This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/V8n8ydghZMpsaWS-dFmHBwi4qdE.roa
File:                     V8n8ydghZMpsaWS-dFmHBwi4qdE.roa (raw, json)
Hash identifier:          wby6j6Fvc4buadteItu1tm7omgxplHfuuMsm39nmHJc=
Subject key identifier:   57:C9:FC:C9:D8:21:64:CA:6C:69:64:BE:74:59:87:07:08:B8:A9:D1
Certificate issuer:       /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial:       019B79EBAB9E59F28270128C5E535A60FB8A
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/V8n8ydghZMpsaWS-dFmHBwi4qdE.roa
Signing time:             Thu 01 Jan 2026 14:17:26 +0000
ROA not before:           Thu 01 Jan 2026 14:17:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48868
IP address blocks:        91.209.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:ab:9e:59:f2:82:70:12:8c:5e:53:5a:60:fb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
        Validity
            Not Before: Jan  1 14:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57c9fcc9d82164ca6c6964be7459870708b8a9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:86:50:fe:08:c9:c4:f8:53:08:5f:d4:13:
                    f7:f6:18:69:2c:40:f0:64:9a:97:d8:c4:0d:d6:32:
                    cb:61:ef:be:f4:ee:cd:b8:16:37:f4:21:b2:ed:86:
                    32:e6:37:3d:2e:29:11:dd:77:46:8e:bf:0e:90:44:
                    a6:43:47:e1:0a:76:6e:91:af:45:df:39:cb:58:f0:
                    8b:d1:37:62:4b:3e:e3:af:9a:87:df:d7:7a:6a:e1:
                    0f:a7:ba:65:25:2a:1a:42:9d:91:85:8f:be:db:e4:
                    d1:06:1d:9f:d7:cb:77:73:4b:11:65:bc:bd:a4:35:
                    4a:c5:59:64:38:7a:46:21:2a:80:69:0d:9b:a1:1b:
                    7a:65:0d:64:4a:5c:5c:0e:fd:62:fc:5f:ac:c4:ef:
                    75:4b:b5:9f:5f:d6:17:84:cb:1f:07:a8:2d:a0:2f:
                    ba:d6:1f:c8:59:99:b0:5b:7e:3e:a3:44:35:fa:ac:
                    5e:33:fc:b6:a1:12:06:4a:50:69:1d:ef:40:1a:a8:
                    7b:c1:5c:2e:21:e7:5b:a6:5a:0a:82:52:e9:d9:a2:
                    34:b3:81:cf:81:b5:58:9c:84:ca:81:7f:ca:f1:21:
                    af:f5:3a:06:0a:2c:6a:3d:47:b1:51:ad:39:d1:39:
                    02:94:28:3d:7e:79:34:49:b2:9f:8b:20:d4:d7:0b:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C9:FC:C9:D8:21:64:CA:6C:69:64:BE:74:59:87:07:08:B8:A9:D1
            X509v3 Authority Key Identifier:
                keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/V8n8ydghZMpsaWS-dFmHBwi4qdE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:aa:48:f8:6d:fd:36:7f:0b:c5:5f:5b:24:79:54:bf:1c:
         e3:c5:54:6a:e3:0d:b6:b9:66:98:c6:44:d5:75:e9:ec:1a:27:
         8d:a8:56:66:87:93:0d:a8:ae:36:1a:cc:ff:2b:b7:95:b7:70:
         57:8a:cf:7e:ba:cc:c3:c5:91:8e:be:fb:7a:92:e4:61:95:c5:
         da:6d:a6:21:ce:66:8d:38:aa:41:a4:33:ef:69:9d:cb:f0:40:
         39:bf:e2:b0:fc:2e:f9:a5:d8:8b:a9:ba:a1:56:af:c3:5c:ef:
         e0:14:6d:4f:8a:ed:ea:ea:58:76:54:00:b1:ff:60:ae:11:ee:
         d8:e4:0f:c5:70:8a:f6:45:0a:b4:66:71:37:91:d6:2a:76:da:
         f3:d1:d6:02:6c:79:63:b6:37:e7:44:df:7a:cf:f1:11:38:ba:
         86:de:95:58:cc:10:7c:90:da:62:54:e6:8c:b6:74:7b:ce:28:
         97:63:c5:39:48:df:aa:f5:b5:33:27:d2:43:0c:5b:61:a5:58:
         e4:cc:ae:7b:f2:1e:fa:26:46:61:e1:bf:d2:2b:c6:1b:c7:c7:
         7f:08:bd:62:b1:49:59:83:1a:03:c5:5b:5e:d3:9a:be:fd:6a:
         85:15:5d:5e:fa:74:bc:88:96:28:a2:2d:b7:aa:30:ad:38:0d:
         a5:ac:5b:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt566ueWfKCcBKMXlNaYPuKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZGU0NDBjMTRkOTc2NjUwM2NiNWM5MWI5NTBiODEwNjJk
MTEwMjkwHhcNMjYwMTAxMTQxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2M5ZmNjOWQ4MjE2NGNhNmM2OTY0YmU3NDU5ODcwNzA4YjhhOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/KGUP4IycT4Uwhf1BP39hhpLEDw
ZJqX2MQN1jLLYe++9O7NuBY39CGy7YYy5jc9LikR3XdGjr8OkESmQ0fhCnZuka9F
3znLWPCL0TdiSz7jr5qH39d6auEPp7plJSoaQp2RhY++2+TRBh2f18t3c0sRZby9
pDVKxVlkOHpGISqAaQ2boRt6ZQ1kSlxcDv1i/F+sxO91S7WfX9YXhMsfB6gtoC+6
1h/IWZmwW34+o0Q1+qxeM/y2oRIGSlBpHe9AGqh7wVwuIedbploKglLp2aI0s4HP
gbVYnITKgX/K8SGv9ToGCixqPUexUa050TkClCg9fnk0SbKfiyDU1ws2vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFfJ/MnYIWTKbGlkvnRZhwcIuKnRMB8GA1UdIwQY
MBaAFG/eRAwU2XZlA8tckblQuBBi0RApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjk1RURCVFpkbVVEeTF5UnVWQzRFR0xSRUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMTk5NTEtMDk1OS00YzEzLTlhMGUt
OTgxMjhlZWEzYTY1LzEvVjhuOHlkZ2haTXBzYVdTLWRGbUhCd2k0cWRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xMTk5NTEtMDk1OS00YzEzLTlhMGUtOTgxMjhlZWEzYTY1
LzEvYjk1RURCVFpkbVVEeTF5UnVWQzRFR0xSRUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HzMA0G
CSqGSIb3DQEBCwUAA4IBAQCYpqpI+G39Nn8LxV9bJHlUvxzjxVRq4w22uWaYxkTV
densGieNqFZmh5MNqK42Gsz/K7eVt3BXis9+uszDxZGOvvt6kuRhlcXabaYhzmaN
OKpBpDPvaZ3L8EA5v+Kw/C75pdiLqbqhVq/DXO/gFG1Piu3q6lh2VACx/2CuEe7Y
5A/FcIr2RQq0ZnE3kdYqdtrz0dYCbHljtjfnRN96z/EROLqG3pVYzBB8kNpiVOaM
tnR7ziiXY8U5SN+q9bUzJ9JDDFthpVjkzK578h76JkZh4b/SK8Ybx8d/CL1isUlZ
gxoDxVte05q+/WqFFV1e+nS8iJYooi23qjCtOA2lrFv8
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:24 2026 by rpki-client