This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/vO7UA6OHwkMuLRizV-Ze4dRVbto.roa
File:                     vO7UA6OHwkMuLRizV-Ze4dRVbto.roa (raw, json)
Hash identifier:          n+nEdzdyzkRWz4vFNNtuEURq6Jpj2cjyShGJGPBR/tk=
Subject key identifier:   BC:EE:D4:03:A3:87:C2:43:2E:2D:18:B3:57:E6:5E:E1:D4:55:6E:DA
Certificate issuer:       /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial:       019C562CF61AF34CE8E1094C5FFCD34E6818
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/vO7UA6OHwkMuLRizV-Ze4dRVbto.roa
Signing time:             Fri 13 Feb 2026 08:45:12 +0000
ROA not before:           Fri 13 Feb 2026 08:45:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        185.205.32.0/24 maxlen: 24
                          185.205.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:56:2c:f6:1a:f3:4c:e8:e1:09:4c:5f:fc:d3:4e:68:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
        Validity
            Not Before: Feb 13 08:45:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bceed403a387c2432e2d18b357e65ee1d4556eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:ba:74:f9:e7:2c:9e:45:61:93:2a:da:20:
                    00:14:5d:23:aa:b0:00:71:31:72:60:3b:f6:88:a9:
                    33:d3:b9:4d:1d:ef:cb:91:cf:ca:cc:59:f5:91:17:
                    b4:d6:bc:a6:3c:1f:46:c7:3b:e0:fb:f6:62:fa:cc:
                    37:2b:99:85:4f:aa:9d:43:33:e8:bf:b2:06:2b:07:
                    44:1f:ba:65:3f:5e:de:3c:06:78:0a:92:36:eb:96:
                    f8:e4:f4:e1:88:48:1f:c1:a8:6d:de:c5:b0:e0:d4:
                    0c:99:ca:4a:0f:8d:2b:0e:5f:de:cc:d3:99:0b:9f:
                    79:8d:a4:53:14:41:27:eb:b8:3e:4c:0d:a9:f3:a2:
                    8d:85:f4:64:fa:4d:66:ab:be:fa:8c:9b:a2:bb:b2:
                    bb:29:37:11:b5:2a:f7:fa:dd:2c:65:2e:fb:49:10:
                    ae:18:1e:3f:41:95:e8:4b:3c:84:60:74:f4:6e:3c:
                    68:85:08:43:9c:52:ae:8f:b2:1b:c5:f7:42:35:ca:
                    8b:d4:26:c9:d3:71:9d:7d:0f:10:86:c8:72:6a:c2:
                    63:bb:8c:15:9a:50:f2:7f:9f:8d:5b:a7:59:db:46:
                    76:97:06:b0:38:4a:74:74:34:f5:77:57:38:2e:2b:
                    42:eb:c9:62:c7:c4:64:32:ea:64:25:3c:94:a4:15:
                    fe:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EE:D4:03:A3:87:C2:43:2E:2D:18:B3:57:E6:5E:E1:D4:55:6E:DA
            X509v3 Authority Key Identifier:
                keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/vO7UA6OHwkMuLRizV-Ze4dRVbto.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.32.0/24
                  185.205.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:53:a9:e3:bb:e9:c1:60:9c:7d:36:ba:4d:de:47:6e:32:f3:
         b2:20:80:45:4d:73:8b:6f:8e:59:01:ec:09:28:5e:18:81:8e:
         b2:d8:5e:47:21:83:d4:da:47:b7:0c:c2:ae:50:73:ba:89:68:
         3f:10:5a:01:7a:1a:cf:17:9b:80:0d:20:07:b0:fd:d8:cc:e5:
         ff:7a:07:8e:b8:68:b7:9d:7c:60:ca:78:bf:49:15:34:81:5b:
         52:5b:54:38:10:03:34:4b:cb:bb:d2:20:2b:16:de:5b:d8:d0:
         d7:31:82:4a:94:f3:a7:64:07:df:3c:58:8c:93:47:8c:c3:d8:
         5c:2a:2b:cd:c6:50:91:1b:4a:29:30:cd:a5:69:1a:22:81:8b:
         b2:4f:5d:2d:02:7a:e1:5f:11:50:1c:d3:90:b4:b4:c8:2b:31:
         af:52:25:53:61:47:a3:ec:fc:d1:26:04:e7:85:8b:3b:23:29:
         e9:40:cd:b8:c3:c1:51:b3:60:39:21:12:59:ba:69:7e:e5:2e:
         af:4b:db:17:20:8d:3e:bc:88:c9:25:8f:c8:4b:32:ff:93:20:
         99:81:40:f2:1a:03:d5:fc:d9:13:e8:1c:48:49:d5:04:d6:2a:
         a5:1e:64:06:e9:13:1a:3b:c8:c7:fb:1c:22:2b:46:34:aa:a5:
         df:df:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:23:54 2026 by rpki-client