This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/X206-RRIU-SViIIBDaDjImGa3dY.roa
File:                     X206-RRIU-SViIIBDaDjImGa3dY.roa (raw, json)
Hash identifier:          4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=
Subject key identifier:   5F:6D:3A:F9:14:48:53:E4:95:88:82:01:0D:A0:E3:22:61:9A:DD:D6
Certificate issuer:       /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial:       019B77C743039F684A0C7954DC5278E4FDAF
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/X206-RRIU-SViIIBDaDjImGa3dY.roa
Signing time:             Thu 01 Jan 2026 04:18:25 +0000
ROA not before:           Thu 01 Jan 2026 04:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        91.206.52.0/23 maxlen: 23
                          2001:7f8:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 16:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:43:03:9f:68:4a:0c:79:54:dc:52:78:e4:fd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
        Validity
            Not Before: Jan  1 04:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5f6d3af9144853e4958882010da0e322619addd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:af:24:c9:0d:34:77:60:e7:3a:9b:1c:0c:
                    c8:43:0b:06:b4:ed:a6:fd:7e:1b:05:37:0c:a8:b9:
                    07:8e:d3:1e:43:11:0f:95:f9:4e:26:5d:3e:54:0f:
                    65:42:f3:6c:dc:ee:2d:69:8e:e6:0a:bd:ca:f4:60:
                    c2:a6:f3:ee:62:95:25:a4:d7:27:64:2d:c6:89:97:
                    15:7d:f9:24:9e:16:90:5d:da:40:14:9d:0a:fe:00:
                    3c:e8:14:dc:56:0a:2a:56:f2:82:4a:bb:14:f3:fd:
                    c4:45:37:6e:01:be:cf:c5:9d:5e:04:06:ec:a8:d0:
                    dc:3c:42:7b:6e:95:01:36:20:46:a0:06:cc:8f:15:
                    a2:36:76:98:10:90:0d:de:96:8d:d5:95:18:f8:db:
                    9f:4e:85:c6:eb:10:a7:61:a1:38:8f:ed:00:3f:56:
                    a8:4d:33:57:46:7c:6c:bb:13:2d:7c:a5:43:d0:11:
                    c3:8c:5a:16:ef:5a:69:66:52:85:69:0a:ee:b1:41:
                    e4:f9:5f:84:8f:85:86:c6:7d:af:9c:81:83:49:00:
                    23:f4:0d:d4:c9:d0:ee:41:37:f6:ec:58:fc:af:91:
                    46:03:2e:0c:45:31:38:51:6d:66:d6:37:8b:6d:00:
                    37:5c:51:e6:1d:ee:14:42:b8:ea:6a:98:a3:f6:74:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6D:3A:F9:14:48:53:E4:95:88:82:01:0D:A0:E3:22:61:9A:DD:D6
            X509v3 Authority Key Identifier:
                keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/X206-RRIU-SViIIBDaDjImGa3dY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.52.0/23
                IPv6:
                  2001:7f8:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:6d:c9:da:0d:4c:e9:c0:3a:00:ff:08:1a:ab:ff:39:56:71:
         12:ba:60:08:e4:e4:8e:b2:14:d3:75:58:d8:94:32:b1:2c:69:
         58:08:af:29:10:7f:c9:ff:89:15:8a:ab:ed:be:f7:b8:03:da:
         6e:34:7a:98:ac:bf:a1:5a:cd:55:7a:02:5b:09:12:93:f8:40:
         1e:b9:5f:47:f1:55:6c:83:87:6c:05:57:cc:36:c1:cf:6e:06:
         43:e7:9d:64:2b:ff:28:a9:89:71:eb:66:2e:42:db:6b:30:f5:
         53:d4:d8:5a:99:a7:d6:db:8c:88:e5:b4:7d:61:ba:22:23:56:
         e0:96:88:cb:57:91:61:6c:b6:2f:8c:81:46:e7:3d:64:5c:9b:
         ce:59:4a:46:b7:ec:6e:cb:04:80:33:60:70:dc:d3:a0:33:0f:
         1b:f6:4f:a7:27:36:28:a4:cc:89:ac:d8:55:89:be:9e:13:c6:
         59:25:20:34:95:cb:6a:b3:b0:8f:5a:48:d5:7f:4e:4d:42:3f:
         af:08:1c:92:da:32:d3:e6:6d:0e:dc:9f:60:55:96:28:b0:b7:
         a7:7e:5f:a2:26:1d:37:aa:83:d0:8b:c0:99:f9:af:54:a6:c4:
         4b:9d:f1:a7:80:56:fe:11:4a:40:c6:fd:f9:7e:e0:dc:a4:87:
         97:a7:d6:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt3x0MDn2hKDHlU3FJ45P2vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTA4YTZkODY4YWI5ZTliZGIxMDQ3MmZiZWMzMWM5NjZl
OTQyNzQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjZkM2FmOTE0NDg1M2U0OTU4ODgyMDEwZGEwZTMyMjYxOWFkZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t2vJMkNNHdg5zqbHAzIQwsGtO2m
/X4bBTcMqLkHjtMeQxEPlflOJl0+VA9lQvNs3O4taY7mCr3K9GDCpvPuYpUlpNcn
ZC3GiZcVffkknhaQXdpAFJ0K/gA86BTcVgoqVvKCSrsU8/3ERTduAb7PxZ1eBAbs
qNDcPEJ7bpUBNiBGoAbMjxWiNnaYEJAN3paN1ZUY+NufToXG6xCnYaE4j+0AP1ao
TTNXRnxsuxMtfKVD0BHDjFoW71ppZlKFaQrusUHk+V+Ej4WGxn2vnIGDSQAj9A3U
ydDuQTf27Fj8r5FGAy4MRTE4UW1m1jeLbQA3XFHmHe4UQrjqapij9nRxowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF9tOvkUSFPklYiCAQ2g4yJhmt3WMB8GA1UdIwQY
MBaAFE+Qim2GirnpvbEEcvvsMclm6UJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEt
MWM2ZWU1YmJlYjY2LzEvWDIwNi1SUklVLVNWaUlJQkRhRGpJbUdhM2RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEtMWM2ZWU1YmJlYjY2
LzEvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW840MA8E
AgACMAkDBwAgAQf4ACQwDQYJKoZIhvcNAQELBQADggEBAFNtydoNTOnAOgD/CBqr
/zlWcRK6YAjk5I6yFNN1WNiUMrEsaVgIrykQf8n/iRWKq+2+97gD2m40episv6Fa
zVV6AlsJEpP4QB65X0fxVWyDh2wFV8w2wc9uBkPnnWQr/yipiXHrZi5C22sw9VPU
2FqZp9bbjIjltH1huiIjVuCWiMtXkWFsti+MgUbnPWRcm85ZSka37G7LBIAzYHDc
06AzDxv2T6cnNiikzIms2FWJvp4TxlklIDSVy2qzsI9aSNV/Tk1CP68IHJLaMtPm
bQ7cn2BVliiwt6d+X6ImHTeqg9CLwJn5r1SmxEud8aeAVv4RSkDG/fl+4Nykh5en
1lc=
-----END CERTIFICATE-----
Generated at Fri Jan 9 00:58:33 2026 by rpki-client