This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/4mswoibs9zHYGqVmo5ffFlaKK_s.roa
File:                     4mswoibs9zHYGqVmo5ffFlaKK_s.roa (raw, json)
Hash identifier:          vsUWlT6iiQdJpYbddTQgSLG85pu2uiMcgJS9B3sHOLQ=
Subject key identifier:   E2:6B:30:A2:26:EC:F7:31:D8:1A:A5:66:A3:97:DF:16:56:8A:2B:FB
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       019C351EBE32E8D6A81DF7D3685E5DA8EAAD
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/4mswoibs9zHYGqVmo5ffFlaKK_s.roa
Signing time:             Fri 06 Feb 2026 22:42:12 +0000
ROA not before:           Fri 06 Feb 2026 22:42:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203273
IP address blocks:        83.147.192.0/24 maxlen: 24
                          83.147.216.0/24 maxlen: 24
                          83.147.222.0/24 maxlen: 24
                          83.147.252.0/24 maxlen: 24
                          83.147.253.0/24 maxlen: 24
                          83.147.254.0/24 maxlen: 24
                          83.147.255.0/24 maxlen: 24
                          91.186.212.0/24 maxlen: 24
                          91.186.213.0/24 maxlen: 24
                          91.186.216.0/24 maxlen: 24
                          91.186.217.0/24 maxlen: 24
                          91.186.218.0/24 maxlen: 24
                          91.186.219.0/24 maxlen: 24
                          178.253.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:35:1e:be:32:e8:d6:a8:1d:f7:d3:68:5e:5d:a8:ea:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Feb  6 22:42:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e26b30a226ecf731d81aa566a397df16568a2bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:e2:44:55:6b:4f:36:70:b2:4e:f8:74:47:
                    10:b3:c5:83:f0:92:73:df:c3:40:c7:7d:1b:ea:2a:
                    b3:7a:6e:27:92:46:1e:8b:25:a8:90:31:5b:57:02:
                    2a:c8:2c:bc:f8:82:d3:32:7c:01:f4:d2:ab:14:97:
                    8a:a5:6a:d7:9a:7e:57:34:dd:70:cf:88:46:98:53:
                    25:69:bd:83:a5:5b:98:9e:8f:e6:7a:6a:25:72:af:
                    38:b4:e7:7a:ca:0c:ee:37:1e:e9:1f:a3:3a:06:79:
                    10:3c:9b:d8:db:18:76:84:35:d8:f6:4e:ae:2a:9c:
                    59:51:8e:fe:c5:95:d5:66:4d:05:90:b9:60:8d:a0:
                    bf:de:c6:9f:4e:ea:eb:4d:57:8e:86:1e:ee:a9:c0:
                    58:b4:58:f5:14:01:df:cf:be:81:0f:70:57:a8:93:
                    47:38:9f:8f:91:35:f7:b1:d0:fd:0d:e6:3a:67:0d:
                    e4:01:a7:c4:27:ad:6f:b5:c6:07:b7:44:9e:8b:8d:
                    cf:44:7e:7f:54:ae:79:75:cf:a7:d4:f4:77:9c:a5:
                    ce:40:65:a9:66:21:81:69:82:df:05:0b:b3:ee:87:
                    b3:9e:07:f3:1e:b2:22:f8:f3:08:67:11:65:cc:41:
                    64:c3:ea:d2:32:3d:04:c2:2b:b2:d3:80:b6:e1:ba:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6B:30:A2:26:EC:F7:31:D8:1A:A5:66:A3:97:DF:16:56:8A:2B:FB
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/4mswoibs9zHYGqVmo5ffFlaKK_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.192.0/24
                  83.147.216.0/24
                  83.147.222.0/24
                  83.147.252.0/22
                  91.186.212.0/23
                  91.186.216.0/22
                  178.253.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9d:b9:73:45:1c:5a:98:bf:ef:db:01:6d:9b:17:6b:40:ef:
         44:28:5e:30:95:83:58:08:48:70:58:58:60:bd:6c:ab:b8:31:
         21:53:5f:23:92:6e:12:52:c9:72:10:b2:3d:8d:d6:87:ce:54:
         cb:ee:58:fb:92:37:a6:4e:7b:f1:25:94:5e:44:96:81:06:10:
         0f:f8:40:72:b7:16:22:92:3c:83:76:45:50:10:09:60:28:a7:
         df:0a:a4:05:f8:65:35:e8:be:e8:eb:4a:18:aa:d9:20:89:c5:
         b2:f9:f1:ee:10:33:61:83:09:a5:6b:d7:06:68:92:42:a0:b9:
         2b:e4:3f:b4:59:55:e8:0c:55:0d:28:54:03:ae:99:d1:4a:72:
         81:c6:79:4d:a2:b9:1b:75:c9:f4:e4:64:7b:8b:2c:74:fc:80:
         78:fa:45:94:81:5c:47:db:09:f9:0d:15:af:23:d2:35:2c:bd:
         f1:53:18:89:1c:6d:dc:f5:ba:6f:89:d2:9a:d0:78:20:c6:71:
         b9:73:7a:c9:eb:37:85:15:b8:c2:44:11:fa:9f:7c:3d:78:fe:
         9f:13:f4:c5:54:86:60:6f:56:25:82:0d:d8:a4:1f:da:0f:81:
         75:62:2e:76:3d:4e:75:12:b5:0a:5f:7c:8b:9b:5a:1f:e8:63:
         73:db:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:38 2026 by rpki-client