This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NbEtFp_RKjQRiWhJfnUZrtOJAoo.roa
File:                     NbEtFp_RKjQRiWhJfnUZrtOJAoo.roa (raw, json)
Hash identifier:          sZodoNlmeOSumO7VyTz+5/wgtao81IY3IULt/QllQ0U=
Subject key identifier:   35:B1:2D:16:9F:D1:2A:34:11:89:68:49:7E:75:19:AE:D3:89:02:8A
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C1338786817C55B364B18ACFEB31E7D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NbEtFp_RKjQRiWhJfnUZrtOJAoo.roa
Signing time:             Fri 02 Jan 2026 00:19:52 +0000
ROA not before:           Fri 02 Jan 2026 00:19:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     266757
IP address blocks:        92.118.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:38:78:68:17:c5:5b:36:4b:18:ac:fe:b3:1e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=35b12d169fd12a34118968497e7519aed389028a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:39:2c:a4:94:a6:4e:b3:a9:7c:e9:1e:ac:84:
                    ee:28:bc:fd:de:f6:34:68:f9:f5:c6:21:9f:0c:d8:
                    70:b6:25:7c:b3:9f:2f:6c:6d:04:13:c9:6f:4d:7f:
                    a9:c7:91:fe:f5:ed:41:6c:fd:ed:bf:dd:c5:8b:ff:
                    ca:26:3a:5c:67:0f:52:a1:4d:55:58:fe:06:41:6d:
                    1f:52:a9:0b:2c:c3:df:20:ae:6d:03:af:71:16:83:
                    4c:fc:c3:30:ce:30:a0:b1:3d:5a:34:89:8a:a7:19:
                    12:d9:da:7d:0c:bb:11:8e:7f:67:33:ec:7a:9b:e6:
                    00:3b:4e:de:be:65:fe:ac:7b:40:54:1d:f4:55:78:
                    17:07:80:2b:eb:a0:1a:f6:72:d1:77:04:4e:4a:62:
                    49:b3:2b:f4:db:2b:06:f7:3a:a3:b7:29:ca:e2:aa:
                    5c:58:e7:9c:a4:66:ed:c5:1e:0e:ba:21:1f:f4:c1:
                    f2:33:88:03:4d:48:ec:63:ce:75:b8:f5:e6:2e:a3:
                    8d:b3:53:9e:cf:47:e7:aa:f6:d4:74:b1:5f:fa:5a:
                    d7:33:62:48:f1:d0:b5:99:5a:77:05:59:d5:d5:79:
                    ad:88:5c:b0:1b:ac:eb:8f:80:84:3e:fa:83:6b:b0:
                    d7:07:89:ad:d8:be:4c:e1:fc:c8:1c:ad:83:43:af:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B1:2D:16:9F:D1:2A:34:11:89:68:49:7E:75:19:AE:D3:89:02:8A
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NbEtFp_RKjQRiWhJfnUZrtOJAoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:3b:3d:dc:56:f4:8e:af:89:34:ee:51:42:e0:ce:91:41:
         04:b4:93:db:17:98:13:3b:99:96:c5:8c:49:5c:11:5e:da:33:
         45:8e:b2:78:8a:18:f0:20:f3:cd:43:a1:e5:12:67:47:05:8e:
         98:bf:79:0f:30:a4:50:e1:80:a3:5e:57:f3:da:12:72:bb:7a:
         35:25:14:9b:3c:9f:e3:2e:e0:3b:58:9c:85:aa:67:d1:30:2f:
         37:81:86:cd:ab:01:f4:38:a2:24:b2:e2:71:17:35:f2:c1:32:
         41:57:ad:62:bb:5d:0a:73:d7:cf:aa:2f:c9:1a:36:d4:d2:61:
         53:44:1d:4d:90:60:04:7a:35:12:fa:fc:c8:61:2e:7e:0a:49:
         a9:80:9c:dc:1a:a6:58:ad:e4:aa:9b:24:9d:64:63:62:0d:58:
         bf:55:e5:be:90:5e:1a:b2:42:64:83:a3:5a:5e:ba:f3:48:c0:
         77:69:f5:37:4c:fe:0d:24:e9:2a:30:6e:b1:f6:b7:0f:b4:c4:
         a0:76:4b:73:5d:e5:ac:66:e3:a5:dc:d4:09:4f:8e:7a:f6:10:
         8c:3a:47:ce:c2:40:17:66:c9:cd:9c:b2:1c:5d:d0:cb:8b:f0:
         3b:91:44:97:26:e8:37:00:e3:d1:d0:9f:24:0e:d6:b8:4d:4b:
         25:83:08:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8Ezh4aBfFWzZLGKz+sx59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWIxMmQxNjlmZDEyYTM0MTE4OTY4NDk3ZTc1MTlhZWQzODkwMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTkspJSmTrOpfOkerITuKLz93vY0
aPn1xiGfDNhwtiV8s58vbG0EE8lvTX+px5H+9e1BbP3tv93Fi//KJjpcZw9SoU1V
WP4GQW0fUqkLLMPfIK5tA69xFoNM/MMwzjCgsT1aNImKpxkS2dp9DLsRjn9nM+x6
m+YAO07evmX+rHtAVB30VXgXB4Ar66Aa9nLRdwROSmJJsyv02ysG9zqjtynK4qpc
WOecpGbtxR4OuiEf9MHyM4gDTUjsY851uPXmLqONs1Oez0fnqvbUdLFf+lrXM2JI
8dC1mVp3BVnV1XmtiFywG6zrj4CEPvqDa7DXB4mt2L5M4fzIHK2DQ69w+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDWxLRaf0So0EYloSX51Ga7TiQKKMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvTmJFdEZwX1JLalFSaVdoSmZuVVpydE9KQW9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHa1MA0G
CSqGSIb3DQEBCwUAA4IBAQA56zs93Fb0jq+JNO5RQuDOkUEEtJPbF5gTO5mWxYxJ
XBFe2jNFjrJ4ihjwIPPNQ6HlEmdHBY6Yv3kPMKRQ4YCjXlfz2hJyu3o1JRSbPJ/j
LuA7WJyFqmfRMC83gYbNqwH0OKIksuJxFzXywTJBV61iu10Kc9fPqi/JGjbU0mFT
RB1NkGAEejUS+vzIYS5+CkmpgJzcGqZYreSqmySdZGNiDVi/VeW+kF4askJkg6Na
XrrzSMB3afU3TP4NJOkqMG6x9rcPtMSgdktzXeWsZuOl3NQJT4569hCMOkfOwkAX
ZsnNnLIcXdDLi/A7kUSXJug3AOPR0J8kDta4TUslgwg5
-----END CERTIFICATE-----
Generated at Fri Jan 23 21:37:17 2026 by rpki-client