This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/69HB2mRccTU_k2AKxC7mKL2wmhk.roa
File:                     69HB2mRccTU_k2AKxC7mKL2wmhk.roa (raw, json)
Hash identifier:          N4JO0TUWjytNmZGyVjwMAyV4wDwmKWd+UMTD1SHMVxU=
Subject key identifier:   EB:D1:C1:DA:64:5C:71:35:3F:93:60:0A:C4:2E:E6:28:BD:B0:9A:19
Certificate issuer:       /CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
Certificate serial:       019B77C6C8584DB747DA4C84EC75F43DD1C2
Authority key identifier: B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/69HB2mRccTU_k2AKxC7mKL2wmhk.roa
Signing time:             Thu 01 Jan 2026 04:17:54 +0000
ROA not before:           Thu 01 Jan 2026 04:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29223
IP address blocks:        195.85.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:c8:58:4d:b7:47:da:4c:84:ec:75:f4:3d:d1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b66953aa29f8259aa02c1226a46ce09edd45ce9d
        Validity
            Not Before: Jan  1 04:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ebd1c1da645c71353f93600ac42ee628bdb09a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:2c:fd:e0:b2:3c:0a:8b:ff:58:60:7f:c9:
                    c0:eb:ce:ba:4a:6c:55:1c:57:fb:6e:1f:89:28:8b:
                    9f:69:9d:dc:ff:a2:1f:e6:f3:4f:96:52:a8:56:8b:
                    77:6e:a9:72:7d:1e:b0:f7:af:11:35:eb:e3:92:bb:
                    84:75:78:8b:05:b5:53:e2:d8:aa:05:2c:4c:d4:ee:
                    c8:fc:ae:66:18:46:89:57:75:fc:9d:56:18:6c:b0:
                    7c:83:1e:37:12:90:85:0c:6c:db:93:ed:a3:18:5f:
                    59:1c:10:9f:3b:a1:6e:3a:05:73:92:eb:94:5d:51:
                    d3:95:8a:50:2f:50:8a:53:8a:a5:38:a5:a4:cd:38:
                    c5:57:c4:c8:1b:e0:ad:be:2e:4d:42:63:35:91:2d:
                    16:57:10:5a:66:fb:f1:1a:fd:e4:78:dc:0d:c2:0e:
                    1b:13:9f:01:cd:2d:de:3c:74:80:b1:31:ef:84:07:
                    9f:c4:3a:f4:98:26:05:da:85:ac:d6:f9:ed:16:f6:
                    8c:01:a1:9e:77:db:89:ae:c6:e9:31:67:cb:a8:f7:
                    67:11:06:b9:c4:c7:7f:43:f9:f7:c7:1d:4c:73:72:
                    c9:26:cd:ea:b4:08:34:1e:96:db:b3:f9:70:16:a6:
                    ab:0a:1b:1c:9d:84:10:6a:8d:36:69:a3:47:76:71:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D1:C1:DA:64:5C:71:35:3F:93:60:0A:C4:2E:E6:28:BD:B0:9A:19
            X509v3 Authority Key Identifier:
                keyid:B6:69:53:AA:29:F8:25:9A:A0:2C:12:26:A4:6C:E0:9E:DD:45:CE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmlTqin4JZqgLBImpGzgnt1Fzp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/69HB2mRccTU_k2AKxC7mKL2wmhk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/259418-5e74-4df0-82a0-f9e75308754f/1/tmlTqin4JZqgLBImpGzgnt1Fzp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:da:4b:72:93:0e:28:42:f8:23:71:3f:91:1a:aa:4d:c0:51:
         55:2c:c4:b5:12:48:75:58:ef:40:40:d8:71:55:8c:85:bd:2b:
         6b:90:e3:a6:27:db:72:b0:10:a3:f5:68:a0:c5:a5:63:8e:e0:
         08:ff:3f:c5:78:e9:0b:b5:73:34:e5:19:9d:41:ac:93:d0:0a:
         71:b0:6a:65:c0:a1:1a:79:bb:e5:22:03:cd:8a:42:61:45:f7:
         51:9c:14:31:af:ba:f3:75:4e:fe:2f:88:38:8a:29:13:34:1c:
         00:fc:76:cd:27:40:ab:af:02:2b:e7:54:19:b2:fd:c0:d1:f4:
         38:9f:a3:d4:f5:f0:1e:91:bc:02:f3:53:3a:1f:cf:21:52:fa:
         6d:8c:19:d8:d9:08:ad:6b:9a:68:28:69:97:fa:e3:5a:4f:4d:
         25:8f:b6:11:6d:64:e7:9d:43:10:b8:ed:64:75:af:30:5f:3f:
         9f:45:6e:06:df:f4:0e:74:e5:ea:7d:36:83:c1:05:48:60:ca:
         80:8e:78:33:0b:af:10:6e:72:06:8f:d6:0a:99:ba:de:02:94:
         16:a0:e9:8c:2f:6f:99:8d:03:28:44:29:92:96:de:2c:82:3d:
         fb:09:32:12:cb:33:ae:49:78:88:37:42:14:50:a5:9f:cd:20:
         a7:97:6e:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3xshYTbdH2kyE7HX0PdHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2Njk1M2FhMjlmODI1OWFhMDJjMTIyNmE0NmNlMDllZGQ0
NWNlOWQwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmQxYzFkYTY0NWM3MTM1M2Y5MzYwMGFjNDJlZTYyOGJkYjA5YTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOgs/eCyPAqL/1hgf8nA6866SmxV
HFf7bh+JKIufaZ3c/6If5vNPllKoVot3bqlyfR6w968RNevjkruEdXiLBbVT4tiq
BSxM1O7I/K5mGEaJV3X8nVYYbLB8gx43EpCFDGzbk+2jGF9ZHBCfO6FuOgVzkuuU
XVHTlYpQL1CKU4qlOKWkzTjFV8TIG+Ctvi5NQmM1kS0WVxBaZvvxGv3keNwNwg4b
E58BzS3ePHSAsTHvhAefxDr0mCYF2oWs1vntFvaMAaGed9uJrsbpMWfLqPdnEQa5
xMd/Q/n3xx1Mc3LJJs3qtAg0Hpbbs/lwFqarChscnYQQao02aaNHdnEqhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvRwdpkXHE1P5NgCsQu5ii9sJoZMB8GA1UdIwQY
MBaAFLZpU6op+CWaoCwSJqRs4J7dRc6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG1sVHFpbjRKWnFnTEJJbXBHemdudDFGenAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yNTk0MTgtNWU3NC00ZGYwLTgyYTAt
ZjllNzUzMDg3NTRmLzEvNjlIQjJtUmNjVFVfazJBS3hDN21LTDJ3bWhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8yNTk0MTgtNWU3NC00ZGYwLTgyYTAtZjllNzUzMDg3NTRm
LzEvdG1sVHFpbjRKWnFnTEJJbXBHemdudDFGenAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XzMA0G
CSqGSIb3DQEBCwUAA4IBAQAS2ktykw4oQvgjcT+RGqpNwFFVLMS1Ekh1WO9AQNhx
VYyFvStrkOOmJ9tysBCj9WigxaVjjuAI/z/FeOkLtXM05RmdQayT0ApxsGplwKEa
ebvlIgPNikJhRfdRnBQxr7rzdU7+L4g4iikTNBwA/HbNJ0CrrwIr51QZsv3A0fQ4
n6PU9fAekbwC81M6H88hUvptjBnY2Qita5poKGmX+uNaT00lj7YRbWTnnUMQuO1k
da8wXz+fRW4G3/QOdOXqfTaDwQVIYMqAjngzC68QbnIGj9YKmbreApQWoOmML2+Z
jQMoRCmSlt4sgj37CTISyzOuSXiIN0IUUKWfzSCnl26L
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:09:21 2026 by rpki-client