This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CtzpmgLeYOUXQZh7rPxYDJAR7mI.roa
File:                     CtzpmgLeYOUXQZh7rPxYDJAR7mI.roa (raw, json)
Hash identifier:          SCvYr3tjwm4flp9hJAx/G2i/dyi6YGA4JMI51g4fq68=
Subject key identifier:   0A:DC:E9:9A:02:DE:60:E5:17:41:98:7B:AC:FC:58:0C:90:11:EE:62
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       019C1AAADD2AD8CA60F1A51C8718C2E4699C
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CtzpmgLeYOUXQZh7rPxYDJAR7mI.roa
Signing time:             Sun 01 Feb 2026 19:25:31 +0000
ROA not before:           Sun 01 Feb 2026 19:25:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48031
IP address blocks:        130.49.4.0/24 maxlen: 24
                          130.49.7.0/24 maxlen: 24
                          130.49.13.0/24 maxlen: 24
                          130.49.18.0/24 maxlen: 24
                          130.49.19.0/24 maxlen: 24
                          130.49.23.0/24 maxlen: 24
                          130.49.26.0/24 maxlen: 24
                          130.49.28.0/24 maxlen: 24
                          130.49.33.0/24 maxlen: 24
                          130.49.34.0/24 maxlen: 24
                          130.49.38.0/24 maxlen: 24
                          130.49.41.0/24 maxlen: 24
                          130.49.43.0/24 maxlen: 24
                          130.49.48.0/24 maxlen: 24
                          130.49.49.0/24 maxlen: 24
                          130.49.54.0/24 maxlen: 24
                          130.49.56.0/24 maxlen: 24
                          130.49.59.0/24 maxlen: 24
                          130.49.63.0/24 maxlen: 24
                          130.49.64.0/24 maxlen: 24
                          130.49.69.0/24 maxlen: 24
                          130.49.71.0/24 maxlen: 24
                          130.49.74.0/24 maxlen: 24
                          130.49.82.0/24 maxlen: 24
                          130.49.83.0/24 maxlen: 24
                          130.49.88.0/24 maxlen: 24
                          130.49.90.0/24 maxlen: 24
                          130.49.93.0/24 maxlen: 24
                          130.49.97.0/24 maxlen: 24
                          130.49.98.0/24 maxlen: 24
                          130.49.103.0/24 maxlen: 24
                          130.49.105.0/24 maxlen: 24
                          130.49.109.0/24 maxlen: 24
                          130.49.116.0/24 maxlen: 24
                          130.49.118.0/24 maxlen: 24
                          130.49.123.0/24 maxlen: 24
                          130.49.124.0/24 maxlen: 24
                          138.249.29.0/24 maxlen: 24
                          138.249.30.0/24 maxlen: 24
                          138.249.31.0/24 maxlen: 24
                          138.249.36.0/24 maxlen: 24
                          138.249.38.0/24 maxlen: 24
                          138.249.39.0/24 maxlen: 24
                          138.249.44.0/24 maxlen: 24
                          138.249.45.0/24 maxlen: 24
                          138.249.47.0/24 maxlen: 24
                          138.249.48.0/24 maxlen: 24
                          138.249.49.0/24 maxlen: 24
                          138.249.50.0/24 maxlen: 24
                          138.249.51.0/24 maxlen: 24
                          138.249.53.0/24 maxlen: 24
                          138.249.55.0/24 maxlen: 24
                          138.249.57.0/24 maxlen: 24
                          138.249.60.0/24 maxlen: 24
                          138.249.61.0/24 maxlen: 24
                          138.249.62.0/24 maxlen: 24
                          138.249.64.0/24 maxlen: 24
                          138.249.65.0/24 maxlen: 24
                          138.249.66.0/24 maxlen: 24
                          138.249.67.0/24 maxlen: 24
                          138.249.68.0/24 maxlen: 24
                          138.249.69.0/24 maxlen: 24
                          138.249.70.0/24 maxlen: 24
                          138.249.71.0/24 maxlen: 24
                          138.249.72.0/24 maxlen: 24
                          138.249.73.0/24 maxlen: 24
                          138.249.74.0/24 maxlen: 24
                          138.249.76.0/24 maxlen: 24
                          138.249.78.0/24 maxlen: 24
                          138.249.79.0/24 maxlen: 24
                          138.249.80.0/24 maxlen: 24
                          138.249.81.0/24 maxlen: 24
                          138.249.82.0/24 maxlen: 24
