This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/deE75SevBPoLBBV-kYApKEjzkBY.roa
File:                     deE75SevBPoLBBV-kYApKEjzkBY.roa (raw, json)
Hash identifier:          iHy3btB3fLg5S2KEubTWq3Yf0aElaQLO6vxuJIQCC3A=
Subject key identifier:   75:E1:3B:E5:27:AF:04:FA:0B:04:15:7E:91:80:29:28:48:F3:90:16
Certificate issuer:       /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial:       019B7C1249D74018A6E7200657A29614B64A
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/deE75SevBPoLBBV-kYApKEjzkBY.roa
Signing time:             Fri 02 Jan 2026 00:18:51 +0000
ROA not before:           Fri 02 Jan 2026 00:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56813
IP address blocks:        91.237.88.0/23 maxlen: 24
                          2001:67c:299c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:49:d7:40:18:a6:e7:20:06:57:a2:96:14:b6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
        Validity
            Not Before: Jan  2 00:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75e13be527af04fa0b04157e9180292848f39016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:b3:5a:1f:9d:29:90:cb:e6:1b:c9:3a:b5:
                    78:a5:2d:b1:64:13:ea:e5:dc:df:4c:c8:d5:f6:a1:
                    3c:e4:bd:ca:61:d1:f6:2b:76:fc:1d:20:bb:6b:53:
                    66:12:18:18:66:63:f7:4d:29:cc:87:f1:2d:14:3b:
                    28:04:db:5c:0e:58:f5:3c:dc:a0:df:36:de:f7:dc:
                    07:15:2e:5f:26:e4:c8:95:5e:ee:57:97:65:c6:aa:
                    de:45:e9:8e:8f:88:b5:ec:28:7d:07:15:9d:4d:d3:
                    28:9d:c5:b0:33:dc:7e:2e:ec:38:73:bc:bb:9b:8c:
                    46:2a:f6:2c:b7:7d:ea:c1:b4:f3:13:49:55:87:dc:
                    c3:c8:e0:9d:1e:39:fc:ee:fc:fb:a8:f9:64:57:c9:
                    7a:4f:5d:a4:03:98:f6:df:38:e8:fa:60:18:ec:29:
                    f8:ac:d5:67:b4:7f:ac:35:19:af:95:85:d7:f2:7a:
                    d7:fd:00:06:47:43:92:c9:23:86:9b:e6:6a:a4:0d:
                    d0:67:ba:2f:9b:b1:f6:ef:da:e7:76:03:f3:16:95:
                    a6:1a:12:d1:ee:e3:6e:df:0d:fb:8b:be:5f:37:11:
                    57:c9:27:09:37:e5:a8:fa:29:4c:36:65:0f:6e:eb:
                    0b:92:c7:07:82:76:80:b7:a4:70:94:44:67:2c:55:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:3B:E5:27:AF:04:FA:0B:04:15:7E:91:80:29:28:48:F3:90:16
            X509v3 Authority Key Identifier:
                keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/deE75SevBPoLBBV-kYApKEjzkBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.88.0/23
                IPv6:
                  2001:67c:299c::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:48:dd:49:3f:af:bc:63:45:19:fe:16:5c:20:75:ad:ad:
         bf:81:cc:d7:ad:a4:cf:5b:3c:26:f2:b3:9f:92:85:71:de:6c:
         97:42:99:c5:7a:4c:58:e8:9a:c3:4d:35:7b:65:bb:f5:d0:44:
         b8:0c:57:b0:0e:0c:10:36:c5:f0:63:70:86:7a:5a:1b:85:3c:
         8b:1b:7d:ae:4d:73:85:3d:b6:be:2a:c7:55:c1:03:af:d8:89:
         9b:9c:38:35:e3:5d:a7:7d:4b:29:d1:ad:5f:5b:bf:92:79:b3:
         49:8b:9a:cd:a5:ec:87:34:c2:2a:96:83:aa:ae:17:c5:94:54:
         5a:94:a8:ae:0f:e4:0f:f3:a6:5a:62:db:6e:57:e3:99:6d:20:
         6f:f8:b2:8b:af:ef:2f:6e:e8:4f:48:ae:4c:05:b5:9d:2f:8d:
         ef:a1:ff:8f:3d:96:31:5f:e7:6e:74:96:2e:62:19:3d:6a:af:
         39:d8:df:4f:e3:54:9c:ff:92:5c:a3:12:ad:60:59:a3:04:c3:
         b2:24:64:32:76:5b:04:cf:0e:60:a9:3c:8d:98:2e:aa:44:6a:
         f3:73:c8:a6:59:a8:a0:e6:89:60:9d:0c:f7:0c:96:37:cb:bf:
         a4:69:30:b0:47:f6:0e:2b:64:89:23:9e:43:15:66:da:76:a5:
         79:b1:b4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:19 2026 by rpki-client