This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/beU-evce9w8RpnlnhExOwqlTqVk.roa
File:                     beU-evce9w8RpnlnhExOwqlTqVk.roa (raw, json)
Hash identifier:          CxYZfkZx1/BXf+X3x5D+cUabOXDyrgunzk0Oi/R5nlk=
Subject key identifier:   6D:E5:3E:7A:F7:1E:F7:0F:11:A6:79:67:84:4C:4E:C2:A9:53:A9:59
Certificate issuer:       /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial:       019B7DCB03454CA15E4CDD925CD9E858B2B1
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/beU-evce9w8RpnlnhExOwqlTqVk.roa
Signing time:             Fri 02 Jan 2026 08:20:15 +0000
ROA not before:           Fri 02 Jan 2026 08:20:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49407
IP address blocks:        91.212.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:03:45:4c:a1:5e:4c:dd:92:5c:d9:e8:58:b2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
        Validity
            Not Before: Jan  2 08:20:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6de53e7af71ef70f11a67967844c4ec2a953a959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:4d:94:de:81:2c:bf:c9:36:34:b8:a2:cf:
                    3e:ad:ed:ac:10:14:5e:4f:1b:12:3a:82:9f:a3:25:
                    2b:e6:b4:76:bf:2b:02:8c:bc:7e:e5:be:06:f8:a0:
                    01:70:86:a4:6a:d5:0d:b8:b4:a7:d2:f9:b3:96:03:
                    13:df:bc:80:7b:51:76:3c:bf:eb:9d:9e:5f:71:75:
                    5e:33:82:3e:3f:21:6d:b7:5a:03:93:38:7f:8e:16:
                    8c:e1:9e:a4:5a:1f:e6:5e:3a:0c:3d:2a:70:c1:aa:
                    fd:7b:46:03:17:93:99:2e:85:3c:bd:ce:2e:64:e9:
                    14:0c:4b:c1:a4:c5:db:ba:f0:98:5d:11:8b:bc:17:
                    f7:72:7c:bf:bb:04:0e:dd:97:90:51:17:1d:3d:83:
                    b7:d9:63:cf:e3:47:62:54:c5:83:8e:ba:95:3f:5f:
                    4a:21:56:71:94:60:f4:19:55:6d:a7:94:8c:81:55:
                    4d:2b:87:eb:19:2c:6a:57:ae:c2:0c:21:98:ff:96:
                    8c:a1:29:80:46:a2:4d:69:58:32:b4:70:4b:d8:82:
                    65:81:f0:98:e1:1d:81:ca:44:a2:88:48:6d:ac:fd:
                    e8:02:98:fc:46:2b:b3:e3:ee:f1:1a:92:80:fd:ef:
                    7f:5d:a4:9a:0f:b6:09:45:20:64:7d:2c:9e:34:18:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E5:3E:7A:F7:1E:F7:0F:11:A6:79:67:84:4C:4E:C2:A9:53:A9:59
            X509v3 Authority Key Identifier:
                keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/beU-evce9w8RpnlnhExOwqlTqVk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:74:a3:10:14:fe:8d:76:80:91:de:43:94:7b:27:0b:70:d7:
         77:53:1e:bb:9d:15:3b:a6:df:73:81:ee:2e:7c:75:6b:2d:67:
         7b:be:ee:23:33:6e:fa:72:19:73:bd:dc:25:a9:2c:c1:35:c7:
         39:00:c4:8a:76:36:5b:4b:d2:3d:17:57:49:43:cc:5e:01:76:
         79:0f:7a:53:17:0f:ab:29:02:3a:ab:c2:66:21:57:ba:6f:91:
         0c:97:01:89:22:36:36:09:27:9c:f8:f6:73:1e:94:b9:8b:f1:
         54:bf:e1:5f:f7:fc:72:65:b3:77:18:5c:c9:bc:c5:eb:db:a9:
         5f:f8:a5:66:f0:29:9e:98:8d:40:2b:9f:c9:bd:df:e2:78:00:
         85:73:0b:ba:9c:3e:71:46:d9:bc:f5:8b:40:44:48:15:4b:8f:
         2c:11:52:92:e4:f4:15:29:db:80:cc:a7:0f:bb:71:da:5e:0d:
         ac:f5:1f:aa:53:74:92:7e:57:e6:d9:58:af:79:c9:45:3b:75:
         7a:90:90:14:fc:be:1c:83:80:a7:e9:ff:4f:fe:c9:24:6f:a3:
         4e:3d:e3:a4:65:9f:76:0b:0a:93:34:92:b5:75:1c:ff:89:2b:
         7e:2a:51:3e:9c:24:96:17:c1:09:25:60:0f:46:ae:6a:6a:91:
         e2:16:1b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:28 2026 by rpki-client