                          138.249.83.0/24 maxlen: 24
                          138.249.85.0/24 maxlen: 24
                          138.249.87.0/24 maxlen: 24
                          138.249.89.0/24 maxlen: 24
                          138.249.92.0/24 maxlen: 24
                          138.249.93.0/24 maxlen: 24
                          138.249.94.0/24 maxlen: 24
                          138.249.95.0/24 maxlen: 24
                          138.249.96.0/24 maxlen: 24
                          138.249.97.0/24 maxlen: 24
                          138.249.99.0/24 maxlen: 24
                          138.249.100.0/24 maxlen: 24
                          138.249.101.0/24 maxlen: 24
                          138.249.111.0/24 maxlen: 24
                          138.249.113.0/24 maxlen: 24
                          138.249.152.0/24 maxlen: 24
                          138.249.159.0/24 maxlen: 24
                          138.249.164.0/24 maxlen: 24
                          138.249.183.0/24 maxlen: 24
                          138.249.192.0/24 maxlen: 24
                          138.249.216.0/24 maxlen: 24
                          138.249.225.0/24 maxlen: 24
                          138.249.230.0/24 maxlen: 24
                          155.212.33.0/24 maxlen: 24
                          155.212.40.0/24 maxlen: 24
                          155.212.42.0/24 maxlen: 24
                          155.212.47.0/24 maxlen: 24
                          155.212.48.0/24 maxlen: 24
                          155.212.52.0/24 maxlen: 24
                          155.212.54.0/24 maxlen: 24
                          155.212.57.0/24 maxlen: 24
                          155.212.61.0/24 maxlen: 24
                          155.212.62.0/24 maxlen: 24
                          155.212.68.0/24 maxlen: 24
                          155.212.69.0/24 maxlen: 24
                          155.212.73.0/24 maxlen: 24
                          155.212.76.0/24 maxlen: 24
                          155.212.78.0/24 maxlen: 24
                          155.212.83.0/24 maxlen: 24
                          155.212.84.0/24 maxlen: 24
                          155.212.88.0/24 maxlen: 24
                          155.212.90.0/24 maxlen: 24
                          155.212.93.0/24 maxlen: 24
                          155.212.97.0/24 maxlen: 24
                          155.212.98.0/24 maxlen: 24
                          155.212.103.0/24 maxlen: 24
                          155.212.105.0/24 maxlen: 24
                          155.212.112.0/24 maxlen: 24
                          155.212.116.0/24 maxlen: 24
                          155.212.118.0/24 maxlen: 24
                          155.212.123.0/24 maxlen: 24
                          155.212.124.0/24 maxlen: 24
                          170.168.205.0/24 maxlen: 24
                          170.168.213.0/24 maxlen: 24
                          170.168.214.0/24 maxlen: 24
                          170.168.222.0/24 maxlen: 24
                          170.168.229.0/24 maxlen: 24
                          170.168.231.0/24 maxlen: 24
                          170.168.239.0/24 maxlen: 24
                          170.168.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1a:aa:dd:2a:d8:ca:60:f1:a5:1c:87:18:c2:e4:69:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Feb  1 19:25:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0adce99a02de60e51741987bacfc580c9011ee62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:a3:29:68:8d:6b:a5:94:0e:4b:25:54:99:
                    5a:e6:a5:23:d6:a1:20:55:13:5b:b5:bf:d3:4b:bb:
                    ba:c9:db:66:d6:54:98:97:76:73:c6:ca:be:7e:e1:
                    7a:3f:84:21:d4:7b:a0:46:c7:8b:ff:ac:b8:23:b4:
                    f6:c6:f7:56:eb:b5:8a:73:91:e0:fb:da:71:ae:03:
                    1f:38:d9:12:67:16:e6:d2:31:7f:b5:e3:c0:0a:47:
                    1f:7d:93:e8:b8:b6:67:a6:9b:4b:8e:5b:c4:f3:bd:
                    b8:d2:32:e9:d7:55:23:93:bb:c3:bc:bb:e2:d1:5d:
                    3b:14:f1:f0:6d:6e:0b:6e:55:ed:0e:9f:af:d3:db:
                    45:59:e0:0d:4f:8b:73:03:81:14:3d:bf:59:ce:78:
                    98:13:2a:e4:02:87:f4:a0:71:3c:5f:7b:2a:17:01:
                    86:db:91:e4:99:be:aa:82:37:0b:54:1b:d8:37:cf:
                    55:a4:d4:7a:4f:9c:27:d9:6b:3b:59:e7:ee:36:7b:
                    f3:46:83:4f:fc:7c:52:0a:70:12:80:70:af:9b:fb:
                    68:3d:af:56:80:6d:b0:15:54:c0:f8:dc:49:6d:2a:
                    36:77:15:23:3c:51:01:f5:ff:de:1c:fa:67:a2:d1:
