This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/B6oPSrYFOETzVfi_jkgsVldlvlw.roa
File:                     B6oPSrYFOETzVfi_jkgsVldlvlw.roa (raw, json)
Hash identifier:          FWuUjlvViSPVZ3tuWXOR6u2UkqfS1LDdyg1epfi2EcI=
Subject key identifier:   07:AA:0F:4A:B6:05:38:44:F3:55:F8:BF:8E:48:2C:56:57:65:BE:5C
Certificate issuer:       /CN=d3530c144f592cfa891babf195a817900cd6d916
Certificate serial:       019B7BA394C4B8924D3CB1F79F957E0DF323
Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/B6oPSrYFOETzVfi_jkgsVldlvlw.roa
Signing time:             Thu 01 Jan 2026 22:17:56 +0000
ROA not before:           Thu 01 Jan 2026 22:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197135
IP address blocks:        91.216.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:94:c4:b8:92:4d:3c:b1:f7:9f:95:7e:0d:f3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916
        Validity
            Not Before: Jan  1 22:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07aa0f4ab6053844f355f8bf8e482c565765be5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:9d:7e:a6:a7:f8:8f:8f:d8:06:82:c2:01:
                    cd:05:e5:05:a7:f3:4f:23:86:01:a2:95:ed:a8:83:
                    b5:f2:ad:01:a8:f0:ac:7c:c8:58:a9:60:ad:1c:7a:
                    f1:26:34:3a:ec:81:fa:a7:0b:a9:38:77:06:7c:6d:
                    70:21:b6:f8:b1:19:a1:a2:82:73:e8:a8:ed:d3:3c:
                    ba:4e:4f:b9:40:23:37:42:df:06:72:60:93:93:15:
                    eb:82:41:ec:ef:b2:18:64:7e:18:57:76:00:c0:94:
                    e1:c6:2d:b3:f8:d1:8b:25:f8:48:b3:e8:d4:ed:f0:
                    cd:32:c7:e8:27:1b:11:9a:9b:73:3d:38:26:b2:df:
                    d0:2b:c5:c0:3c:c6:5a:02:1e:e3:d7:36:60:6a:41:
                    98:25:53:d1:a5:95:72:99:a6:85:6d:66:8a:87:b2:
                    6e:11:6c:7a:75:66:44:1c:bf:5a:40:cf:5f:22:28:
                    63:5d:75:0b:02:18:d7:be:f1:e6:55:ad:7e:7a:69:
                    5e:c8:75:dd:19:38:8e:1e:1d:a0:38:73:3d:47:c9:
                    77:e5:91:7e:e2:54:83:64:a5:0f:c0:67:2e:d7:57:
                    d6:00:32:a1:e5:6e:78:b0:37:04:8e:d9:79:49:71:
                    bd:7a:f2:8f:d4:6b:1a:c1:cb:b8:07:40:b8:bc:41:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AA:0F:4A:B6:05:38:44:F3:55:F8:BF:8E:48:2C:56:57:65:BE:5C
            X509v3 Authority Key Identifier:
                keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/B6oPSrYFOETzVfi_jkgsVldlvlw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d1:c7:56:b5:c3:17:47:01:f0:68:cb:70:2c:82:f9:93:9e:
         1e:5b:06:37:c0:79:2f:8c:52:f6:c8:50:51:c7:c1:41:a1:1f:
         c3:e4:de:d6:58:8d:6e:00:43:5e:78:6e:07:78:40:3b:2f:15:
         1f:09:bb:93:89:71:4a:73:00:3c:0e:de:02:bd:57:e8:22:d5:
         b7:94:2d:47:d3:bf:54:72:6e:65:a6:c8:3a:5f:51:95:98:b1:
         6f:0d:8b:f4:69:a4:a0:54:99:a8:6b:0a:fd:ea:52:c7:2e:7d:
         d2:4a:9f:cb:cb:37:b3:a1:67:6e:bd:be:3d:ca:76:8b:69:be:
         19:84:c5:5f:1f:87:b2:02:ed:d2:6a:34:87:fd:9b:3e:a3:73:
         8e:10:be:82:e9:a9:c8:48:1d:7f:40:d5:9d:2c:30:96:fd:e4:
         11:15:62:53:7d:38:7c:fa:96:d7:5a:91:c5:4f:92:9e:6a:16:
         84:ea:f4:84:b3:79:71:66:ee:42:f3:da:69:22:f2:f6:42:3d:
         b8:69:a8:bb:6b:fd:96:38:9a:8c:7f:74:1c:ab:ae:d9:3b:60:
         0e:c6:2d:c2:e9:42:55:8a:9a:e8:a5:b2:14:38:7d:3d:09:ec:
         e8:f5:02:da:f8:fd:f1:c2:61:09:72:67:68:ef:84:f1:36:4c:
         eb:1e:f7:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o5TEuJJNPLH3n5V+DfMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTMwYzE0NGY1OTJjZmE4OTFiYWJmMTk1YTgxNzkwMGNk
NmQ5MTYwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2FhMGY0YWI2MDUzODQ0ZjM1NWY4YmY4ZTQ4MmM1NjU3NjViZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Kdfqan+I+P2AaCwgHNBeUFp/NP
I4YBopXtqIO18q0BqPCsfMhYqWCtHHrxJjQ67IH6pwupOHcGfG1wIbb4sRmhooJz
6Kjt0zy6Tk+5QCM3Qt8GcmCTkxXrgkHs77IYZH4YV3YAwJThxi2z+NGLJfhIs+jU
7fDNMsfoJxsRmptzPTgmst/QK8XAPMZaAh7j1zZgakGYJVPRpZVymaaFbWaKh7Ju
EWx6dWZEHL9aQM9fIihjXXULAhjXvvHmVa1+emleyHXdGTiOHh2gOHM9R8l35ZF+
4lSDZKUPwGcu11fWADKh5W54sDcEjtl5SXG9evKP1Gsawcu4B0C4vEG+oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAeqD0q2BThE81X4v45ILFZXZb5cMB8GA1UdIwQY
MBaAFNNTDBRPWSz6iRur8ZWoF5AM1tkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYt
NmJhNzk5NTdlODYyLzEvQjZvUFNyWUZPRVR6VmZpX2prZ3NWbGRsdmx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYtNmJhNzk5NTdlODYy
LzEvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jKMA0G
CSqGSIb3DQEBCwUAA4IBAQBH0cdWtcMXRwHwaMtwLIL5k54eWwY3wHkvjFL2yFBR
x8FBoR/D5N7WWI1uAENeeG4HeEA7LxUfCbuTiXFKcwA8Dt4CvVfoItW3lC1H079U
cm5lpsg6X1GVmLFvDYv0aaSgVJmoawr96lLHLn3SSp/LyzezoWduvb49ynaLab4Z
hMVfH4eyAu3SajSH/Zs+o3OOEL6C6anISB1/QNWdLDCW/eQRFWJTfTh8+pbXWpHF
T5KeahaE6vSEs3lxZu5C89ppIvL2Qj24aai7a/2WOJqMf3Qcq67ZO2AOxi3C6UJV
ipropbIUOH09Cezo9QLa+P3xwmEJcmdo74TxNkzrHvdb
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:16 2026 by rpki-client