This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa
File:                     NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa (raw, json)
Hash identifier:          nHBSYWCWMkjsq8eIHvyxI7K4o3nKXMreU+r6LsPFSas=
Subject key identifier:   34:4F:D1:06:02:CD:F9:61:19:D6:9A:1F:4D:9A:51:58:72:90:2E:15
Certificate issuer:       /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial:       019B78A32EDBA9D6F7A737D65978A03C9615
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa
Signing time:             Thu 01 Jan 2026 08:18:38 +0000
ROA not before:           Thu 01 Jan 2026 08:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50597
IP address blocks:        185.254.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:2e:db:a9:d6:f7:a7:37:d6:59:78:a0:3c:96:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
        Validity
            Not Before: Jan  1 08:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=344fd10602cdf96119d69a1f4d9a515872902e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6c:08:c0:34:6d:0f:10:6e:5d:31:a6:79:2b:
                    53:63:33:66:cd:72:1b:2d:24:1b:86:6d:92:fe:cb:
                    15:dc:2e:e4:98:0c:fb:e8:67:93:2b:a9:07:64:a1:
                    08:20:42:a1:f6:08:e0:44:5f:cf:ff:a0:57:ea:54:
                    fa:34:c5:8f:a4:19:96:39:90:bb:90:2e:65:60:b6:
                    39:de:f9:09:dd:ae:46:bd:3d:7c:2b:81:92:f2:20:
                    c3:ab:52:d0:35:64:1a:17:60:d0:a0:e2:e1:ba:be:
                    18:5c:4a:b3:ec:b9:49:77:14:e6:c3:2a:44:a4:cb:
                    52:49:06:91:56:bd:2e:10:7c:64:8f:7d:aa:e6:23:
                    92:4e:a1:45:2c:b5:57:65:59:3a:cd:e1:f4:81:b7:
                    71:85:70:79:ad:d5:ee:80:3a:11:78:75:3a:da:b3:
                    d1:51:0e:44:90:82:5f:2e:65:0e:43:40:c6:db:e2:
                    99:b3:83:7a:32:f8:f2:0f:dd:ae:83:1e:30:1e:18:
                    7c:5a:34:35:31:81:95:a5:24:75:fd:00:bc:76:f0:
                    03:58:81:83:81:b6:74:bd:e6:fd:37:ab:6b:d7:3d:
                    b8:ca:db:e5:f6:0b:82:33:20:a3:fd:37:bb:e9:97:
                    c0:4d:7e:b8:4b:43:cb:fd:43:57:c9:b8:c4:9c:af:
                    c5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4F:D1:06:02:CD:F9:61:19:D6:9A:1F:4D:9A:51:58:72:90:2E:15
            X509v3 Authority Key Identifier:
                keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.254.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:a8:20:2f:93:ee:48:dd:4e:5b:23:02:2e:78:24:39:c2:91:
         f6:d4:cf:bc:f7:10:86:a7:f4:bd:68:b4:d0:d2:ce:97:ef:89:
         08:4f:07:4e:2b:53:48:11:7c:c6:c0:57:65:87:62:f8:33:1f:
         65:c6:af:7d:1a:2f:9f:a0:7e:65:af:d9:85:dd:f5:f2:27:f4:
         83:a2:5c:a0:c6:64:f3:ac:a7:6f:68:7f:ce:6d:9a:f9:99:9c:
         aa:c0:e8:a3:b5:5e:15:10:48:fe:0b:b8:08:a7:5e:c5:b5:ca:
         b0:9d:52:e5:ec:43:db:28:4e:4f:85:f0:f3:45:4a:56:35:c2:
         79:f6:16:e2:3d:47:5e:db:22:e2:2d:b3:17:68:80:b9:a8:05:
         7e:97:03:1b:67:6a:2a:bb:0a:1d:95:73:40:26:96:e8:2f:84:
         b2:d8:5e:2b:ce:5e:50:35:e4:94:e5:13:41:11:32:44:c2:46:
         47:61:d9:7f:60:6e:c1:b3:40:27:9a:dc:a1:de:82:b3:d0:4f:
         3c:3c:d8:17:37:43:33:1c:a6:ea:e9:76:d0:49:93:3d:71:3d:
         2b:21:12:6c:17:a8:e0:b4:8c:30:43:50:2f:c3:79:c7:b8:40:
         4b:bc:02:a4:6e:0c:24:0c:6c:83:48:a1:a0:6e:e4:68:e8:8e:
         e7:c3:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:36 2026 by rpki-client