This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7z6gXWWITKZ0aqfXvb9wB9i466c.roa
File:                     7z6gXWWITKZ0aqfXvb9wB9i466c.roa (raw, json)
Hash identifier:          1mZNl5bdb8m4KXtgNhfmqS5vklzNrGbWmsb4gRrF+YA=
Subject key identifier:   EF:3E:A0:5D:65:88:4C:A6:74:6A:A7:D7:BD:BF:70:07:D8:B8:EB:A7
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       019C44EB8A778E18D560F468BE44AC60FD24
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7z6gXWWITKZ0aqfXvb9wB9i466c.roa
Signing time:             Tue 10 Feb 2026 00:20:13 +0000
ROA not before:           Tue 10 Feb 2026 00:20:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        212.116.228.0/23 maxlen: 23
                          212.116.237.0/24 maxlen: 24
                          212.116.238.0/23 maxlen: 24
                          212.116.238.0/24 maxlen: 24
                          212.116.243.0/24 maxlen: 24
                          212.116.244.0/24 maxlen: 24
                          212.116.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:44:eb:8a:77:8e:18:d5:60:f4:68:be:44:ac:60:fd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Feb 10 00:20:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef3ea05d65884ca6746aa7d7bdbf7007d8b8eba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:9b:24:95:f0:d9:0e:8f:8d:36:a2:9f:21:
                    43:bd:20:86:44:84:5c:50:af:49:fb:3e:ac:9e:d2:
                    fa:64:93:17:92:aa:8c:cf:1b:02:96:bb:dc:ee:f5:
                    df:67:c0:e1:54:1a:b9:87:59:39:71:55:23:be:37:
                    80:3d:2c:6f:e3:b0:96:2e:d4:1e:99:5a:b6:57:2d:
                    a3:cf:24:49:0a:33:f7:c0:2e:f0:f6:ad:fb:6d:27:
                    72:5d:1f:f9:bc:61:8c:af:c9:b8:59:78:43:db:36:
                    2d:c5:37:e4:a9:85:7f:f9:9b:81:e0:3b:f7:f8:b7:
                    53:f8:be:4b:42:ca:7a:d8:eb:56:8e:b7:5b:b9:bf:
                    8c:76:ab:1b:ee:88:f0:98:3d:b6:84:c8:ca:55:e8:
                    f6:e4:18:c1:d5:b0:1d:37:0a:9d:84:26:b5:b3:8b:
                    b4:41:9e:70:5b:27:a8:03:41:97:3a:69:c7:11:b3:
                    80:cc:15:44:e3:81:da:54:9f:67:29:ae:59:2b:88:
                    39:fa:94:c3:0f:11:19:87:d7:4b:6c:17:38:9d:61:
                    93:ae:cc:1b:a8:5d:91:6d:48:2f:96:a2:37:70:a4:
                    6c:9d:ab:4a:83:9c:60:e1:00:30:99:ac:a6:a3:e2:
                    6a:61:9b:2d:95:7d:f4:1f:e5:a0:97:80:d0:51:cf:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3E:A0:5D:65:88:4C:A6:74:6A:A7:D7:BD:BF:70:07:D8:B8:EB:A7
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7z6gXWWITKZ0aqfXvb9wB9i466c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.116.228.0/23
                  212.116.237.0-212.116.239.255
                  212.116.243.0-212.116.245.255

    Signature Algorithm: sha256WithRSAEncryption
         9f:4b:1e:d7:60:1b:14:81:11:31:fb:a6:d3:1b:fd:03:de:44:
         25:9b:ee:aa:0b:38:f1:f1:c1:e7:6c:89:be:15:a4:c5:91:49:
         24:11:02:fa:c3:c4:ca:f9:da:35:4f:e8:8e:bc:f0:71:12:99:
         4d:af:80:1a:06:fb:f5:49:79:0d:54:ba:9d:39:85:f8:da:a6:
         ee:50:e7:42:57:d6:49:92:15:d2:3f:d5:c4:41:b3:1d:3c:a5:
         00:7e:a4:41:d9:37:07:69:ce:39:55:29:fb:fa:ac:25:80:37:
         c7:e6:3b:98:50:5a:2e:fc:fc:6d:93:81:f0:5d:ef:56:d9:28:
         dc:d3:3d:dd:86:62:a8:2c:39:4b:89:0e:7f:ff:a6:c3:c0:69:
         9d:7f:17:18:75:e7:61:08:e0:98:fe:3c:6b:20:00:e7:99:92:
         a1:dd:d0:97:26:59:a2:c4:5a:4e:49:fa:45:8b:a4:f8:f5:4a:
         85:16:de:f0:28:5b:6d:ca:bd:c9:f9:5e:17:dd:5e:8d:d9:f7:
         a2:49:5b:60:1a:0d:65:38:5c:de:37:e6:f7:ce:e0:96:8e:a4:
         cf:1f:45:3c:b3:64:a9:c1:a2:ab:4c:d9:14:53:aa:2d:34:47:
         e3:a7:8b:f9:42:71:81:d0:44:b4:62:05:af:76:d4:96:04:55:
         a2:63:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:30 2026 by rpki-client