.205.142.0/24 maxlen: 24
                          109.205.143.0/24 maxlen: 24
                          176.126.173.0/24 maxlen: 24
                          185.39.40.0/22 maxlen: 22
                          185.39.40.0/24 maxlen: 24
                          185.39.41.0/24 maxlen: 24
                          185.39.42.0/24 maxlen: 24
                          185.39.43.0/24 maxlen: 24
                          188.241.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:35:59:b7:08:0c:2d:7c:86:03:88:a0:ef:55:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a040f968fa52e6cb2fe657109700fa074c190b85
        Validity
            Not Before: Jan  2 08:19:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c76ebbe20a5e38e92b81b6a576005c7ad2d2700d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:56:6a:b7:95:c2:08:07:ec:a6:97:bd:83:
                    c5:0c:16:17:87:3d:7a:86:91:84:86:fb:fa:8b:7b:
                    6f:0a:e3:7d:d1:db:b4:ad:e2:cb:1b:96:0f:4f:99:
                    72:f1:b9:8d:e9:39:5f:7f:bb:36:e7:65:9e:8d:4c:
                    e1:ce:ca:f9:90:a2:9c:b5:5b:e6:3f:a4:89:3c:b7:
                    d6:c9:43:aa:85:73:d6:85:8f:07:70:4c:f5:94:d3:
                    12:5d:4a:c2:fd:87:09:fe:61:f2:ed:4b:bb:3d:13:
                    e8:6f:89:b0:e4:cf:98:36:e2:52:9c:a4:f3:d4:d1:
                    91:df:7e:76:70:e0:fc:e5:71:12:b2:f1:21:84:23:
                    9d:cc:1f:f3:b7:bf:62:ba:e1:8c:aa:6f:50:88:b6:
                    e4:af:19:65:a4:72:6d:00:36:d8:f7:9c:8b:69:96:
                    27:63:d0:26:bc:51:8b:b8:54:b1:88:21:f3:fa:8a:
                    72:a0:57:ea:7c:9e:c6:e1:93:24:10:c7:af:74:c5:
                    a4:1e:60:34:4a:6a:c4:23:bf:7e:35:3e:fe:c5:ea:
                    75:84:0d:c0:5f:c8:43:5a:5b:f9:48:fa:b7:e2:a2:
                    af:81:37:8d:02:bb:18:20:88:64:d1:a7:8a:91:c5:
                    10:75:ac:9d:58:7f:b0:20:51:fc:47:0a:cc:23:91:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6E:BB:E2:0A:5E:38:E9:2B:81:B6:A5:76:00:5C:7A:D2:D2:70:0D
            X509v3 Authority Key Identifier:
                keyid:A0:40:F9:68:FA:52:E6:CB:2F:E6:57:10:97:00:FA:07:4C:19:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oED5aPpS5ssv5lcQlwD6B0wZC4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/x2674gpeOOkrgbaldgBcetLScA0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/895502-4e14-4963-a305-3b6b0a5555ef/1/oED5aPpS5ssv5lcQlwD6B0wZC4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.105.199.0/24
                  93.117.174.0/24
                  109.205.140.0/22
                  176.126.173.0/24
                  185.39.40.0/22
                  188.241.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:eb:3a:9e:00:1d:84:76:62:f4:3f:1e:bb:f7:aa:19:b4:88:
         3d:01:d0:ed:25:f8:36:8b:d4:40:c2:40:7b:47:28:a3:dc:8f:
         05:bf:84:d1:4e:89:25:fa:16:a2:e1:54:9e:4f:2a:a3:26:43:
         30:78:52:a9:ff:05:b5:47:44:7a:7f:4a:95:49:ef:79:36:76:
         7f:81:02:42:28:fc:cf:8f:ef:40:35:f1:db:23:9e:00:a5:29:
         4b:96:cc:a9:df:0f:39:83:ba:26:0b:df:5e:52:05:32:1c:38:
         4a:36:f6:38:9f:83:42:cb:46:f2:ab:8e:47:27:14:23:0e:2e:
         8d:07:57:a5:d3:d5:35:70:7d:60:2d:01:f2:52:d3:15:6f:6c:
         bf:55:83:fc:2b:76:21:1b:c6:6d:4a:8a:03:9c:6d:90:ec:94:
         fe:b1:05:ac:86:92:5e:db:42:83:7c:56:38:84:6a:e6:2e:cb:
         fe:5e:ce:63:db:32:d0:88:61:80:0d:1a:62:dd:b7:b7:5a:90:
         b6:d1:5a:7b:a4:f7:71:50:53:8b:54:95:d6:e8:98:b8:ab:3d:
         94:08:37:b8:9a:9a:ce:94:eb:12:90:e9:7d:3b:ac:50:fb:85:
         95:dd:4d:4e:25:67:f2:f7:17:bd:c5:fd:bb:c1:34:53:94:a7:
         04:f2:fa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:19 2026 by rpki-client