This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_K246O-pbv3LImR_NbGl0Uuk0ms.roa
File:                     _K246O-pbv3LImR_NbGl0Uuk0ms.roa (raw, json)
Hash identifier:          4aM+aELc7GT7SUF0gs3npOnDB0xgu8gqvceBuJ4g3W0=
Subject key identifier:   FC:AD:B8:E8:EF:A9:6E:FD:CB:22:64:7F:35:B1:A5:D1:4B:A4:D2:6B
Certificate issuer:       /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial:       019B7C11F8E07B9B56ED4E07BBF0A5A826B3
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_K246O-pbv3LImR_NbGl0Uuk0ms.roa
Signing time:             Fri 02 Jan 2026 00:18:30 +0000
ROA not before:           Fri 02 Jan 2026 00:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     54128
IP address blocks:        213.86.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:f8:e0:7b:9b:56:ed:4e:07:bb:f0:a5:a8:26:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
        Validity
            Not Before: Jan  2 00:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fcadb8e8efa96efdcb22647f35b1a5d14ba4d26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:b6:15:1c:21:1b:6c:39:7e:48:8d:45:3c:
                    ae:a8:25:f0:60:1f:6a:d2:29:40:e9:5f:62:aa:01:
                    d8:cd:fb:ee:91:84:cc:23:82:f4:a8:3d:2e:8c:d1:
                    1c:9c:f0:b5:f8:44:8d:34:6f:50:73:19:64:87:1b:
                    12:cb:3b:98:34:5f:ae:1c:33:d2:82:50:1c:79:49:
                    3b:c9:26:c0:57:2e:b1:a4:2e:1c:7e:47:73:52:12:
                    ca:a5:ed:98:92:a4:d6:3b:6a:b5:f1:21:e2:5b:e5:
                    07:41:89:20:e1:02:e3:6a:fa:37:cd:1f:94:ed:93:
                    f7:fd:0a:65:d6:05:6c:78:fa:e8:dc:cc:6b:04:62:
                    71:35:26:ae:e4:b3:b3:17:c9:db:75:2e:95:13:a8:
                    0c:96:3e:3d:a5:68:6b:83:60:6e:09:a5:df:05:e0:
                    19:2c:f0:3d:f4:a9:6a:b6:a1:d4:5a:d6:3b:df:b3:
                    a4:0b:00:8c:1e:ce:79:40:dc:cf:6e:3e:c7:0a:b2:
                    69:70:fc:46:97:99:54:3a:37:6b:91:77:d8:0d:f7:
                    9e:2f:eb:03:fd:48:1c:ab:60:37:79:59:1c:f6:04:
                    1e:19:cb:2b:bd:b7:2d:6e:70:da:ec:9f:d3:40:62:
                    0e:0f:ed:5e:aa:7b:8c:41:b2:e8:e0:5e:f6:ab:10:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AD:B8:E8:EF:A9:6E:FD:CB:22:64:7F:35:B1:A5:D1:4B:A4:D2:6B
            X509v3 Authority Key Identifier:
                keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/_K246O-pbv3LImR_NbGl0Uuk0ms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.86.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:c4:4b:d1:83:7a:18:3a:2a:8d:5a:bd:6e:97:54:7f:e6:cc:
         67:0d:27:af:f5:d1:ba:34:98:55:df:b6:ed:f8:ea:22:29:46:
         d0:03:3a:0b:61:49:f4:97:a3:48:92:fc:1d:60:db:76:93:b5:
         08:d3:4f:12:73:95:20:28:f3:ab:75:53:29:0a:d4:53:92:10:
         63:93:86:58:94:71:f7:e7:f3:58:0c:4c:9b:3b:4a:4d:20:f2:
         1e:ca:bf:cc:f8:92:ac:26:98:7e:1b:1c:23:93:7d:3c:74:86:
         2a:1c:87:cd:30:40:2b:24:c1:f2:1f:f9:61:1f:82:28:85:09:
         22:72:2d:d4:36:5c:d0:f0:57:e1:25:82:bc:55:2c:bb:76:67:
         46:7f:b7:94:cd:90:84:07:2c:05:32:bf:ea:dd:08:8a:bf:7d:
         c4:ea:d4:92:48:80:75:60:13:a6:b9:28:17:ca:09:c7:37:61:
         05:5a:3b:39:4e:42:73:a0:75:fe:98:2c:6c:1b:59:04:3c:68:
         b0:67:b0:78:42:5d:a0:df:3a:dd:d4:cc:bd:0a:3a:08:5a:6c:
         7d:1b:ef:32:09:0d:b2:ed:1b:cd:35:35:9f:25:26:30:6a:7e:
         f2:37:bd:0d:79:b0:37:91:15:2d:d6:cd:9e:3b:cb:5c:52:c8:
         ed:0d:15:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:20:17 2026 by rpki-client