This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa
File:                     NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa (raw, json)
Hash identifier:          b2x0KyvUzCbJHB1hWOnKC2ju1PwOkyG9Q3mb0qlRsLg=
Subject key identifier:   35:77:A8:F8:9F:D9:0E:E9:01:ED:23:B6:0E:45:D6:99:8F:2B:F1:EF
Certificate issuer:       /CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
Certificate serial:       019B7C807ECB9A772CA890A5D7ED704415B9
Authority key identifier: E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa
Signing time:             Fri 02 Jan 2026 02:19:14 +0000
ROA not before:           Fri 02 Jan 2026 02:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201076
IP address blocks:        141.226.248.0/24 maxlen: 24
                          188.64.208.0/24 maxlen: 24
                          188.64.209.0/24 maxlen: 24
                          188.64.210.0/24 maxlen: 24
                          188.64.211.0/24 maxlen: 24
                          2a07:e7c0::/48 maxlen: 48
                          2a07:e7c0:1::/48 maxlen: 48
                          2a07:e7c0:2::/48 maxlen: 48
                          2a07:e7c0:3::/48 maxlen: 48
                          2a07:e7c0:147::/48 maxlen: 48
                          2a07:e7c0:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:7e:cb:9a:77:2c:a8:90:a5:d7:ed:70:44:15:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98e202381c1c88d82f3b70f3be068a1aa372b9d
        Validity
            Not Before: Jan  2 02:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3577a8f89fd90ee901ed23b60e45d6998f2bf1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:44:41:e2:f5:bb:4a:b9:4c:35:42:53:90:
                    2f:11:6c:97:fd:b0:99:bb:28:08:f4:62:7e:02:87:
                    ae:67:77:19:40:0e:95:74:63:c0:b2:b3:28:cf:73:
                    4b:40:c5:76:c4:60:42:0b:ee:91:83:4c:f2:4c:7b:
                    2d:6f:c1:ef:a2:de:1e:49:3c:8d:a0:68:13:9f:99:
                    14:5a:3a:79:5d:da:ea:cb:4c:4b:65:92:3d:ab:93:
                    75:c4:24:e0:cc:e3:c9:c1:69:36:ab:23:e6:8a:82:
                    7c:34:fa:25:c8:ed:5a:64:cd:6e:f2:1a:3f:2b:fe:
                    0b:e8:2d:e3:c9:54:c3:fa:ff:ab:e1:8f:db:37:bd:
                    b1:ea:70:e4:3f:cb:d9:90:31:e1:26:b3:5c:8d:29:
                    d9:dd:c8:5c:0f:be:3c:1a:3c:fa:62:90:e6:3f:c5:
                    e5:a3:d4:db:9f:e9:ad:f3:d3:e7:00:69:a7:19:b3:
                    9f:3e:8f:14:5b:c5:39:6a:ab:e3:bd:99:01:72:36:
                    6d:20:67:83:44:ab:16:75:93:a8:af:8c:ec:50:29:
                    f0:8b:a7:f8:4e:06:3d:30:27:4b:78:33:62:51:14:
                    d8:59:66:2c:b4:37:d1:9b:00:77:65:5d:14:aa:9b:
                    5a:6f:d4:e6:84:fb:aa:e3:a2:de:ed:c4:33:7c:a8:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:77:A8:F8:9F:D9:0E:E9:01:ED:23:B6:0E:45:D6:99:8F:2B:F1:EF
            X509v3 Authority Key Identifier:
                keyid:E9:8E:20:23:81:C1:C8:8D:82:F3:B7:0F:3B:E0:68:A1:AA:37:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Y4gI4HByI2C87cPO-Booao3K50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/NXeo-J_ZDukB7SO2DkXWmY8r8e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f78937-aed3-4b6f-aa2d-c832ed7d5fec/1/6Y4gI4HByI2C87cPO-Booao3K50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.226.248.0/24
                  188.64.208.0/22
                IPv6:
                  2a07:e7c0::/46
                  2a07:e7c0:147::/48
                  2a07:e7c0:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:39:0d:b7:31:80:26:23:6b:6e:14:11:c4:2f:cc:39:01:fe:
         e2:90:1e:2b:4a:54:75:7c:f6:bb:30:8e:d8:35:8b:4a:b1:7f:
         45:00:b9:f2:5a:3b:30:e5:d6:fc:dc:01:73:06:22:e3:24:ed:
         d9:68:31:c6:22:24:1e:02:24:ba:95:fb:2b:96:32:cf:86:21:
         bf:bb:a5:47:07:c5:05:27:d9:4c:76:cc:67:83:c1:d7:48:6c:
         47:84:54:9d:8c:bb:68:f6:d0:71:71:20:dc:2a:ed:99:99:77:
         78:77:84:f3:ac:56:b8:32:8f:a0:89:b2:4d:c9:85:0d:29:a1:
         bc:9c:73:9a:e2:05:57:ec:8e:e7:42:a4:3b:88:f7:c8:d3:80:
         e6:30:6d:fc:cc:6b:7d:ae:3d:fc:8a:46:6b:9f:66:0f:2e:dc:
         05:cb:cc:34:3a:a8:1b:66:92:4b:54:15:18:03:aa:c2:7f:3f:
         d7:ac:98:ad:6b:f1:8f:96:22:49:52:cc:b3:45:27:b5:84:0e:
         5d:fd:ee:8c:60:34:9b:a3:9e:f0:6b:a7:36:85:13:30:72:73:
         8e:af:4b:64:fa:55:ce:51:94:0a:44:41:74:f3:25:a9:0a:92:
         31:67:f9:e0:a8:df:47:95:1a:dd:7c:c6:8d:be:67:c9:98:2e:
         7e:c0:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:08 2026 by rpki-client