This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/XiklanRbiidoE85zKpbvsUmN5qA.roa
File:                     XiklanRbiidoE85zKpbvsUmN5qA.roa (raw, json)
Hash identifier:          8135ww+Xdljchx0NgMI539w6J7mtMHiGCI+yUaoZKJc=
Subject key identifier:   5E:29:25:6A:74:5B:8A:27:68:13:CE:73:2A:96:EF:B1:49:8D:E6:A0
Certificate issuer:       /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial:       019B7758B37F9F706B17E52AB78844CCB049
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/XiklanRbiidoE85zKpbvsUmN5qA.roa
Signing time:             Thu 01 Jan 2026 02:17:40 +0000
ROA not before:           Thu 01 Jan 2026 02:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12392
IP address blocks:        62.197.64.0/18 maxlen: 18
                          62.197.64.0/20 maxlen: 20
                          62.197.80.0/20 maxlen: 20
                          62.197.96.0/20 maxlen: 20
                          62.197.112.0/20 maxlen: 20
                          78.129.0.0/17 maxlen: 17
                          78.129.0.0/20 maxlen: 20
                          78.129.16.0/20 maxlen: 20
                          78.129.32.0/20 maxlen: 20
                          78.129.48.0/20 maxlen: 20
                          78.129.64.0/20 maxlen: 20
                          78.129.80.0/20 maxlen: 20
                          78.129.96.0/20 maxlen: 20
                          78.129.112.0/20 maxlen: 20
                          82.212.128.0/18 maxlen: 18
                          82.212.128.0/20 maxlen: 20
                          82.212.144.0/20 maxlen: 20
                          82.212.160.0/20 maxlen: 20
                          82.212.176.0/20 maxlen: 20
                          85.26.0.0/17 maxlen: 17
                          85.26.0.0/20 maxlen: 20
                          85.26.16.0/20 maxlen: 20
                          85.26.32.0/20 maxlen: 20
                          85.26.48.0/20 maxlen: 20
                          85.26.64.0/20 maxlen: 20
                          85.26.80.0/20 maxlen: 20
                          85.26.96.0/20 maxlen: 20
                          85.26.112.0/20 maxlen: 20
                          85.27.0.0/17 maxlen: 17
                          85.27.32.0/20 maxlen: 20
                          85.27.48.0/20 maxlen: 20
                          85.201.0.0/16 maxlen: 16
                          85.201.0.0/20 maxlen: 20
                          85.201.16.0/20 maxlen: 20
                          85.201.32.0/20 maxlen: 20
                          85.201.48.0/20 maxlen: 20
                          85.201.64.0/20 maxlen: 20
                          85.201.80.0/20 maxlen: 20
                          85.201.96.0/20 maxlen: 20
                          85.201.112.0/20 maxlen: 20
                          85.201.128.0/20 maxlen: 20
                          85.201.144.0/20 maxlen: 20
                          85.201.160.0/20 maxlen: 20
                          85.201.176.0/20 maxlen: 20
                          85.201.192.0/20 maxlen: 20
                          85.201.208.0/20 maxlen: 20
                          85.201.224.0/20 maxlen: 20
                          85.201.240.0/20 maxlen: 20
                          95.182.128.0/17 maxlen: 17
                          95.182.128.0/20 maxlen: 20
                          95.182.144.0/20 maxlen: 20
                          95.182.192.0/20 maxlen: 20
                          95.182.208.0/20 maxlen: 20
                          95.182.224.0/20 maxlen: 20
                          95.182.240.0/20 maxlen: 20
                          109.88.0.0/15 maxlen: 15
                          109.88.0.0/20 maxlen: 20
                          109.88.16.0/20 maxlen: 20
                          109.88.32.0/20 maxlen: 20
                          109.88.48.0/20 maxlen: 20
                          109.88.64.0/20 maxlen: 20
                          109.88.80.0/20 maxlen: 20
                          109.88.96.0/19 maxlen: 19
                          109.88.128.0/19 maxlen: 19
                          109.88.160.0/20 maxlen: 20
                          109.88.176.0/20 maxlen: 20
                          109.88.192.0/20 maxlen: 20
                          109.88.208.0/20 maxlen: 20
                          109.88.224.0/20 maxlen: 20
                          109.88.240.0/20 maxlen: 20
                          109.89.0.0/20 maxlen: 20
                          109.89.16.0/20 maxlen: 20
                          109.89.32.0/20 maxlen: 20
                          109.89.48.0/20 maxlen: 20
                          109.89.64.0/20 maxlen: 20
                          109.89.80.0/20 maxlen: 20
                          109.89.96.0/20 maxlen: 20
                          109.89.112.0/20 maxlen: 20
                          109.89.128.0/20 maxlen: 20
                          109.89.144.0/20 maxlen: 20
                          109.89.160.0/20 maxlen: 20
                          109.89.176.0/20 maxlen: 20
                          109.89.192.0/20 maxlen: 20
                          109.89.208.0/20 maxlen: 20
                          109.89.224.0/20 maxlen: 20
