This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa
File:                     6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa (raw, json)
Hash identifier:          Uasee9UdIsrJgyTXIlKOU2BJMKL73nIUt5Ls4sJkN9Y=
Subject key identifier:   E8:AD:BA:00:99:CA:15:24:50:EA:A7:AA:42:26:81:49:1E:6D:9A:C9
Certificate issuer:       /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial:       019B7B363BEC834B81A31517EBC7E9D7E8BE
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa
Signing time:             Thu 01 Jan 2026 20:18:30 +0000
ROA not before:           Thu 01 Jan 2026 20:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209853
IP address blocks:        45.151.248.0/24 maxlen: 24
                          45.151.249.0/24 maxlen: 24
                          45.151.250.0/24 maxlen: 24
                          45.151.251.0/24 maxlen: 24
                          78.142.208.0/24 maxlen: 24
                          78.142.209.0/24 maxlen: 24
                          78.142.210.0/24 maxlen: 24
                          78.142.211.0/24 maxlen: 24
                          185.149.100.0/24 maxlen: 24
                          185.149.101.0/24 maxlen: 24
                          185.149.102.0/24 maxlen: 24
                          185.149.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:3b:ec:83:4b:81:a3:15:17:eb:c7:e9:d7:e8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
        Validity
            Not Before: Jan  1 20:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e8adba0099ca152450eaa7aa422681491e6d9ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:75:b4:87:3a:97:0b:fb:bd:9b:c7:26:36:
                    61:2c:38:94:f9:40:86:39:f0:1f:82:f3:db:a9:b3:
                    f4:fb:83:7d:6f:63:7f:24:55:3c:77:a6:65:22:84:
                    fe:12:67:70:4c:24:27:28:b4:af:89:6b:e1:cd:17:
                    75:9d:77:f0:c2:d9:f4:82:1e:17:a1:e0:d1:b1:6e:
                    f5:33:bd:1b:8c:e4:66:a3:aa:ea:78:f1:60:b6:e4:
                    64:f8:20:5b:02:f9:0e:71:e1:f5:7d:cb:f2:69:91:
                    1a:37:0b:f3:15:6e:52:a1:9f:8f:e2:ae:a3:81:9e:
                    87:18:2a:ce:ea:13:13:81:28:c3:ea:25:09:f4:8c:
                    31:94:13:0a:bc:5a:08:3d:78:8e:33:3f:29:f1:87:
                    58:6d:c5:a8:93:be:41:e8:02:e9:20:32:f6:00:ed:
                    3e:86:69:23:1f:c6:68:db:46:5d:56:02:26:ca:2f:
                    3d:8d:30:46:a4:1c:7a:22:b3:65:f6:0f:c7:91:5c:
                    27:29:27:64:5f:e9:37:a4:0d:f1:e1:83:18:5a:9f:
                    02:ea:10:c3:80:71:5b:1b:4d:13:c0:bd:e4:f7:14:
                    43:60:a7:99:18:f5:50:08:17:b1:9a:d9:44:a1:97:
                    68:db:7d:8e:ed:ea:41:00:1f:ca:9a:ff:09:62:76:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AD:BA:00:99:CA:15:24:50:EA:A7:AA:42:26:81:49:1E:6D:9A:C9
            X509v3 Authority Key Identifier:
                keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.248.0/22
                  78.142.208.0/22
                  185.149.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:23:0e:7e:0d:14:7c:a7:86:40:a3:1c:b0:42:51:bc:5d:50:
         92:36:75:7e:c4:b7:74:f9:c6:47:92:06:29:b8:08:e5:31:37:
         00:5e:30:10:a9:25:d6:ce:2d:92:cb:b3:60:4a:47:8d:91:d7:
         b0:7c:4e:85:bc:76:d5:53:ce:08:d3:af:9e:d9:a8:04:36:2e:
         51:4e:00:29:7b:59:f8:58:8f:3e:c6:db:d8:7b:95:0f:a6:ae:
         bc:43:eb:db:86:d8:5d:f6:86:18:d3:b4:15:3d:99:a9:c1:f1:
         b6:e9:da:04:a9:66:c5:85:2b:bb:0b:61:2f:56:44:7c:a9:9e:
         20:9f:d1:99:88:76:2d:04:25:d4:c5:1e:b4:b6:77:cf:57:9e:
         13:7f:96:d7:45:ca:08:7b:36:67:cc:8d:e3:2c:90:9c:8a:a8:
         89:9e:9e:96:db:7b:17:75:f2:91:3b:cb:a0:f4:d1:44:6b:6e:
         71:42:88:80:4f:04:7a:8b:54:03:a0:d5:1f:f6:6d:22:64:cb:
         ff:45:6f:86:52:9a:9e:f5:71:45:66:e7:f9:b8:c3:da:19:3f:
         1d:b4:8d:f1:bd:11:a9:36:27:9b:26:26:bf:54:ed:29:e6:1e:
         5b:eb:02:f7:b8:ec:6c:14:35:d4:b9:9b:39:54:dd:0b:ae:c1:
         4b:ee:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:30 2026 by rpki-client