This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/RU_UuRETls46VjhGYbgF61QltwU.roa
File:                     RU_UuRETls46VjhGYbgF61QltwU.roa (raw, json)
Hash identifier:          sHTczNIle1k6tQFdcTEb3DGjeRRmo8cAmzWwk836Wyg=
Subject key identifier:   45:4F:D4:B9:11:13:96:CE:3A:56:38:46:61:B8:05:EB:54:25:B7:05
Certificate issuer:       /CN=86afaae2e3e054073a38aab635dc96460eef487e
Certificate serial:       019C3C5F6D955D1612FEEE5A8048CB07FA38
Authority key identifier: 86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/RU_UuRETls46VjhGYbgF61QltwU.roa
Signing time:             Sun 08 Feb 2026 08:30:12 +0000
ROA not before:           Sun 08 Feb 2026 08:30:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212216
IP address blocks:        80.249.115.0/24 maxlen: 24
                          88.135.33.0/24 maxlen: 24
                          89.42.44.0/24 maxlen: 24
                          185.73.226.0/24 maxlen: 32
                          185.106.200.0/24 maxlen: 24
                          185.106.201.0/24 maxlen: 24
                          185.106.202.0/24 maxlen: 24
                          185.223.160.0/24 maxlen: 24
                          195.28.10.0/24 maxlen: 24
                          195.28.168.0/24 maxlen: 24
                          195.28.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3c:5f:6d:95:5d:16:12:fe:ee:5a:80:48:cb:07:fa:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86afaae2e3e054073a38aab635dc96460eef487e
        Validity
            Not Before: Feb  8 08:30:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=454fd4b9111396ce3a56384661b805eb5425b705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7d:7f:d8:af:45:06:c7:52:7d:d1:5f:48:4d:
                    6e:d3:09:14:ba:90:33:a5:04:79:ab:ac:e9:f3:32:
                    d2:36:e4:54:e9:54:be:a4:6a:01:18:c6:fd:8b:ad:
                    99:24:3d:95:9a:28:e9:f4:94:cb:a4:1d:9d:ce:66:
                    ea:7c:21:5d:65:ab:d2:e0:a5:f0:65:42:4c:47:71:
                    89:d2:9d:be:83:04:1c:9c:32:3f:24:6a:53:0c:12:
                    b3:39:03:32:1e:2f:12:76:2a:f2:bf:b0:90:b1:e2:
                    93:2b:c8:00:e5:84:f4:5b:38:2d:e9:7e:77:c2:a2:
                    19:06:92:3d:9b:00:32:8a:80:c4:8f:4e:26:bd:92:
                    e0:30:a2:e8:ce:90:cd:29:57:8f:20:7c:70:d6:50:
                    e2:1e:9f:29:b7:36:6a:ff:5c:55:9d:d5:b6:db:84:
                    10:07:3e:93:47:27:f3:c1:5c:ee:d6:23:b6:74:96:
                    b8:21:40:3c:d9:52:c6:d9:da:19:64:95:80:7f:33:
                    bc:2b:1f:af:3e:40:5f:80:d0:d3:e5:88:b3:ab:c8:
                    94:33:1b:bb:c2:b1:24:62:5a:7e:e9:dc:ae:4e:38:
                    77:a8:c3:c4:59:db:cb:c8:8a:f5:f8:1b:d3:13:e4:
                    60:69:fc:3a:7a:11:bf:a6:cc:cd:fa:73:19:25:49:
                    20:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:4F:D4:B9:11:13:96:CE:3A:56:38:46:61:B8:05:EB:54:25:B7:05
            X509v3 Authority Key Identifier:
                keyid:86:AF:AA:E2:E3:E0:54:07:3A:38:AA:B6:35:DC:96:46:0E:EF:48:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq-q4uPgVAc6OKq2NdyWRg7vSH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/RU_UuRETls46VjhGYbgF61QltwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e76a1a-3724-495b-ac72-472040b247f6/1/hq-q4uPgVAc6OKq2NdyWRg7vSH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.249.115.0/24
                  88.135.33.0/24
                  89.42.44.0/24
                  185.73.226.0/24
                  185.106.200.0-185.106.202.255
                  185.223.160.0/24
                  195.28.10.0/24
                  195.28.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:01:e9:d9:4b:6f:69:a3:0c:e9:c0:e0:44:38:aa:0d:d5:8b:
         a1:79:07:e6:ab:50:45:cb:4e:91:49:f5:95:96:d3:9d:9b:db:
         04:00:ef:3d:b5:35:e9:20:47:51:30:de:f5:f6:5a:31:be:80:
         23:21:cb:53:a3:4f:37:b9:34:60:60:52:3f:bc:33:82:fb:ff:
         99:bd:42:34:5d:52:73:4e:a2:a8:a9:75:f9:67:56:6f:09:a5:
         ed:2d:81:f8:80:a8:c5:a6:2e:72:fb:b3:fe:b5:77:86:71:ea:
         85:d3:e1:d7:74:6f:7e:c6:02:2b:91:3a:45:ae:61:aa:71:74:
         b6:01:02:81:41:3c:c4:64:8d:5d:72:da:e0:4e:31:f7:49:fd:
         66:d1:e0:3a:d0:3f:bd:1b:05:89:d8:69:9a:7c:9d:f0:d3:90:
         d0:5f:d8:0f:e4:56:3d:52:6a:a3:2f:ed:c9:94:64:31:7f:9d:
         e5:af:23:f7:42:86:28:af:5c:6a:34:5a:40:59:6f:e7:69:b8:
         74:36:39:74:47:ab:82:94:70:b9:03:8e:0f:cf:f4:13:06:f0:
         4e:71:db:d5:b7:d6:1d:26:6b:e9:ff:2c:ce:c5:8b:b3:90:c0:
         19:55:13:32:9e:f7:00:ad:21:33:f9:cf:ce:35:9a:a8:ec:cd:
         d8:9a:5f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:10 2026 by rpki-client