This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/nRusnjyVlPOUWGzXuB9NY-6sv20.roa
File:                     nRusnjyVlPOUWGzXuB9NY-6sv20.roa (raw, json)
Hash identifier:          A/FjYrK1itnVBNQUvd3X2LZZ5EuY9pjPUFuiUVmHNl4=
Subject key identifier:   9D:1B:AC:9E:3C:95:94:F3:94:58:6C:D7:B8:1F:4D:63:EE:AC:BF:6D
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       019C464108CC88D54A90A2D23D91E317EBB8
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/nRusnjyVlPOUWGzXuB9NY-6sv20.roa
Signing time:             Tue 10 Feb 2026 06:33:12 +0000
ROA not before:           Tue 10 Feb 2026 06:33:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        81.21.0.0/24 maxlen: 24
                          176.57.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Feb 2026 09:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:46:41:08:cc:88:d5:4a:90:a2:d2:3d:91:e3:17:eb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Feb 10 06:33:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9d1bac9e3c9594f394586cd7b81f4d63eeacbf6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c5:ae:ba:5f:61:2e:74:bd:fd:fc:e7:11:5b:
                    d6:b3:92:03:17:b4:66:d3:06:24:1b:94:7a:7e:5e:
                    63:c9:b8:37:4a:25:28:61:d6:74:ba:35:d5:ae:63:
                    19:8c:39:de:0c:50:4a:d2:0e:08:3b:eb:4e:0b:6d:
                    6a:a5:98:b5:cb:0f:7f:3c:83:c9:de:40:09:f5:d5:
                    3e:21:86:0b:5d:81:f8:0b:2b:72:d0:d5:27:1d:62:
                    13:53:c0:df:83:b0:8e:1f:b0:c8:fe:7b:ea:75:e2:
                    29:01:b9:1b:db:73:a4:cf:55:11:92:c8:2d:4e:e7:
                    f1:7f:d9:f5:1f:8c:18:67:a1:c0:5f:80:7d:67:b4:
                    53:73:a9:b5:de:e0:90:6c:3f:07:3a:bf:e8:4d:6e:
                    fe:90:d5:1f:a4:86:41:9b:f8:75:e6:dc:7c:20:b4:
                    41:dd:54:6b:12:24:fc:9d:f4:90:b6:f9:e0:75:9a:
                    6f:e9:e1:77:82:fd:20:0d:2f:19:bb:ba:95:77:32:
                    61:68:fd:36:b2:b2:e4:f0:08:f5:c5:e7:45:e2:ef:
                    81:c5:2c:d0:fd:ed:8c:50:1d:93:aa:37:32:10:3f:
                    be:ba:70:a1:58:4c:04:eb:10:78:0f:b6:50:a0:4c:
                    24:8e:aa:7f:4f:a1:de:6a:7f:b8:7f:ae:58:c5:f5:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1B:AC:9E:3C:95:94:F3:94:58:6C:D7:B8:1F:4D:63:EE:AC:BF:6D
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/nRusnjyVlPOUWGzXuB9NY-6sv20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.21.0.0/24
                  176.57.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:84:0a:f0:b2:ca:34:a6:5c:7c:59:ad:3f:89:ec:ba:bd:
         ad:3e:e6:50:b5:74:22:82:7f:d5:fa:7b:5d:2a:43:2e:c8:43:
         01:90:66:3b:2d:88:e6:c4:9f:df:b9:a0:d8:d3:d8:f9:f4:80:
         86:64:e3:c0:b3:0e:66:d0:55:29:1e:91:72:71:2d:dc:d9:cd:
         d9:64:e8:47:ef:db:d0:e4:69:df:dd:23:4c:8c:b0:56:de:3d:
         23:0e:ca:d9:66:07:aa:85:be:97:a8:eb:22:50:57:ef:1d:22:
         74:eb:f8:96:67:62:bf:7e:e7:e0:57:8a:3f:12:01:8e:e7:39:
         a7:33:a6:93:0a:d4:c8:25:8c:a8:b8:58:b9:7d:cd:71:11:2c:
         49:fe:dd:61:00:35:e6:d3:aa:37:c7:3d:84:09:19:ae:0b:d0:
         d5:1a:4d:b3:e8:03:be:bf:cb:ea:de:d6:75:fa:aa:bb:9f:2b:
         df:de:02:fb:34:87:b3:d1:2f:d4:41:3a:55:5e:45:5d:e0:5f:
         90:57:a5:11:96:8f:06:ae:53:e7:65:54:43:fc:4d:08:2c:2f:
         a8:49:64:3e:0c:ea:4d:a1:ac:90:59:e8:b9:4d:4e:f7:88:01:
         cc:dc:ac:7e:a6:e0:3b:26:39:34:1a:1a:cd:78:ab:c1:f0:50:
         2a:56:cb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:33:37 2026 by rpki-client