This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/19E50qchIIRYPEcBaHq7sGG5wI0.roa
File:                     19E50qchIIRYPEcBaHq7sGG5wI0.roa (raw, json)
Hash identifier:          eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=
Subject key identifier:   D7:D1:39:D2:A7:21:20:84:58:3C:47:01:68:7A:BB:B0:61:B9:C0:8D
Certificate issuer:       /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial:       019C50BC719045703BF0CA3A8EA0082BA362
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/19E50qchIIRYPEcBaHq7sGG5wI0.roa
Signing time:             Thu 12 Feb 2026 07:24:12 +0000
ROA not before:           Thu 12 Feb 2026 07:24:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62240
IP address blocks:        45.88.102.0/24 maxlen: 24
                          45.88.103.0/24 maxlen: 24
                          178.159.93.0/24 maxlen: 24
                          178.159.95.0/24 maxlen: 24
                          185.238.90.0/24 maxlen: 24
                          185.238.91.0/24 maxlen: 24
                          194.113.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:50:bc:71:90:45:70:3b:f0:ca:3a:8e:a0:08:2b:a3:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
        Validity
            Not Before: Feb 12 07:24:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7d139d2a7212084583c4701687abbb061b9c08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:4e:02:2b:f1:e6:21:5c:60:32:8f:35:cf:
                    99:53:e6:70:39:48:4e:07:08:2b:fb:d5:f8:ad:8f:
                    42:d4:72:a9:d0:79:f0:56:f1:d8:55:6a:0a:43:de:
                    18:0b:31:fe:80:9b:8b:23:5b:3a:1d:8b:ff:f0:e3:
                    5a:1b:82:3a:9e:d8:7e:b0:f0:46:aa:e3:14:d1:23:
                    4f:f4:ef:ff:d4:f6:56:e0:02:d3:d9:d9:d9:a7:18:
                    0f:df:a2:3e:da:34:6b:16:c6:48:fe:c9:41:fb:d9:
                    c4:45:71:bd:87:79:c2:6f:20:09:cd:df:09:eb:74:
                    39:7a:de:65:33:84:26:65:2b:2d:28:3e:48:9b:3e:
                    be:36:f9:b9:e7:58:a1:7f:bd:28:ac:86:71:9b:31:
                    35:25:ec:73:2d:fb:47:a9:54:6a:d2:94:41:1d:83:
                    5e:93:f3:a1:4b:7d:67:4f:3f:34:95:aa:78:ed:ca:
                    bc:06:c5:86:4a:7a:f4:52:00:68:37:f1:70:80:63:
                    9a:53:f5:af:60:16:d5:8d:08:95:93:c0:b3:65:7d:
                    c0:dd:59:cd:bd:bc:cf:cf:49:71:8b:25:37:ef:65:
                    36:76:5d:78:04:d9:cf:74:a8:ab:56:64:1c:58:29:
                    f6:0d:ec:cb:9f:f3:d1:e6:d3:39:aa:c9:67:d7:56:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D1:39:D2:A7:21:20:84:58:3C:47:01:68:7A:BB:B0:61:B9:C0:8D
            X509v3 Authority Key Identifier:
                keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/19E50qchIIRYPEcBaHq7sGG5wI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.102.0/23
                  178.159.93.0/24
                  178.159.95.0/24
                  185.238.90.0/23
                  194.113.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:e4:fd:49:2a:c4:b7:77:10:5b:00:7f:82:4a:12:51:e6:03:
         49:1c:d5:0e:99:36:ba:f0:62:cf:36:a4:9a:90:1b:9e:56:c7:
         ba:58:b8:cd:cc:51:bb:9d:bf:16:01:ef:f6:c5:38:09:5d:13:
         82:be:36:7a:d2:b0:a1:8a:06:d3:5d:e2:88:a5:a7:a3:86:66:
         2a:7d:d1:0f:c9:ba:09:82:a0:91:95:79:32:5f:2b:28:32:6b:
         ff:de:a9:6c:78:7d:75:20:4d:72:eb:6f:2c:c7:c2:a2:e7:dd:
         73:50:58:05:97:06:5a:b3:8e:a5:14:a6:2c:00:dd:66:e7:5d:
         1b:70:a7:a5:bf:a5:45:dc:04:76:aa:57:fa:da:15:f9:9a:f8:
         c9:a4:02:21:df:dc:84:95:e1:aa:b0:9e:45:cd:4c:6e:fa:8c:
         24:c5:04:7f:be:ec:92:04:31:3a:34:88:8a:d9:35:3b:92:bb:
         58:55:a6:42:70:6d:59:d0:4e:b4:d2:75:5a:c9:9f:fe:52:96:
         65:5d:68:16:60:ca:af:47:ef:d0:87:5e:b6:c0:00:10:bd:a1:
         b7:3a:12:64:e8:b7:6e:59:93:f2:15:6b:fb:fe:05:62:8c:98:
         e0:75:b4:47:81:9c:74:6c:e4:b3:d7:28:cf:71:95:b6:ae:f6:
         ef:c1:87:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 22:34:06 2026 by rpki-client