This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/6qWCpueTH15zed_1u4JRaf2a7QQ.roa
File:                     6qWCpueTH15zed_1u4JRaf2a7QQ.roa (raw, json)
Hash identifier:          wPaJ9em9JJwywgqatE6yZ7uDMay3QNlPb8TvcJD+KEU=
Subject key identifier:   EA:A5:82:A6:E7:93:1F:5E:73:79:DF:F5:BB:82:51:69:FD:9A:ED:04
Certificate issuer:       /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
Certificate serial:       019C2F405BE111181BC4F04BAA56C3DD18FC
Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/6qWCpueTH15zed_1u4JRaf2a7QQ.roa
Signing time:             Thu 05 Feb 2026 19:21:12 +0000
ROA not before:           Thu 05 Feb 2026 19:21:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15992
IP address blocks:        91.207.192.0/24 maxlen: 24
                          91.207.192.0/25 maxlen: 25
                          91.207.192.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2f:40:5b:e1:11:18:1b:c4:f0:4b:aa:56:c3:dd:18:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8
        Validity
            Not Before: Feb  5 19:21:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eaa582a6e7931f5e7379dff5bb825169fd9aed04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:36:28:ae:ba:0e:f5:03:f5:e0:44:4c:0d:
                    b9:2b:4c:89:84:31:ad:5d:31:94:23:bc:66:f9:70:
                    0d:e9:6c:28:84:5c:b7:f0:99:5b:dc:76:d6:b3:08:
                    04:e7:5b:cd:42:9f:1a:6f:5c:b0:79:f9:31:c9:74:
                    f9:00:63:3e:ae:d6:fb:13:e3:09:d1:ab:5a:c8:86:
                    bb:4a:a2:a8:e6:de:d4:4f:2d:ec:a6:da:74:9d:d7:
                    c0:ef:e3:7f:71:c6:f6:dc:03:2a:d8:b0:98:58:4c:
                    bd:1d:e7:32:b2:15:a1:2b:fe:ea:55:a0:7b:ce:c6:
                    d9:0d:3a:e4:b0:0f:b8:af:d6:6d:6e:fc:1c:4d:3c:
                    3b:0e:fb:48:a9:73:0b:80:ea:f4:47:ca:54:da:6d:
                    30:b2:73:86:25:c4:9a:c9:8c:a4:21:7c:73:21:2e:
                    42:cf:e2:5c:61:92:a4:0c:db:95:f5:4e:93:ac:d5:
                    dc:0b:77:43:4e:12:df:db:44:81:51:ec:fd:b5:83:
                    a8:fd:43:df:b6:14:5e:c6:ee:b1:06:a4:d2:2d:55:
                    6b:24:ae:0f:c4:23:34:85:b3:96:2c:94:3a:91:23:
                    d2:e8:42:15:62:0a:0f:ae:f5:f7:91:f0:1c:47:ce:
                    a9:a7:94:a9:a6:a2:b5:29:15:08:d5:f6:9c:57:ee:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A5:82:A6:E7:93:1F:5E:73:79:DF:F5:BB:82:51:69:FD:9A:ED:04
            X509v3 Authority Key Identifier:
                keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/6qWCpueTH15zed_1u4JRaf2a7QQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.207.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:8d:16:55:c4:2f:ec:65:0a:f7:eb:f6:68:d1:7a:3a:65:
         58:9c:48:53:b0:13:0d:79:01:e7:9c:c7:4e:59:62:1a:b9:74:
         29:ff:48:dd:a4:16:02:e5:5b:6a:ba:f9:c4:bc:09:a0:c7:89:
         97:fb:7c:bc:1b:3c:f1:29:9a:89:a7:6e:77:71:f8:41:af:7d:
         6a:c1:27:b1:cf:01:e6:7c:77:d3:05:96:b7:9b:f1:bf:75:cd:
         54:6b:a4:12:b4:60:cd:18:fc:6c:85:66:79:09:3e:4b:4d:66:
         f3:b2:4b:6b:dd:74:fa:a8:0e:55:02:15:dc:f9:08:ea:f7:b0:
         59:5e:2e:24:4b:dc:79:14:c1:99:43:6b:99:39:4c:44:cd:9b:
         e6:d4:1a:c6:a7:97:49:b7:09:dd:2f:67:ab:ba:14:8b:97:b3:
         fa:f2:eb:69:d3:80:e7:3c:2d:6b:c3:55:c9:ba:86:b5:2c:ef:
         dd:5a:64:5c:55:70:ca:ca:fd:4d:40:e9:e7:90:c3:7b:a6:71:
         02:31:c0:26:13:27:61:d9:91:df:6a:23:78:e7:5e:f5:e9:20:
         eb:fb:e3:19:18:83:1f:ea:7a:03:cd:5a:5e:99:b0:78:bd:9b:
         f7:eb:c4:cf:19:99:bd:9a:84:de:a1:ae:36:69:56:3b:c9:fb:
         9d:55:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:33 2026 by rpki-client