This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/SNEaKtL2yJGAVO2vEwP7jxGl2H0.roa
File:                     SNEaKtL2yJGAVO2vEwP7jxGl2H0.roa (raw, json)
Hash identifier:          Pb62vRdjdsMJXeIUL95Djt1CD7hzu51dxI2T6BhHAHQ=
Subject key identifier:   48:D1:1A:2A:D2:F6:C8:91:80:54:ED:AF:13:03:FB:8F:11:A5:D8:7D
Certificate issuer:       /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial:       019B7B35D00DAB934919823F036000E865CA
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/SNEaKtL2yJGAVO2vEwP7jxGl2H0.roa
Signing time:             Thu 01 Jan 2026 20:18:02 +0000
ROA not before:           Thu 01 Jan 2026 20:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49808
IP address blocks:        5.159.0.0/21 maxlen: 22
                          31.193.160.0/21 maxlen: 21
                          63.247.208.0/20 maxlen: 24
                          85.118.184.0/21 maxlen: 21
                          85.193.160.0/20 maxlen: 24
                          86.109.24.0/21 maxlen: 24
                          89.249.184.0/21 maxlen: 21
                          109.68.104.0/21 maxlen: 21
                          139.178.96.0/19 maxlen: 19
                          145.40.32.0/19 maxlen: 24
                          162.211.104.0/22 maxlen: 24
                          162.213.160.0/22 maxlen: 24
                          185.16.112.0/22 maxlen: 22
                          185.21.96.0/22 maxlen: 23
                          185.44.210.0/23 maxlen: 24
                          193.41.207.0/24 maxlen: 24
                          194.107.144.0/24 maxlen: 32
                          198.89.232.0/21 maxlen: 24
                          2a03:c100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:d0:0d:ab:93:49:19:82:3f:03:60:00:e8:65:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
        Validity
            Not Before: Jan  1 20:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48d11a2ad2f6c8918054edaf1303fb8f11a5d87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:38:6b:4b:ee:b1:a9:48:99:1b:1b:21:f8:
                    bb:00:22:e4:ad:db:e2:44:48:40:49:10:88:88:ac:
                    cb:ae:cb:41:28:69:36:0a:7c:78:48:80:fc:f8:0b:
                    15:fd:1b:67:17:d7:c5:bb:5a:d0:97:70:d0:53:8d:
                    95:a0:a3:e5:eb:83:22:1e:1a:56:6c:0f:09:eb:f4:
                    0d:2d:be:13:af:6c:23:2f:40:ee:65:ac:15:05:dc:
                    75:fe:84:57:19:6c:d3:04:62:83:51:aa:69:b8:27:
                    c7:73:d6:cd:60:c0:d3:4b:93:5a:8a:31:37:10:01:
                    b9:70:55:27:6a:9d:fc:7f:90:cd:af:12:f6:a1:46:
                    55:7b:00:d4:24:42:cd:61:3c:0e:79:69:bb:fd:a1:
                    7d:d1:a4:87:cf:03:f8:48:ff:7e:03:1d:49:c4:c5:
                    05:72:3a:2a:7e:e3:f6:49:8a:ca:8c:e4:21:48:ab:
                    18:a3:61:72:f6:2a:5d:bc:08:c5:f8:ec:8c:61:de:
                    18:d0:ee:37:9c:1f:0d:87:cd:d3:d3:99:38:04:70:
                    7b:cc:e1:85:9b:09:c8:13:8c:fb:9e:03:38:b2:2a:
                    02:02:01:93:7c:eb:7b:3c:15:73:44:9a:10:7b:a5:
                    7c:ce:b0:4d:e3:c1:65:bd:e7:21:55:9b:09:67:09:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D1:1A:2A:D2:F6:C8:91:80:54:ED:AF:13:03:FB:8F:11:A5:D8:7D
            X509v3 Authority Key Identifier:
                keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/SNEaKtL2yJGAVO2vEwP7jxGl2H0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.159.0.0/21
                  31.193.160.0/21
                  63.247.208.0/20
                  85.118.184.0/21
                  85.193.160.0/20
                  86.109.24.0/21
                  89.249.184.0/21
                  109.68.104.0/21
                  139.178.96.0/19
                  145.40.32.0/19
                  162.211.104.0/22
                  162.213.160.0/22
                  185.16.112.0/22
                  185.21.96.0/22
                  185.44.210.0/23
                  193.41.207.0/24
                  194.107.144.0/24
                  198.89.232.0/21
                IPv6:
                  2a03:c100::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:81:3a:11:f5:d7:b1:0f:33:8b:6f:93:cc:3d:6b:9a:d8:62:
         e0:bc:a2:60:5d:f0:91:8d:6b:a6:a5:4d:16:09:9d:83:10:32:
         68:28:90:ca:65:26:70:d7:08:5f:4e:6f:88:6c:6b:f7:c9:70:
         df:4d:ae:85:37:87:8c:21:87:f6:bc:fd:ee:8e:fc:31:7c:28:
         bc:15:9f:dc:dc:e2:95:cd:0a:7d:1f:d1:09:57:87:4d:86:95:
         d8:eb:ff:48:52:45:4c:f1:b2:1d:7c:2b:80:cc:a8:f1:00:01:
         d7:0f:4d:8a:56:82:36:75:07:5a:eb:3b:6b:26:3d:1e:3e:54:
         57:07:96:55:e8:7a:89:48:8a:58:0e:40:78:0e:05:fe:d3:78:
         36:3a:42:3c:ad:d0:31:a5:71:89:c2:79:4d:55:5b:e3:89:95:
         c0:f5:7d:b4:ba:ad:63:45:d0:f9:de:a9:72:55:a5:45:c7:05:
         d7:b6:38:be:af:d4:64:30:30:a3:11:d4:a2:8e:ff:25:d1:24:
         b8:2e:79:4c:2d:c2:e8:7f:89:ff:c0:f5:26:e4:da:bc:4b:69:
         7e:11:ff:94:2d:ed:5c:d4:84:c3:89:d4:7e:43:43:bb:c5:12:
         89:f9:d1:ab:0a:48:6e:73:9e:2d:e5:b1:34:4d:7c:65:e5:b5:
         b0:9c:0a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:14:28 2026 by rpki-client