This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/q89HdKvaEMQAy4BWfg4HjV8qw24.roa
File:                     q89HdKvaEMQAy4BWfg4HjV8qw24.roa (raw, json)
Hash identifier:          KMI40AaYbTYaggAa7hF41eJft1Q1Wo2ba59OP6fDgh8=
Subject key identifier:   AB:CF:47:74:AB:DA:10:C4:00:CB:80:56:7E:0E:07:8D:5F:2A:C3:6E
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019C50E02627F8CA4E5913B4DE90A2083B35
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/q89HdKvaEMQAy4BWfg4HjV8qw24.roa
Signing time:             Thu 12 Feb 2026 08:03:12 +0000
ROA not before:           Thu 12 Feb 2026 08:03:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        212.100.164.0/22 maxlen: 22
                          212.100.166.0/24 maxlen: 24
                          212.100.167.0/24 maxlen: 24
                          212.100.171.0/24 maxlen: 24
                          212.100.172.0/22 maxlen: 22
                          212.100.175.0/24 maxlen: 24
                          212.100.176.0/22 maxlen: 24
                          212.100.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:50:e0:26:27:f8:ca:4e:59:13:b4:de:90:a2:08:3b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Feb 12 08:03:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=abcf4774abda10c400cb80567e0e078d5f2ac36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:a7:1f:cc:d3:52:ae:c4:85:9f:a1:58:e6:
                    49:2e:ad:3f:3d:7d:fb:ff:2a:56:a0:01:74:0d:70:
                    14:4f:26:6a:c4:6b:35:25:7b:28:7f:c8:05:65:96:
                    07:b8:29:7a:e0:ee:c7:a3:88:b0:93:15:c7:14:51:
                    49:64:99:be:0c:4b:05:12:f9:bf:f8:76:27:c7:06:
                    ed:24:cf:c4:75:b1:01:9a:6e:e0:6b:3c:44:91:e1:
                    17:68:19:95:c9:72:9b:8b:81:16:16:7a:b3:c8:af:
                    00:89:e2:f5:d4:dc:e2:12:21:9d:cd:03:03:8a:b7:
                    4d:e7:4d:85:12:dd:9e:cb:e4:a9:76:4a:48:89:04:
                    86:d3:99:ef:1a:90:df:84:90:d5:c2:61:68:ce:82:
                    9d:0d:0b:7a:7c:53:1d:d4:8a:1e:16:ec:66:7e:50:
                    0f:1b:e2:23:04:3e:ff:f2:2f:b7:d2:61:d8:b1:33:
                    fd:aa:36:79:67:1f:3e:d8:d3:6b:16:45:0b:29:d7:
                    27:12:b7:76:6b:07:63:6a:dc:6f:97:c9:f7:bc:a3:
                    70:54:ed:ba:b0:10:5e:c4:ec:0e:fd:23:eb:c3:a4:
                    42:56:42:c3:44:71:63:b8:8b:e3:0e:2d:a8:74:db:
                    5d:3e:e9:3d:8a:4d:90:27:16:7a:ec:5b:8b:f3:d3:
                    70:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:47:74:AB:DA:10:C4:00:CB:80:56:7E:0E:07:8D:5F:2A:C3:6E
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/q89HdKvaEMQAy4BWfg4HjV8qw24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.164.0/22
                  212.100.171.0-212.100.179.255
                  212.100.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:87:7a:54:cb:d6:ef:5a:00:86:fb:19:24:24:49:51:3d:1f:
         ba:69:b0:11:20:fb:5a:6a:95:72:89:8b:7d:a6:ae:44:cd:f3:
         aa:1b:78:e9:76:5d:d2:71:a3:1e:55:c8:10:5d:52:3d:51:c9:
         84:63:01:cf:b0:db:68:6a:da:9c:b0:71:e1:e1:91:65:d9:d0:
         ad:6c:c4:c8:30:74:54:06:33:5b:4a:0f:9f:f4:87:23:c8:78:
         bc:f6:ad:65:26:05:4d:39:62:5c:10:90:58:ce:a5:46:91:7e:
         d7:ae:9e:c5:4a:f5:1d:6b:35:e5:bf:cb:51:24:fe:e2:6a:61:
         8e:d2:2c:92:0f:a5:09:3b:ac:4c:d0:9a:e1:97:93:66:47:18:
         95:1c:78:9f:8d:f8:ae:11:1a:bd:a6:11:e2:83:e5:7f:4e:a5:
         b8:59:56:2a:a4:3d:e2:19:71:9f:ec:ba:a9:92:38:c4:45:9c:
         cb:a2:a8:50:5e:2d:d5:d1:b2:6c:60:83:08:62:6f:d9:79:36:
         dd:b0:a6:3d:5c:76:9d:fe:85:e1:07:1d:2a:2e:7e:54:64:71:
         95:38:04:fd:88:72:c9:b6:18:59:1c:99:b3:d1:f7:9a:8a:46:
         77:a0:95:a4:e5:14:52:49:60:2f:0d:66:cb:26:e8:c2:28:8e:
         27:fd:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:11 2026 by rpki-client