This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/f3K6VBqM1ipEJ5BLcoHIVYY4Unk.roa
File:                     f3K6VBqM1ipEJ5BLcoHIVYY4Unk.roa (raw, json)
Hash identifier:          roT+gO8ccdUs8hjQsg+1r48iM3VN73FELsA2SOucN2U=
Subject key identifier:   7F:72:BA:54:1A:8C:D6:2A:44:27:90:4B:72:81:C8:55:86:38:52:79
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       019C50B34A38EF30A3970B48F064A31E6266
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/f3K6VBqM1ipEJ5BLcoHIVYY4Unk.roa
Signing time:             Thu 12 Feb 2026 07:14:12 +0000
ROA not before:           Thu 12 Feb 2026 07:14:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        185.46.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:50:b3:4a:38:ef:30:a3:97:0b:48:f0:64:a3:1e:62:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Feb 12 07:14:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f72ba541a8cd62a4427904b7281c85586385279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:f4:58:5a:24:7e:32:c1:8f:4d:a9:69:a9:
                    09:8e:67:dd:8d:59:fa:f2:a3:d0:a9:c8:d3:41:36:
                    76:36:a2:aa:cd:8f:de:d7:f0:a2:b1:7b:14:99:51:
                    34:ba:d9:4f:7b:c9:79:ac:9b:2c:7e:38:82:da:67:
                    48:e1:33:f7:70:4a:f2:4d:bd:a9:c8:87:10:30:66:
                    9a:9b:50:74:d8:2c:66:2d:a0:cc:5a:be:ac:7c:78:
                    73:c6:04:b6:dc:28:2e:a6:ce:d7:49:a2:27:54:29:
                    9d:49:64:c3:c3:bf:68:f6:84:94:c4:5a:2b:be:91:
                    db:32:8f:b4:71:8d:12:ca:df:63:d8:cf:9f:85:ef:
                    de:a5:88:64:2e:83:1d:6c:bc:46:3b:63:0c:7e:96:
                    66:de:1d:cc:2f:6a:39:b5:53:48:31:25:36:a3:aa:
                    b3:ec:98:20:18:d9:20:97:94:df:7f:5c:d1:b6:c6:
                    45:bd:c5:60:1e:1a:ba:82:ef:b6:a2:de:78:f4:36:
                    7e:b0:3a:1f:e4:9f:d7:b3:4e:a7:20:d4:ca:94:d7:
                    fe:30:0f:3a:d2:23:91:96:a7:5f:b3:d6:e6:c8:b1:
                    83:a7:b8:f1:a4:f0:cd:ff:7b:96:4f:0c:ea:fc:8a:
                    f8:49:40:8e:ba:ae:ee:b5:30:69:1a:a5:ef:80:c0:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:72:BA:54:1A:8C:D6:2A:44:27:90:4B:72:81:C8:55:86:38:52:79
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/f3K6VBqM1ipEJ5BLcoHIVYY4Unk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.46.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:06:a4:14:6d:68:1a:37:2c:79:20:28:6e:1a:2b:15:89:de:
         75:c2:7a:ff:66:98:14:1d:0f:25:05:c2:45:57:e1:ef:b9:31:
         ad:b0:07:ef:5e:96:f2:be:71:68:d2:d3:21:ac:82:2d:f0:b0:
         23:17:7f:d6:e0:7a:b9:c3:6a:aa:04:b0:e7:5b:15:b0:67:d1:
         bb:8a:eb:77:4c:c7:53:f8:df:55:cc:15:91:22:24:66:7a:f5:
         35:94:96:d6:9a:f6:4c:43:d1:83:dd:da:15:18:2a:f1:18:e0:
         7e:43:cf:02:c5:4a:9a:7c:ce:50:79:5d:9f:75:9a:d3:e9:e6:
         36:7d:43:1f:f8:4c:a9:18:d8:36:e2:7f:ba:16:e1:37:0b:0f:
         c7:ff:7f:34:9a:f2:66:50:f0:02:58:56:57:bb:80:57:93:c3:
         8e:64:e6:33:c7:6a:15:b0:3f:3a:04:48:ae:e4:26:f5:ff:82:
         6d:bc:99:b9:b6:ff:6e:8d:f9:31:aa:eb:9c:ec:ea:d6:db:72:
         a1:fc:17:4d:42:7f:e0:69:d3:38:c8:ea:a0:e8:46:c6:5d:73:
         9e:bf:b0:8a:d7:d3:ae:e4:fa:bb:22:f5:bf:6f:a8:e6:b6:20:
         ee:73:31:d8:b1:47:d8:2b:5f:29:24:dc:ae:cb:30:de:68:1b:
         48:d9:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:13 2026 by rpki-client