                          109.89.240.0/20 maxlen: 20
                          149.154.192.0/18 maxlen: 18
                          185.3.160.0/22 maxlen: 22
                          212.68.192.0/18 maxlen: 18
                          212.68.192.0/20 maxlen: 20
                          212.68.208.0/20 maxlen: 20
                          212.68.224.0/20 maxlen: 20
                          212.68.240.0/20 maxlen: 20
                          213.189.160.0/19 maxlen: 19
                          213.189.160.0/20 maxlen: 20
                          213.189.176.0/20 maxlen: 20
                          213.213.192.0/18 maxlen: 18
                          213.213.192.0/20 maxlen: 20
                          213.213.208.0/20 maxlen: 20
                          213.213.224.0/20 maxlen: 20
                          213.213.240.0/20 maxlen: 20
                          217.15.224.0/20 maxlen: 20
                          2a02:2788::/32 maxlen: 32
                          2a02:2788::/40 maxlen: 40
                          2a02:2788:100::/40 maxlen: 40
                          2a02:2788:200::/40 maxlen: 40
                          2a02:2788:300::/40 maxlen: 40
                          2a02:2788:400::/40 maxlen: 40
                          2a02:2788:500::/40 maxlen: 40
                          2a02:2788:600::/40 maxlen: 40
                          2a02:2788:700::/40 maxlen: 40
                          2a02:2788:800::/40 maxlen: 40
                          2a02:2788:900::/40 maxlen: 40
                          2a02:2788:a00::/40 maxlen: 40
                          2a02:2788:b00::/40 maxlen: 40
                          2a02:2788:c00::/40 maxlen: 40
                          2a02:2788:d00::/40 maxlen: 40
                          2a02:2788:e00::/40 maxlen: 40
                          2a02:2788:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:b3:7f:9f:70:6b:17:e5:2a:b7:88:44:cc:b0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
        Validity
            Not Before: Jan  1 02:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5e29256a745b8a276813ce732a96efb1498de6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:db:38:3c:79:68:3d:48:5d:4c:ed:25:bd:b8:
                    88:2d:30:9f:20:7a:40:c0:4a:a4:b1:60:5e:5a:7f:
                    44:12:12:f0:f7:fa:40:8f:ac:8e:96:a1:2d:5d:8c:
                    cf:aa:a8:d2:16:6a:f0:ec:35:f0:27:4c:de:77:4e:
                    50:fd:55:b3:e7:4a:e8:03:e6:99:e1:32:76:80:cb:
                    64:1d:0a:be:39:e8:3b:ab:b7:5e:e8:79:8c:a8:0f:
                    3f:ce:8a:ea:84:10:90:02:57:19:40:d7:0f:9d:57:
                    03:24:f3:68:c7:a4:b5:df:e1:cc:55:0d:e5:e6:d4:
                    38:47:61:05:2f:32:7c:dc:03:48:05:9a:39:5b:fc:
                    9b:96:d9:29:23:0a:83:b7:af:f1:d6:27:ba:ed:7b:
                    22:33:e0:9c:d1:c6:4e:c5:1f:b1:e9:f3:3d:1b:8f:
                    62:58:38:59:08:8c:80:cf:6d:d9:52:42:e7:d9:81:
                    6b:f5:7e:3c:02:9e:d4:85:64:dc:de:b4:f6:53:0d:
                    81:84:66:33:ba:12:d4:fb:9a:16:5d:62:5e:50:b0:
                    98:33:04:dc:16:0c:72:8a:0f:20:8f:7e:9c:a1:41:
                    a3:c0:57:d1:c6:40:40:10:9a:25:87:b4:e8:47:ec:
                    ca:b2:a9:8f:79:80:f0:66:54:8b:52:59:98:8f:b2:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:29:25:6A:74:5B:8A:27:68:13:CE:73:2A:96:EF:B1:49:8D:E6:A0
            X509v3 Authority Key Identifier:
                keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/XiklanRbiidoE85zKpbvsUmN5qA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.197.64.0/18
                  78.129.0.0/17
                  82.212.128.0/18
                  85.26.0.0/17
                  85.27.0.0/17
                  85.201.0.0/16
                  95.182.128.0/17
                  109.88.0.0/15
                  149.154.192.0/18
                  185.3.160.0/22
                  212.68.192.0/18
                  213.189.160.0/19
                  213.213.192.0/18
                  217.15.224.0/20
                IPv6:
                  2a02:2788::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:74:a1:15:c2:15:d6:5c:9e:8e:86:c4:dc:24:25:f6:e8:
         6f:8c:e9:2d:14:e2:06:b7:9d:19:36:34:64:e1:0d:eb:15:3b:
         51:8b:32:96:08:97:0e:da:8d:74:3a:d6:ce:3f:a2:f3:80:3f:
         e3:fd:db:dd:6f:d2:2f:94:47:0f:14:ca:81:32:a3:a0:7e:8c:
         52:0f:5d:c6:2c:49:59:d4:09:6e:6f:48:6c:89:49:7c:c1:1c:
         aa:13:45:91:db:c7:82:29:28:2d:e1:39:47:ca:8c:6b:b3:20:
         9b:a3:8e:b1:20:01:68:ee:a4:ed:18:7f:8a:97:08:d6:1b:1d:
         25:f4:90:d6:9e:eb:68:fd:1a:df:6d:ff:1f:7e:37:84:37:61:
         2f:c2:54:28:04:5c:57:18:dd:6f:b0:3e:34:cd:78:2b:dd:1f:
         e4:ab:99:5c:a5:c9:ce:89:2a:ff:4b:f5:e4:c0:f4:d5:8b:36:
         f0:ed:6e:03:be:f2:d5:c4:be:44:31:b0:d7:d2:3b:89:5d:8a:
         2a:86:62:04:c6:d7:62:8f:60:5e:fe:02:30:cb:bc:c8:2c:21:
         da:6c:a3:07:45:d0:54:42:8b:c2:83:06:de:ba:12:3f:f5:0e:
         bb:a0:a2:0a:48:6b:01:8f:ed:10:15:02:c0:ae:af:f8:86:06:
         2a:70:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:27 2026 by rpki-client