This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/fEeplWw_YpRC4Ay1QIQCqiNzEng.roa
File:                     fEeplWw_YpRC4Ay1QIQCqiNzEng.roa (raw, json)
Hash identifier:          Twh3oQrfCjhr2qTmHSOUea5jfVO2MWIW03LajOLIrEA=
Subject key identifier:   7C:47:A9:95:6C:3F:62:94:42:E0:0C:B5:40:84:02:AA:23:73:12:78
Certificate issuer:       /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial:       019B7BA4BEE5A0E7040FD3E3AE41031C20B0
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/fEeplWw_YpRC4Ay1QIQCqiNzEng.roa
Signing time:             Thu 01 Jan 2026 22:19:12 +0000
ROA not before:           Thu 01 Jan 2026 22:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211550
IP address blocks:        185.223.205.0/24 maxlen: 24
                          212.125.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:be:e5:a0:e7:04:0f:d3:e3:ae:41:03:1c:20:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
        Validity
            Not Before: Jan  1 22:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7c47a9956c3f629442e00cb5408402aa23731278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:13:51:b0:2c:9c:6f:b2:ed:2a:08:fb:96:
                    3a:b0:94:d6:2c:1c:2a:04:21:ce:be:c3:f4:df:7f:
                    e5:7e:04:a6:dc:4b:77:86:ba:7f:a4:da:0c:36:70:
                    91:f8:95:6a:82:de:88:ee:01:05:19:9b:ee:9d:6c:
                    e3:83:85:14:9a:a0:ce:c6:c1:c5:b3:c0:fe:75:a0:
                    60:05:a7:ba:bf:02:11:2a:a2:72:ad:fa:69:7f:3e:
                    37:39:3e:36:6c:76:e8:64:2d:5d:db:48:4e:46:1b:
                    8b:46:23:0a:af:98:22:ec:41:33:66:45:4e:d6:09:
                    9d:2f:34:ac:0a:38:c6:82:4a:bb:51:ca:a5:06:7d:
                    b3:5a:7e:96:9c:87:17:6d:c6:93:47:5f:70:38:eb:
                    ee:dc:5a:81:71:8d:00:cf:9f:a9:c7:a9:47:7b:0e:
                    d4:e8:74:79:9e:4e:eb:8f:05:6f:91:57:42:31:11:
                    18:7e:e0:d9:37:2a:e9:82:55:dd:17:76:5b:a0:b9:
                    8d:bf:c8:8e:78:39:bc:84:ec:33:34:f7:20:6d:28:
                    e1:c8:5f:ce:f9:4e:13:ad:0d:14:8e:ea:b2:ee:5c:
                    e3:43:e2:5f:de:88:95:90:d7:01:fd:27:d9:bf:3a:
                    2b:f1:75:af:c3:46:8e:51:f7:d1:42:50:27:c5:6c:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:47:A9:95:6C:3F:62:94:42:E0:0C:B5:40:84:02:AA:23:73:12:78
            X509v3 Authority Key Identifier:
                keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/fEeplWw_YpRC4Ay1QIQCqiNzEng.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.205.0/24
                  212.125.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:18:d8:39:28:30:c8:fa:64:66:60:6a:e3:bc:fe:45:29:c3:
         cc:6b:7c:8b:42:2a:7e:1d:4c:f7:c5:13:fe:b6:de:14:be:f4:
         1c:6f:99:ee:4f:c0:7e:e8:9f:8d:c0:39:86:74:59:f8:9f:e0:
         3c:e3:a2:1f:91:ba:ac:54:b3:fd:9b:9b:2b:3f:76:0e:f8:1b:
         e1:d6:f9:ba:1d:85:3e:68:d6:a4:72:85:67:c9:dc:61:a3:8c:
         dc:99:3d:41:2d:0e:f2:98:9c:c0:d1:e0:88:e2:4a:8e:38:5c:
         c0:a1:4a:cf:7d:27:3a:af:53:98:79:97:2b:fe:53:f3:3f:33:
         2c:7a:12:6d:50:87:9e:34:aa:46:ff:4b:e8:9f:ba:71:98:ba:
         2f:77:3d:c5:f3:e3:77:21:c3:25:ce:c0:b2:68:65:46:10:62:
         c4:a0:76:b7:59:2d:25:2b:b4:b0:26:fb:b7:5a:33:d0:18:54:
         73:98:c6:1c:08:14:77:29:a0:1a:5e:08:2d:5b:92:d1:40:4d:
         22:a2:7b:c0:22:09:c0:20:93:02:a9:55:f1:06:a2:59:a0:07:
         30:11:17:fe:15:de:7f:63:3a:9a:a9:93:1f:cd:3a:99:f1:72:
         56:fd:3b:54:b7:db:9f:a0:e9:00:a9:96:27:0f:1d:d3:7c:86:
         31:22:29:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt7pL7loOcED9PjrkEDHCCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMDM3NWFkYTljNWUwMTAwZGRiNjMzYjJhMWI3NDdlMTlj
MmVjNWIwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzQ3YTk5NTZjM2Y2Mjk0NDJlMDBjYjU0MDg0MDJhYTIzNzMxMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx8TUbAsnG+y7SoI+5Y6sJTWLBwq
BCHOvsP033/lfgSm3Et3hrp/pNoMNnCR+JVqgt6I7gEFGZvunWzjg4UUmqDOxsHF
s8D+daBgBae6vwIRKqJyrfppfz43OT42bHboZC1d20hORhuLRiMKr5gi7EEzZkVO
1gmdLzSsCjjGgkq7UcqlBn2zWn6WnIcXbcaTR19wOOvu3FqBcY0Az5+px6lHew7U
6HR5nk7rjwVvkVdCMREYfuDZNyrpglXdF3ZboLmNv8iOeDm8hOwzNPcgbSjhyF/O
+U4TrQ0Ujuqy7lzjQ+Jf3oiVkNcB/SfZvzor8XWvw0aOUffRQlAnxWwPpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHxHqZVsP2KUQuAMtUCEAqojcxJ4MB8GA1UdIwQY
MBaAFJwDda2pxeAQDdtjOyobdH4ZwuxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZTg0ZjctYWYyYS00NmRjLWI2YzYt
MWZjODllOTlhMGExLzEvZkVlcGxXd19ZcFJDNEF5MVFJUUNxaU56RW5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lZTg0ZjctYWYyYS00NmRjLWI2YzYtMWZjODllOTlhMGEx
LzEvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud/NAwQA
1H2OMA0GCSqGSIb3DQEBCwUAA4IBAQAzGNg5KDDI+mRmYGrjvP5FKcPMa3yLQip+
HUz3xRP+tt4UvvQcb5nuT8B+6J+NwDmGdFn4n+A846IfkbqsVLP9m5srP3YO+Bvh
1vm6HYU+aNakcoVnydxho4zcmT1BLQ7ymJzA0eCI4kqOOFzAoUrPfSc6r1OYeZcr
/lPzPzMsehJtUIeeNKpG/0von7pxmLovdz3F8+N3IcMlzsCyaGVGEGLEoHa3WS0l
K7SwJvu3WjPQGFRzmMYcCBR3KaAaXggtW5LRQE0ionvAIgnAIJMCqVXxBqJZoAcw
ERf+Fd5/YzqaqZMfzTqZ8XJW/TtUt9ufoOkAqZYnDx3TfIYxIinx
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:42:02 2026 by rpki-client