This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa
File:                     hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa (raw, json)
Hash identifier:          l0oUAYvx1+pRIjX6Aa7SZOYLA8siUWlxjSjZBHxavhM=
Subject key identifier:   84:B3:6E:BB:FB:1B:02:F7:3A:69:80:5D:FE:70:39:73:1F:E0:CE:DF
Certificate issuer:       /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial:       019C568C2D7FACB1534105C75B4316424C84
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa
Signing time:             Fri 13 Feb 2026 10:29:12 +0000
ROA not before:           Fri 13 Feb 2026 10:29:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        89.222.92.0/22 maxlen: 24
                          178.210.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:56:8c:2d:7f:ac:b1:53:41:05:c7:5b:43:16:42:4c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
        Validity
            Not Before: Feb 13 10:29:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=84b36ebbfb1b02f73a69805dfe7039731fe0cedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:1c:24:03:20:1f:e5:fe:45:1c:40:56:d3:
                    84:0c:b6:a4:ec:d4:c0:b2:23:8a:bc:85:52:7e:2a:
                    b3:73:e3:b4:7f:d9:3b:23:1c:67:28:d3:99:c5:ce:
                    56:db:4b:9b:2f:93:37:15:f6:e2:ff:99:0c:f6:b7:
                    61:3c:cf:6d:69:66:2e:f5:bd:08:95:b8:15:e9:1b:
                    6d:24:8c:24:4f:21:47:ea:3e:4d:11:96:7f:b8:e4:
                    06:c8:73:f5:7b:a8:82:9c:ce:74:6f:bc:2f:1a:99:
                    81:5b:94:ad:7b:98:64:e9:83:dd:f5:b3:6e:c7:66:
                    8a:f0:f1:db:dd:13:54:4b:d2:fb:0c:4c:6b:2a:bc:
                    61:33:84:de:74:1b:25:ef:66:f6:0a:72:f1:08:13:
                    5d:e4:00:17:f7:52:75:2f:20:22:73:51:9f:8e:32:
                    a7:77:c4:75:16:ea:98:f2:46:9c:8d:86:56:f1:cf:
                    18:6f:6b:88:64:94:7a:ab:44:f8:b7:10:45:31:b4:
                    db:d9:6c:da:db:f7:35:02:f2:83:9d:f3:20:50:16:
                    67:14:f6:35:f4:c8:d4:6b:0f:0d:ea:5f:ae:52:ba:
                    cf:13:6e:7c:e6:d9:fd:a5:ab:04:05:ad:1d:5d:aa:
                    b7:bc:fd:d6:30:ba:eb:77:db:39:52:75:30:fe:08:
                    e7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B3:6E:BB:FB:1B:02:F7:3A:69:80:5D:FE:70:39:73:1F:E0:CE:DF
            X509v3 Authority Key Identifier:
                keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/hLNuu_sbAvc6aYBd_nA5cx_gzt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.222.92.0/22
                  178.210.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d3:86:e3:2f:43:84:a2:1c:37:6f:c7:53:b6:69:4c:fb:8d:
         34:ea:87:ff:d2:4c:ff:3e:ad:5f:95:90:14:6a:74:9c:01:73:
         f8:7b:3b:f5:4a:67:5b:b6:3c:1e:80:02:70:25:1b:de:98:3e:
         83:1d:03:36:06:30:90:5e:4a:9c:b8:12:11:c3:3f:8c:53:da:
         b0:5a:0c:50:ec:2d:f8:b0:73:de:bb:dd:d4:90:78:c0:62:b5:
         6c:cc:dd:fc:db:d0:61:3e:bd:b2:53:52:2a:2b:b8:0f:94:8b:
         11:d3:26:23:6f:26:09:c5:f2:1d:01:a8:b1:af:c1:7e:24:1b:
         4a:39:13:4a:a5:e9:30:2e:10:e4:c5:e7:c3:92:b0:32:de:fb:
         32:66:68:90:c2:d1:ee:8b:52:95:92:a9:b1:e4:12:13:37:23:
         df:9d:11:d3:1a:be:33:70:b4:a7:1a:05:a7:d4:ca:4a:26:47:
         00:f9:b7:42:8f:6b:e6:8f:01:a9:2f:42:20:d1:ec:bd:38:18:
         1c:93:e4:a0:63:87:a2:89:84:93:28:eb:cb:cf:97:12:cd:db:
         76:53:c9:39:7b:d9:cf:32:63:e1:41:d6:c5:46:d1:a4:6e:17:
         57:96:76:d2:7c:15:51:41:dc:ad:e1:cf:b4:48:42:1a:a2:cd:
         42:55:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:33 2026 by rpki-client