This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/E26lWRFy5uBWZ0LXOSR82llS8hE.roa
File:                     E26lWRFy5uBWZ0LXOSR82llS8hE.roa (raw, json)
Hash identifier:          PUFaiUJ3FuqxlrdeJn418rA6jnvmPgOSoavbKVF5Zjw=
Subject key identifier:   13:6E:A5:59:11:72:E6:E0:56:67:42:D7:39:24:7C:DA:59:52:F2:11
Certificate issuer:       /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial:       019B797F1F8698FCC084409AE454A51F542E
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/E26lWRFy5uBWZ0LXOSR82llS8hE.roa
Signing time:             Thu 01 Jan 2026 12:18:52 +0000
ROA not before:           Thu 01 Jan 2026 12:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3226
IP address blocks:        155.212.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 02:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:1f:86:98:fc:c0:84:40:9a:e4:54:a5:1f:54:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
        Validity
            Not Before: Jan  1 12:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=136ea5591172e6e0566742d739247cda5952f211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:9a:8d:1a:18:cb:55:5c:63:8f:86:26:c4:
                    5d:2f:bf:96:41:18:ec:fb:99:fb:51:ac:44:b9:5f:
                    d5:ee:09:13:2a:47:8d:45:2c:0d:f8:e2:d0:fd:55:
                    73:12:fa:63:40:45:6f:18:d2:6f:96:e2:0e:fb:fd:
                    81:29:cf:30:c3:ce:ff:ab:9f:aa:6c:eb:77:9d:81:
                    98:95:5f:6f:40:33:62:c3:59:d7:8f:71:1d:c6:62:
                    2f:4d:10:58:ff:11:39:55:bb:29:67:9d:b3:83:70:
                    ed:08:d0:5f:69:a3:3f:27:0e:10:86:0f:0e:24:13:
                    af:81:11:66:66:08:07:a9:0e:12:8e:e8:95:dd:39:
                    a7:5c:70:33:a4:28:25:2f:7c:7c:49:47:ab:7a:73:
                    c2:f4:fe:33:b9:f6:a5:90:08:ae:9b:ff:65:16:c1:
                    89:26:38:af:55:14:55:3d:26:dc:24:35:b2:b1:ff:
                    c1:ce:dc:db:b2:84:96:23:8d:55:bc:28:cc:41:cc:
                    49:58:24:f6:b2:5f:56:5c:c0:18:ea:8e:c2:d7:13:
                    08:75:e9:13:7f:9f:d3:d5:71:57:94:9d:93:4f:1a:
                    f7:85:25:f3:8d:b6:be:c4:f1:3b:14:17:b1:e8:24:
                    92:ba:bd:1c:7b:7c:25:05:52:b3:a7:c8:ca:99:04:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6E:A5:59:11:72:E6:E0:56:67:42:D7:39:24:7C:DA:59:52:F2:11
            X509v3 Authority Key Identifier:
                keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/E26lWRFy5uBWZ0LXOSR82llS8hE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.212.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:ba:f0:5a:bf:24:e7:f0:fc:32:83:ed:02:44:d8:04:1f:d0:
         af:53:bc:4f:f3:1a:db:a8:50:22:7b:ec:29:26:d8:13:cb:48:
         05:ac:56:88:4d:dd:e3:96:bc:e1:25:4d:0b:c5:9b:40:b4:4b:
         7a:0a:5c:ee:87:8b:60:7a:36:ed:d6:6f:10:4d:41:82:8e:de:
         85:c9:21:b0:19:78:e9:69:1b:6d:42:c6:64:c0:bb:54:dc:02:
         3a:13:c6:10:52:e9:14:86:72:5a:8d:dc:98:91:80:ce:03:ff:
         b9:92:c9:dc:75:e1:15:1b:7d:cc:f1:1b:39:e7:9c:3a:41:91:
         ee:c7:17:17:a8:b5:13:42:c4:4b:23:38:94:15:b1:25:04:e8:
         35:eb:4c:1b:00:3d:a7:46:93:21:d0:65:95:06:81:5e:c6:9a:
         a7:2e:c2:91:04:53:18:ee:dc:83:ab:75:c9:9b:25:1f:65:d8:
         a3:6c:02:94:bf:75:7e:83:0c:71:5d:23:b7:7b:b1:fb:f8:20:
         86:0e:1c:3b:cf:b3:3d:b8:62:71:7a:79:91:97:7c:9d:85:ee:
         73:c2:8d:55:65:5b:10:66:73:fe:68:e0:95:cb:ba:36:3c:ec:
         76:31:04:66:cb:b9:4e:d5:12:ea:44:a1:95:40:14:9d:3b:e4:
         91:90:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 06:43:20 2026 by rpki-client