This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/J0a2SS6R9MHnjDYCgBYGOCVjyKM.roa
File:                     J0a2SS6R9MHnjDYCgBYGOCVjyKM.roa (raw, json)
Hash identifier:          /JT8+QXuT0QCjI7SLpexpWf37WhYjwfJTwQOUjCWK7E=
Subject key identifier:   27:46:B6:49:2E:91:F4:C1:E7:8C:36:02:80:16:06:38:25:63:C8:A3
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       019C415881112A4C1775CEA0366A3374DCBC
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/J0a2SS6R9MHnjDYCgBYGOCVjyKM.roa
Signing time:             Mon 09 Feb 2026 07:40:45 +0000
ROA not before:           Mon 09 Feb 2026 07:40:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        45.155.241.0/24 maxlen: 24
                          45.155.242.0/24 maxlen: 24
                          194.143.205.0/24 maxlen: 24
                          194.143.206.0/23 maxlen: 24
                          194.143.217.0/24 maxlen: 24
                          194.143.218.0/24 maxlen: 24
                          194.143.221.0/24 maxlen: 24
                          194.143.222.0/24 maxlen: 24
                          194.143.223.0/24 maxlen: 24
                          195.114.196.0/24 maxlen: 24
                          195.114.197.0/24 maxlen: 24
                          195.114.198.0/24 maxlen: 24
                          195.114.203.0/24 maxlen: 24
                          195.114.205.0/24 maxlen: 24
                          213.220.0.0/24 maxlen: 24
                          213.220.4.0/24 maxlen: 24
                          213.220.6.0/24 maxlen: 24
                          213.220.11.0/24 maxlen: 24
                          213.220.14.0/24 maxlen: 24
                          213.220.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Feb 2026 10:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:41:58:81:11:2a:4c:17:75:ce:a0:36:6a:33:74:dc:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Feb  9 07:40:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2746b6492e91f4c1e78c3602801606382563c8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:a4:e7:d0:8b:86:4b:d2:23:74:47:b2:1a:
                    41:98:75:a2:60:01:f7:59:dd:c9:05:1b:65:6a:75:
                    61:cf:e4:ef:a0:87:43:ab:66:63:7f:ef:30:79:22:
                    50:05:44:1b:00:9d:32:08:6b:45:af:5d:65:6b:b3:
                    bc:f6:45:d7:bf:57:d0:a3:78:f2:12:51:4d:d4:26:
                    4f:40:0f:af:0f:12:df:07:db:78:ae:74:5b:62:81:
                    0b:b8:82:49:57:e2:b5:30:78:e4:8d:b6:c0:73:ee:
                    c4:bb:87:25:3d:35:58:4a:02:7f:8a:94:fe:ac:77:
                    51:b1:e2:3f:60:bf:f9:13:ca:ec:62:ca:f8:f0:66:
                    36:94:4f:92:23:34:34:54:53:62:18:80:11:dc:c1:
                    08:62:06:fa:92:dc:e3:53:14:ff:af:76:43:4d:4a:
                    fa:35:f5:ea:35:21:09:42:e1:d0:ce:36:82:c9:af:
                    f0:8b:2e:d5:a6:66:9c:28:b6:f6:42:4c:bd:f9:8b:
                    99:e8:cf:f7:5f:ff:35:47:38:71:43:f0:61:0b:0d:
                    19:85:63:98:78:27:3d:27:7f:32:15:34:30:30:e1:
                    f3:d9:38:ce:fa:6e:28:91:dd:ca:74:a2:0d:17:1d:
                    7e:26:5f:96:e8:a7:f4:94:1d:13:07:de:7e:b9:15:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:46:B6:49:2E:91:F4:C1:E7:8C:36:02:80:16:06:38:25:63:C8:A3
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/J0a2SS6R9MHnjDYCgBYGOCVjyKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.241.0-45.155.242.255
                  194.143.205.0-194.143.207.255
                  194.143.217.0-194.143.218.255
                  194.143.221.0-194.143.223.255
                  195.114.196.0-195.114.198.255
                  195.114.203.0/24
                  195.114.205.0/24
                  213.220.0.0/24
                  213.220.4.0/24
                  213.220.6.0/24
                  213.220.11.0/24
                  213.220.14.0/24
                  213.220.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ac:09:9a:32:49:e4:52:e7:eb:18:16:29:56:84:74:1b:ec:
         fc:31:3f:28:a5:85:f7:df:2f:69:61:17:a6:fd:3f:be:6b:7d:
         fe:c8:66:3b:a2:ca:d1:5a:95:fa:e9:38:af:3a:de:36:cf:e4:
         aa:fc:7c:61:9e:d7:85:bd:47:34:27:de:f5:c8:ce:c4:ab:cf:
         28:d8:f8:fb:1b:a2:57:aa:46:42:99:32:76:53:2a:32:6c:d0:
         13:cd:ff:5e:86:8f:a1:7e:26:c7:10:e7:6f:58:9c:5d:19:3f:
         9b:2f:97:96:f5:9c:57:ee:b6:7f:18:c1:cc:8c:ed:84:ee:dc:
         27:ce:96:ed:4c:a7:1a:6f:82:64:c0:c8:68:7b:c8:e4:95:53:
         7d:c9:0d:2d:06:76:05:8f:27:95:a7:b4:ed:6d:3c:d0:7c:84:
         32:02:a2:8e:f9:6a:8f:a0:db:80:34:cd:a0:74:3f:c4:ed:19:
         b6:69:40:79:f1:52:91:12:d6:45:98:5c:cb:22:a4:4d:27:05:
         be:85:5c:bd:f5:3a:76:1f:b9:d3:6f:2a:e6:3c:ad:c9:d5:b1:
         98:d5:85:c0:93:3d:7c:22:54:af:f3:a0:34:f9:e2:ea:05:2c:
         e4:42:84:8a:e6:10:4b:42:11:00:15:8c:c6:3b:3e:cc:7f:16:
         5a:1b:c1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:10 2026 by rpki-client