This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/TSjFM1kyGeGyo2PAsR0WSG_oqns.roa
File:                     TSjFM1kyGeGyo2PAsR0WSG_oqns.roa (raw, json)
Hash identifier:          TMlFjOXacwLKIABcDzQq377NOlMddVoF+Xggh2q6las=
Subject key identifier:   4D:28:C5:33:59:32:19:E1:B2:A3:63:C0:B1:1D:16:48:6F:E8:AA:7B
Certificate issuer:       /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial:       019C57183FD00070BC531D2E78DC3D7DE3AB
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/TSjFM1kyGeGyo2PAsR0WSG_oqns.roa
Signing time:             Fri 13 Feb 2026 13:02:12 +0000
ROA not before:           Fri 13 Feb 2026 13:02:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        91.200.253.0/24 maxlen: 24
                          114.69.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:57:18:3f:d0:00:70:bc:53:1d:2e:78:dc:3d:7d:e3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
        Validity
            Not Before: Feb 13 13:02:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d28c533593219e1b2a363c0b11d16486fe8aa7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:63:55:e8:99:ff:17:d6:0a:6c:fa:e2:80:
                    3c:d3:be:c8:9d:40:03:67:bc:f2:a6:80:52:a1:27:
                    d7:83:24:9e:08:b9:d3:33:5e:be:84:e8:d3:c4:c8:
                    75:32:6e:73:ab:02:52:28:4b:10:d3:61:39:2e:5d:
                    d1:f8:34:9f:d6:53:94:7e:b8:e0:5a:2b:f0:3f:2a:
                    7a:7d:8f:f1:67:51:32:55:74:9a:40:96:39:f8:ff:
                    59:cf:5c:2a:51:1c:87:c8:8f:9d:c8:e6:7f:e8:13:
                    fa:87:95:12:f9:fd:81:6a:8c:e3:4d:0d:37:a3:ce:
                    1f:61:0f:5a:7a:7a:9b:fd:6e:38:b6:25:5f:ff:92:
                    ce:8b:2a:26:d1:fc:53:43:bc:50:fd:55:85:06:b3:
                    e0:12:05:eb:48:0b:1f:58:6e:2b:a1:cf:dc:dc:9e:
                    b1:6d:56:92:3d:ef:38:c6:5e:75:66:ac:30:a2:08:
                    be:2e:52:18:4c:69:46:4f:3a:c2:e5:54:2e:47:19:
                    dd:f1:81:14:db:64:ec:ea:e0:b4:7b:d9:09:20:f3:
                    60:d8:2b:e4:ae:dd:eb:15:cf:2b:b2:24:5e:29:13:
                    2f:57:a8:bb:cc:3e:39:9e:4d:2f:6b:cb:db:33:9c:
                    8f:4b:a4:db:22:00:bd:55:0c:fa:11:e5:64:a7:12:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:28:C5:33:59:32:19:E1:B2:A3:63:C0:B1:1D:16:48:6F:E8:AA:7B
            X509v3 Authority Key Identifier:
                keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/TSjFM1kyGeGyo2PAsR0WSG_oqns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.200.253.0/24
                  114.69.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e5:d3:1d:2e:29:b4:b8:66:59:9d:94:ce:1e:e0:6b:15:ce:
         ae:9a:fb:64:69:9e:cc:6e:fa:ed:3d:ad:8e:b3:b4:7b:11:6c:
         39:95:f8:c5:c1:08:b1:38:b5:8a:d1:5c:1c:db:2e:02:d0:7d:
         2b:f5:09:eb:f0:49:b6:9f:e4:f5:b6:15:df:1b:e6:34:e5:8e:
         df:b1:fc:17:fc:10:5c:4b:e6:a7:66:0d:c7:6d:25:80:a8:2f:
         f9:71:ca:a3:e6:b7:bb:82:51:17:07:6f:7e:54:5e:78:a6:b8:
         c3:f1:1f:54:ba:bf:ab:2a:f3:34:e8:22:62:1a:eb:34:47:8a:
         7e:ae:05:ef:4c:6c:54:dc:86:cf:bf:92:4c:44:18:7e:ee:dd:
         30:0b:37:e9:45:a3:b2:42:8f:9e:0b:a1:be:f0:bf:11:cc:95:
         1d:73:f1:e2:04:4d:6d:65:25:5e:21:59:d3:97:2b:e7:71:af:
         0c:32:06:5e:be:6e:f1:16:cf:e3:54:42:e5:ee:8d:d7:f7:58:
         a1:a1:a8:26:6c:f0:42:87:29:3e:ac:5a:a5:4b:92:c1:f4:54:
         1a:b3:93:7f:51:86:52:c2:2a:44:4f:25:fe:6a:d5:dc:46:74:
         c5:65:4b:08:5e:b8:bb:00:31:bd:4f:77:07:86:1f:41:c4:a7:
         20:12:66:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:13 2026 by rpki-client