This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/9-IC9dBOeeDZCivehu5cN4EjGv8.roa
File:                     9-IC9dBOeeDZCivehu5cN4EjGv8.roa (raw, json)
Hash identifier:          Kby9dIZQ0GImMgg+obbrltw28tTrszttkGIYEbNds+8=
Subject key identifier:   F7:E2:02:F5:D0:4E:79:E0:D9:0A:2B:DE:86:EE:5C:37:81:23:1A:FF
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       019C1AAADBB188435CCCC71E23A3622F793B
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/9-IC9dBOeeDZCivehu5cN4EjGv8.roa
Signing time:             Sun 01 Feb 2026 19:25:30 +0000
ROA not before:           Sun 01 Feb 2026 19:25:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33993
IP address blocks:        138.249.129.0/24 maxlen: 24
                          138.249.130.0/24 maxlen: 24
                          138.249.160.0/24 maxlen: 24
                          138.249.162.0/24 maxlen: 24
                          138.249.163.0/24 maxlen: 24
                          138.249.166.0/24 maxlen: 24
                          138.249.171.0/24 maxlen: 24
                          138.249.187.0/24 maxlen: 24
                          138.249.203.0/24 maxlen: 24
                          138.249.217.0/24 maxlen: 24
                          138.249.219.0/24 maxlen: 24
                          138.249.224.0/24 maxlen: 24
                          138.249.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1a:aa:db:b1:88:43:5c:cc:c7:1e:23:a3:62:2f:79:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Feb  1 19:25:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7e202f5d04e79e0d90a2bde86ee5c3781231aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:75:63:4b:d7:5b:e5:ad:2d:df:4b:25:83:
                    17:91:2e:7b:7b:50:1e:b3:7e:ab:87:2a:26:d3:d1:
                    be:3f:ba:86:bd:04:6d:6e:f1:ab:12:86:19:26:51:
                    c2:89:85:8d:a6:8c:b5:23:70:6a:50:ca:b6:ff:d3:
                    f0:e5:63:cd:67:de:3a:3d:c8:d4:1d:2f:2a:a0:da:
                    cd:11:fb:cd:a4:b6:79:b3:2f:2f:d1:5e:e2:a7:7c:
                    6b:dd:5b:d9:68:8a:90:9b:33:0b:d5:a7:8b:0d:8f:
                    e6:25:04:f4:e0:96:38:89:a4:6a:e7:a8:26:0d:d5:
                    93:fa:79:f0:ad:cd:59:ab:a5:30:8c:96:f9:cf:22:
                    02:5f:25:7f:0f:20:f3:08:32:9e:1a:7d:15:46:63:
                    e0:01:32:26:c2:91:34:7d:46:9b:47:96:bb:1f:19:
                    27:91:81:5d:a7:e3:93:aa:70:99:b7:bd:70:61:62:
                    43:2d:ee:e6:dd:42:a4:5b:fb:27:b9:3d:7e:a3:74:
                    fc:66:51:9a:0d:b1:26:48:9e:af:2d:64:8a:2b:1a:
                    85:f2:96:8f:ed:84:0e:3c:ef:bc:3a:74:7d:a9:50:
                    99:d5:20:9d:ca:11:27:64:94:b8:ea:84:60:d8:86:
                    ff:58:fa:3f:bd:b7:1b:9b:43:59:17:91:cc:4a:f9:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E2:02:F5:D0:4E:79:E0:D9:0A:2B:DE:86:EE:5C:37:81:23:1A:FF
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/9-IC9dBOeeDZCivehu5cN4EjGv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.249.129.0-138.249.130.255
                  138.249.160.0/24
                  138.249.162.0/23
                  138.249.166.0/24
                  138.249.171.0/24
                  138.249.187.0/24
                  138.249.203.0/24
                  138.249.217.0/24
                  138.249.219.0/24
                  138.249.224.0/24
                  138.249.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a6:4e:f5:70:70:53:ee:a9:20:36:25:3f:f8:94:ad:eb:8b:
         c3:4a:a0:df:7a:97:b2:91:44:8d:46:7d:87:53:b9:a5:81:86:
         0f:67:b0:a0:fa:dd:4a:a8:01:cd:1f:e3:22:c5:cd:0b:63:bf:
         58:32:2d:b4:9d:2a:75:c6:f1:0f:74:5c:2a:24:97:0a:2b:96:
         77:cf:d7:2c:c2:5d:9e:c3:fd:2c:75:a2:b9:0c:9b:55:c9:e9:
         53:29:a7:2e:2b:31:45:ea:7a:5e:a6:74:2f:f5:4c:7e:07:f5:
         7d:f9:dd:2c:db:ac:6a:de:f8:bd:e4:60:70:e5:d9:a6:34:53:
         ed:11:52:30:64:c9:e8:17:e1:13:51:a6:de:80:07:1b:12:bf:
         fa:f3:99:90:72:bc:9e:b0:6b:1f:a6:36:7c:ab:cf:2d:1c:79:
         6a:4d:69:27:25:20:76:f3:18:47:c8:b6:a8:1b:c4:1e:ce:e3:
         41:b9:5d:27:1e:77:56:6c:66:a7:9b:73:15:a5:f7:6a:dc:73:
         b0:9e:11:89:1e:60:47:47:21:ff:c9:de:9b:87:aa:6e:57:ca:
         f4:8a:e6:dd:84:68:94:92:85:bc:f1:a9:4d:05:63:9d:59:17:
         92:05:b4:e8:ad:5f:68:ac:8f:12:2f:b5:a6:57:eb:d5:3b:22:
         62:27:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 23:34:23 2026 by rpki-client