This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/U2b1c5pYdQ9zayqrxLgtN2W51BY.roa
File:                     U2b1c5pYdQ9zayqrxLgtN2W51BY.roa (raw, json)
Hash identifier:          JBoYAAkbx50D+21bz8losqYLITz4epG/nb58HlnDYp8=
Subject key identifier:   53:66:F5:73:9A:58:75:0F:73:6B:2A:AB:C4:B8:2D:37:65:B9:D4:16
Certificate issuer:       /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial:       019C56085668D606F995E2125EE0FD97CD48
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/U2b1c5pYdQ9zayqrxLgtN2W51BY.roa
Signing time:             Fri 13 Feb 2026 08:05:12 +0000
ROA not before:           Fri 13 Feb 2026 08:05:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        146.19.9.0/24 maxlen: 24
                          212.23.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:56:08:56:68:d6:06:f9:95:e2:12:5e:e0:fd:97:cd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
        Validity
            Not Before: Feb 13 08:05:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5366f5739a58750f736b2aabc4b82d3765b9d416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:ca:f5:e8:0c:b4:c2:98:55:f5:eb:23:66:
                    eb:d3:1f:b8:26:c7:88:3d:14:e9:0c:de:9d:fd:c7:
                    b6:ad:8e:e9:8d:c3:a1:de:19:79:82:1c:8e:ed:ed:
                    09:fc:cc:d2:71:1f:91:3c:46:97:ae:30:9b:ad:35:
                    ae:d5:d4:2a:aa:fc:cd:b9:36:e5:f8:db:81:65:8e:
                    43:f2:3b:fa:fd:2e:69:80:96:62:0d:4b:b8:7b:46:
                    e1:c3:b3:48:15:7c:26:61:3c:35:af:33:bf:26:e3:
                    d8:ef:49:6c:c0:4f:ec:99:57:a3:bc:1a:b6:5f:7b:
                    bf:2f:ec:21:d7:ea:f6:b2:bf:5b:61:52:51:12:8a:
                    67:fb:23:7f:b6:53:40:b1:49:07:85:97:a5:14:75:
                    57:01:5b:f5:36:d7:d3:69:18:ae:88:0b:ac:b1:6e:
                    41:ba:7c:fb:95:9d:07:1a:19:cd:51:eb:19:19:59:
                    70:01:78:bc:a2:f1:aa:20:59:f2:9d:6f:46:30:7a:
                    94:44:d4:a9:32:61:df:c2:8b:f1:70:c0:98:f7:53:
                    b2:32:56:a6:4e:b9:5a:ae:ba:24:a3:81:f2:43:8c:
                    76:a9:7d:46:23:8f:3a:60:09:b2:d8:9c:cb:aa:27:
                    76:43:fe:ec:06:87:a8:ad:be:71:f8:31:51:04:96:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:F5:73:9A:58:75:0F:73:6B:2A:AB:C4:B8:2D:37:65:B9:D4:16
            X509v3 Authority Key Identifier:
                keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/U2b1c5pYdQ9zayqrxLgtN2W51BY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.9.0/24
                  212.23.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:fd:bd:38:84:4a:2a:f7:0b:55:99:97:e1:a7:e2:8a:bb:
         11:8b:67:d1:4c:f2:f8:b1:05:fc:d9:91:15:c0:e9:30:e4:b7:
         9d:e0:9c:39:09:0d:95:b3:92:91:b8:84:60:a9:8e:d4:09:ad:
         fe:62:25:69:8b:b0:c7:17:06:c1:1b:20:50:fd:a5:71:63:92:
         3e:e4:c9:ba:1d:b4:f1:1d:c0:31:7b:c2:e5:51:09:f5:75:5f:
         1f:7a:79:47:00:2a:f3:af:6f:fb:4f:bb:4c:82:90:94:d2:a6:
         e4:d3:f5:a7:27:ae:0d:4e:3b:72:00:a6:0e:bc:32:49:f3:5f:
         82:a3:5d:d7:23:46:3a:75:f7:85:9c:50:d3:b6:4d:f6:fd:b4:
         3c:eb:80:b5:49:60:80:19:a1:c3:f7:90:89:1c:c5:b8:fa:c8:
         1e:2e:86:ae:7c:b9:2e:d7:79:e7:dc:b8:ea:02:e9:9d:ef:48:
         4c:55:74:17:a5:68:e3:56:27:4e:54:22:04:ea:4e:4e:9b:71:
         7c:97:1a:73:c2:90:3a:8e:1b:a0:00:01:51:6e:90:d9:1f:34:
         37:30:1a:de:10:1b:92:85:92:7d:90:09:34:09:4a:8a:b8:d5:
         cb:37:8b:cd:89:c5:28:7e:96:ec:33:ab:f1:d3:e3:57:c4:01:
         95:4e:09:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:23:43 2026 by rpki-client