This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/re0IQqFBVdzVJ74yeKzaXoEasLQ.roa
File:                     re0IQqFBVdzVJ74yeKzaXoEasLQ.roa (raw, json)
Hash identifier:          VOEcfCIHEzHQF1QB/FnWu3VtYruc/YE+G0XyAWVOBJA=
Subject key identifier:   AD:ED:08:42:A1:41:55:DC:D5:27:BE:32:78:AC:DA:5E:81:1A:B0:B4
Certificate issuer:       /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial:       019C38A8331914BC317EC3A557FBDC176883
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/re0IQqFBVdzVJ74yeKzaXoEasLQ.roa
Signing time:             Sat 07 Feb 2026 15:11:12 +0000
ROA not before:           Sat 07 Feb 2026 15:11:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34557
IP address blocks:        85.9.128.0/18 maxlen: 18
                          85.9.128.0/24 maxlen: 24
                          85.9.129.0/24 maxlen: 24
                          85.9.130.0/24 maxlen: 24
                          85.9.131.0/24 maxlen: 24
                          85.9.132.0/24 maxlen: 24
                          85.9.133.0/24 maxlen: 24
                          85.9.135.0/24 maxlen: 24
                          85.9.137.0/24 maxlen: 24
                          85.9.140.0/24 maxlen: 24
                          85.9.141.0/24 maxlen: 24
                          85.9.142.0/24 maxlen: 24
                          85.9.144.0/24 maxlen: 24
                          85.9.145.0/24 maxlen: 24
                          85.9.147.0/24 maxlen: 24
                          85.9.148.0/24 maxlen: 24
                          85.9.149.0/24 maxlen: 24
                          85.9.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:38:a8:33:19:14:bc:31:7e:c3:a5:57:fb:dc:17:68:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
        Validity
            Not Before: Feb  7 15:11:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=aded0842a14155dcd527be3278acda5e811ab0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:61:af:f9:11:23:8d:9c:ce:79:b2:4f:23:23:
                    48:12:72:62:1c:11:e9:1f:8d:23:79:4d:90:48:ef:
                    0a:72:92:01:e0:3a:b7:e8:a5:7d:e2:09:fe:9c:9d:
                    d1:f5:d1:42:17:00:dc:fb:b4:63:97:bb:43:f4:7f:
                    be:dc:5f:12:af:47:a2:fa:4b:2d:e4:9a:50:de:69:
                    e5:a3:30:bf:00:86:0e:52:b9:72:c5:52:37:1f:33:
                    78:95:35:dd:3d:13:68:62:81:2f:d2:1a:c0:22:a7:
                    ce:6a:04:83:c9:fe:c1:43:2e:67:65:52:8a:d1:8f:
                    3c:57:96:1e:31:f9:f9:32:21:d4:5d:23:87:f8:4f:
                    b4:2b:1d:40:85:af:f6:00:74:6b:58:cf:3a:f2:0a:
                    e2:c3:36:06:af:31:91:70:a9:a2:8e:e4:b6:1b:8b:
                    cb:88:ea:15:b8:4f:f0:98:41:a1:67:d7:e1:7c:28:
                    20:93:59:f9:13:68:a5:71:f5:f5:e3:8f:77:44:b4:
                    0d:57:f7:4c:ad:ad:59:a2:0c:c6:60:80:7b:74:cc:
                    f0:f5:3d:91:78:91:a4:78:01:df:b5:06:ae:a7:52:
                    78:2f:87:1e:7d:61:09:05:a3:8f:22:36:71:8b:c5:
                    45:cc:2a:cd:1d:b8:4d:be:a4:4f:04:cd:ec:5f:b2:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:ED:08:42:A1:41:55:DC:D5:27:BE:32:78:AC:DA:5E:81:1A:B0:B4
            X509v3 Authority Key Identifier:
                keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/re0IQqFBVdzVJ74yeKzaXoEasLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.9.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:d4:76:d5:06:8a:55:33:43:78:4a:c3:25:25:b6:b5:be:
         a8:35:f1:be:ec:6e:96:f2:35:f2:33:9c:49:53:06:3a:ed:5c:
         3c:2f:8e:0b:0a:b1:dd:55:8e:97:c1:6c:8d:9f:af:f0:1a:ff:
         0b:bb:29:31:d5:a1:7d:8b:86:6d:b0:67:55:4c:e8:9f:eb:ba:
         67:ce:b5:50:21:94:de:a9:16:9c:97:88:8c:e1:1b:a9:5c:67:
         dd:3e:69:77:ed:20:c2:1a:29:c9:e1:be:b2:d6:8e:70:36:cb:
         e4:2d:01:90:af:df:4a:db:9c:3d:0a:de:8c:8a:f9:33:08:51:
         28:5b:b4:9c:fa:42:e2:cb:a5:6f:46:28:57:40:53:df:22:a7:
         48:85:31:c0:14:94:0c:ae:ad:29:91:fc:dd:6f:ea:4d:93:0e:
         a9:95:c0:ec:ed:fa:75:af:0d:dd:7c:cb:b3:44:c2:7b:9d:c4:
         ad:01:f0:02:0e:db:ec:21:6b:05:49:98:7f:ba:67:ae:5f:79:
         90:fa:25:5a:08:d6:db:fa:d8:3a:65:4b:5e:b4:4b:11:b7:27:
         b7:32:ad:21:ae:50:75:49:6a:17:d4:31:4f:ed:94:b1:19:79:
         d4:d0:f3:1a:1f:c1:dd:8d:d3:30:eb:50:dc:2d:c7:55:0c:68:
         10:cf:46:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:58:52 2026 by rpki-client