This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/seBFYYQv0cvrV-jBttwLxGx-GgQ.roa
File:                     seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (raw, json)
Hash identifier:          ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=
Subject key identifier:   B1:E0:45:61:84:2F:D1:CB:EB:57:E8:C1:B6:DC:0B:C4:6C:7E:1A:04
Certificate issuer:       /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial:       019B76EB89D54CC3549AEB292F24BCFBF340
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/seBFYYQv0cvrV-jBttwLxGx-GgQ.roa
Signing time:             Thu 01 Jan 2026 00:18:26 +0000
ROA not before:           Thu 01 Jan 2026 00:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     397563
IP address blocks:        80.253.252.0/23 maxlen: 24
                          91.151.80.0/24 maxlen: 24
                          91.151.82.0/24 maxlen: 24
                          91.151.91.0/24 maxlen: 24
                          213.142.128.0/24 maxlen: 24
                          213.142.129.0/24 maxlen: 24
                          213.142.130.0/24 maxlen: 24
                          213.142.131.0/24 maxlen: 24
                          213.142.136.0/24 maxlen: 24
                          213.142.137.0/24 maxlen: 24
                          213.142.142.0/24 maxlen: 32
                          213.142.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:89:d5:4c:c3:54:9a:eb:29:2f:24:bc:fb:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
        Validity
            Not Before: Jan  1 00:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b1e04561842fd1cbeb57e8c1b6dc0bc46c7e1a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a2:51:d6:54:54:7c:e7:b2:9b:1a:87:30:b7:
                    1a:e8:22:fd:29:a8:96:7c:19:c0:5f:76:03:71:a4:
                    76:c4:00:f6:69:bc:01:df:9c:0a:55:3a:25:67:b2:
                    57:b0:20:75:3f:a2:12:ee:7c:45:e5:e5:e2:14:79:
                    57:f4:31:3d:e0:1c:56:72:c8:b8:1b:85:0f:08:56:
                    63:a8:0c:10:3e:ab:30:8e:34:d2:1c:2d:d2:d4:09:
                    35:a6:b0:4e:ac:b1:af:28:31:08:d1:40:3f:da:64:
                    27:8b:17:af:bd:49:d3:b4:41:0d:44:4e:41:65:4e:
                    ec:e0:80:4d:f6:d5:8f:d6:f0:ee:3e:a4:6f:31:67:
                    33:f2:5a:2a:cb:2a:4e:75:b5:89:ac:12:07:83:c4:
                    c5:32:74:90:44:e8:f8:ea:f2:86:28:c1:97:0a:aa:
                    8e:8f:23:6a:df:fb:fa:67:d8:62:54:1a:f7:e4:b2:
                    f0:cd:c8:40:52:ab:fe:e5:15:1a:a8:a8:2d:c3:76:
                    2d:b4:03:99:9c:c5:7b:00:e5:89:2e:40:36:bc:97:
                    75:1a:84:f2:6e:f7:84:c4:95:f7:3c:42:d5:f2:e9:
                    d3:ed:85:ac:bb:3c:e7:ea:41:a7:43:94:cd:24:2b:
                    08:11:b0:55:db:56:c5:1a:e4:4d:6c:b4:1a:1c:d3:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E0:45:61:84:2F:D1:CB:EB:57:E8:C1:B6:DC:0B:C4:6C:7E:1A:04
            X509v3 Authority Key Identifier:
                keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/seBFYYQv0cvrV-jBttwLxGx-GgQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.253.252.0/23
                  91.151.80.0/24
                  91.151.82.0/24
                  91.151.91.0/24
                  213.142.128.0/22
                  213.142.136.0/23
                  213.142.142.0/24
                  213.142.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:17:e8:7b:c3:8f:91:19:70:8e:4b:77:56:4e:2f:14:bd:
         d2:1a:ee:c6:4e:96:9b:15:0c:ac:87:d9:d4:fe:52:08:5f:13:
         a3:c2:b0:eb:40:14:fd:5a:fe:4a:ab:2e:cd:db:87:b9:86:80:
         26:5a:8f:14:b1:3f:e1:e0:43:9e:3a:1d:41:29:a6:8a:f3:c0:
         02:b5:8a:38:87:b6:0d:3e:11:83:a1:38:82:79:22:ef:7b:63:
         88:e6:4c:89:17:ff:67:ff:d3:0c:a3:4d:b4:cc:74:5d:0a:4c:
         e3:cb:7e:42:07:d4:6b:8a:bb:ab:fe:57:d9:7f:73:3f:89:24:
         86:98:18:2f:6b:e5:49:52:67:79:a6:5f:44:d3:b0:09:03:a5:
         49:61:99:02:72:66:be:08:25:87:77:12:11:41:2d:07:03:f0:
         12:70:4b:8f:c9:30:89:1e:3b:23:3e:2e:ed:66:84:09:3e:21:
         7c:e5:23:ff:4e:c7:08:cd:3b:c1:d7:ed:1e:d6:39:cd:4d:37:
         04:20:7f:aa:4f:29:ef:05:8b:8e:e3:b8:c0:f8:52:c3:81:fa:
         35:3d:a1:b2:a0:01:f9:e8:a7:57:e7:4e:4f:94:41:87:49:01:
         30:a8:60:24:62:1b:1d:26:4b:44:70:d3:c2:0a:f2:9e:6a:2f:
         07:8f:f2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:39 2026 by rpki-client