This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/202qM1rsE239uIdAcf__Gnv7zdc.roa
File:                     202qM1rsE239uIdAcf__Gnv7zdc.roa (raw, json)
Hash identifier:          ieFIbb9cUztQSqOO5FEKp3hxs3Zx7kO0z2iNcIicraA=
Subject key identifier:   DB:4D:AA:33:5A:EC:13:6D:FD:B8:87:40:71:FF:FF:1A:7B:FB:CD:D7
Certificate issuer:       /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial:       019B7F142429871FB5FBC5A8D77C69595ABA
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/202qM1rsE239uIdAcf__Gnv7zdc.roa
Signing time:             Fri 02 Jan 2026 14:19:45 +0000
ROA not before:           Fri 02 Jan 2026 14:19:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60764
IP address blocks:        86.62.12.0/24 maxlen: 32
                          86.62.13.0/24 maxlen: 32
                          86.62.14.0/24 maxlen: 32
                          86.62.15.0/24 maxlen: 32
                          185.174.192.0/24 maxlen: 32
                          185.174.193.0/24 maxlen: 32
                          185.174.194.0/24 maxlen: 32
                          185.174.195.0/24 maxlen: 32
                          2a09:3300::/32 maxlen: 32
                          2a0b:b500::/30 maxlen: 30
                          2a0b:b500::/31 maxlen: 31
                          2a0b:b500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:24:29:87:1f:b5:fb:c5:a8:d7:7c:69:59:5a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
        Validity
            Not Before: Jan  2 14:19:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=db4daa335aec136dfdb8874071ffff1a7bfbcdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:79:19:a3:8a:09:56:07:84:ac:70:fd:7e:
                    ad:13:e9:7e:24:8f:82:f5:64:af:df:ac:a6:f4:18:
                    54:db:70:c7:de:52:bf:a2:7f:f8:02:4e:79:27:b3:
                    cb:f9:ec:00:88:80:ac:1b:ed:fc:e8:c1:59:d9:14:
                    b1:45:2b:51:75:4c:12:09:8d:04:82:a6:fd:4e:9e:
                    b3:f4:16:e1:70:8a:26:67:00:d1:07:97:b9:63:f7:
                    f9:eb:45:3a:b4:9f:bd:34:d6:99:f8:25:4e:7b:fe:
                    96:5c:f6:7d:56:a0:6a:d8:37:95:28:4b:f6:31:25:
                    ea:99:9d:27:d4:58:3e:66:11:15:99:69:8d:0f:fb:
                    cf:d8:a1:2a:10:68:68:fd:60:61:c5:3e:d0:14:b8:
                    df:6e:d9:e8:c6:28:2a:c6:31:7f:1b:57:1b:74:70:
                    d4:e6:59:0a:64:43:33:45:d7:31:4b:80:8a:29:62:
                    6c:6e:95:88:7e:36:bd:01:78:30:a0:40:9c:1d:03:
                    db:0a:2f:e8:79:92:81:d2:64:5a:13:2e:0f:b4:4d:
                    2e:d3:5c:be:42:02:1f:c3:94:55:2c:27:4c:9d:d8:
                    9f:60:fb:98:0c:65:39:1c:eb:eb:21:39:1f:94:1b:
                    b9:5e:ab:40:00:8d:6d:79:47:a2:77:66:b5:ab:94:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4D:AA:33:5A:EC:13:6D:FD:B8:87:40:71:FF:FF:1A:7B:FB:CD:D7
            X509v3 Authority Key Identifier:
                keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/202qM1rsE239uIdAcf__Gnv7zdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.62.12.0/22
                  185.174.192.0/22
                IPv6:
                  2a09:3300::/32
                  2a0b:b500::/30

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:c4:1e:36:ca:fc:09:49:2a:a2:c6:1c:6f:ed:a5:c7:ee:
         7e:ae:8f:d1:e8:7a:58:55:a3:c6:a7:00:7c:69:38:e5:d7:f0:
         16:ae:af:cf:f2:fe:9f:76:39:8c:b9:b3:23:14:eb:cc:56:92:
         48:63:fa:77:7f:04:f4:9a:35:38:2d:a7:cd:ea:0c:6f:60:86:
         a9:0b:25:74:f2:00:f2:5e:25:2f:65:65:1b:be:3c:1d:70:c4:
         9e:48:46:b0:35:e3:48:d7:7f:aa:30:b6:0b:b5:6d:20:5a:a5:
         26:12:23:d8:98:20:ab:8b:05:14:e5:1d:4b:5c:f9:d7:3f:52:
         06:36:ba:9d:fd:be:5d:0d:f1:0b:4c:ab:d0:2f:7f:0e:d7:12:
         0c:eb:96:22:11:73:fc:4b:3a:f3:f8:83:ad:3e:92:af:4a:f1:
         16:e0:fb:a7:55:31:6e:17:17:9d:04:fa:68:5d:32:f2:4f:0b:
         49:48:b1:90:c6:c7:a8:ea:d5:e0:4b:b8:99:12:30:2e:fa:43:
         a1:b5:cd:06:4f:96:0f:e3:f8:9f:67:34:cd:06:60:b6:76:03:
         28:78:5e:d1:68:54:00:81:3e:84:75:8b:95:9a:57:41:69:44:
         e3:cb:10:17:e4:f3:24:0d:7e:32:e7:f7:eb:5e:5d:2e:3a:84:
         28:61:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:25 2026 by rpki-client