                    ed:8d:67:54:9f:62:be:b4:08:98:88:2b:93:bf:1d:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DC:E9:9A:02:DE:60:E5:17:41:98:7B:AC:FC:58:0C:90:11:EE:62
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CtzpmgLeYOUXQZh7rPxYDJAR7mI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.49.4.0/24
                  130.49.7.0/24
                  130.49.13.0/24
                  130.49.18.0/23
                  130.49.23.0/24
                  130.49.26.0/24
                  130.49.28.0/24
                  130.49.33.0-130.49.34.255
                  130.49.38.0/24
                  130.49.41.0/24
                  130.49.43.0/24
                  130.49.48.0/23
                  130.49.54.0/24
                  130.49.56.0/24
                  130.49.59.0/24
                  130.49.63.0-130.49.64.255
                  130.49.69.0/24
                  130.49.71.0/24
                  130.49.74.0/24
                  130.49.82.0/23
                  130.49.88.0/24
                  130.49.90.0/24
                  130.49.93.0/24
                  130.49.97.0-130.49.98.255
                  130.49.103.0/24
                  130.49.105.0/24
                  130.49.109.0/24
                  130.49.116.0/24
                  130.49.118.0/24
                  130.49.123.0-130.49.124.255
                  138.249.29.0-138.249.31.255
                  138.249.36.0/24
                  138.249.38.0/23
                  138.249.44.0/23
                  138.249.47.0-138.249.51.255
                  138.249.53.0/24
                  138.249.55.0/24
                  138.249.57.0/24
                  138.249.60.0-138.249.62.255
                  138.249.64.0-138.249.74.255
                  138.249.76.0/24
                  138.249.78.0-138.249.83.255
                  138.249.85.0/24
                  138.249.87.0/24
                  138.249.89.0/24
                  138.249.92.0-138.249.97.255
                  138.249.99.0-138.249.101.255
                  138.249.111.0/24
                  138.249.113.0/24
                  138.249.152.0/24
                  138.249.159.0/24
                  138.249.164.0/24
                  138.249.183.0/24
                  138.249.192.0/24
                  138.249.216.0/24
                  138.249.225.0/24
                  138.249.230.0/24
                  155.212.33.0/24
                  155.212.40.0/24
                  155.212.42.0/24
                  155.212.47.0-155.212.48.255
                  155.212.52.0/24
                  155.212.54.0/24
                  155.212.57.0/24
                  155.212.61.0-155.212.62.255
                  155.212.68.0/23
                  155.212.73.0/24
                  155.212.76.0/24
                  155.212.78.0/24
                  155.212.83.0-155.212.84.255
                  155.212.88.0/24
                  155.212.90.0/24
                  155.212.93.0/24
                  155.212.97.0-155.212.98.255
                  155.212.103.0/24
                  155.212.105.0/24
                  155.212.112.0/24
                  155.212.116.0/24
                  155.212.118.0/24
                  155.212.123.0-155.212.124.255
                  170.168.205.0/24
                  170.168.213.0-170.168.214.255
                  170.168.222.0/24
                  170.168.229.0/24
                  170.168.231.0/24
                  170.168.239.0/24
                  170.168.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:e7:69:f9:95:3a:12:ea:f3:f8:2f:c1:a7:a5:d4:5d:4b:
         17:52:68:0d:3e:4c:38:0e:b4:07:65:06:af:ed:35:e4:d2:ed:
         50:b7:56:b9:cd:e3:99:9c:be:9a:08:dc:fd:a2:45:66:fc:3e:
         9a:0f:fa:34:23:c6:5e:13:e8:e9:8c:5f:a4:d5:6b:1f:99:7e:
         5a:ab:1a:81:9e:71:57:ef:0c:4d:ac:74:f9:73:84:54:5e:77:
         bb:b1:8c:04:ff:56:22:77:0f:99:d5:32:c1:b0:b2:ba:f9:2b:
         79:73:fa:fe:5d:cb:ec:a3:11:bd:81:07:e5:1e:59:c3:f8:71:
         90:fd:21:cb:da:d7:0d:4b:25:1b:12:df:1a:1a:bc:e6:80:6d:
         ed:a8:15:c1:9d:64:4c:18:33:5f:9f:06:b9:8b:47:72:d5:9d:
         13:8a:93:4c:dd:12:cd:6b:ff:32:ef:88:fd:84:27:c9:48:1d:
         ac:24:83:e0:32:45:e5:9b:62:31:7a:a5:6b:af:8d:71:d6:cf:
         55:56:23:c7:50:b4:e0:f4:13:62:b1:97:40:c4:e9:f3:c7:29:
         8d:0d:c8:33:3c:30:c4:2a:aa:d0:02:42:a9:c2:f0:09:46:21:
         3b:0e:5e:b5:a3:86:2e:a8:6c:93:8f:c5:c7:c0:8a:17:78:cc:
         d3:05:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 23:34:21 2026 by rpki-client