This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/C64-Jz9cM1Y02wj-eYPR8kiNDFM.roa
File:                     C64-Jz9cM1Y02wj-eYPR8kiNDFM.roa (raw, json)
Hash identifier:          pQ+PTe9eRZ2bMKuA8XKpNpYesialrqlyPz+/RShJ3Nw=
Subject key identifier:   0B:AE:3E:27:3F:5C:33:56:34:DB:08:FE:79:83:D1:F2:48:8D:0C:53
Certificate issuer:       /CN=b04d175653fbbde8d989d27e3827bc011e020a01
Certificate serial:       019B7C80D072E5941E3AB7039A930CFF44A2
Authority key identifier: B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/C64-Jz9cM1Y02wj-eYPR8kiNDFM.roa
Signing time:             Fri 02 Jan 2026 02:19:35 +0000
ROA not before:           Fri 02 Jan 2026 02:19:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211007
IP address blocks:        91.208.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:d0:72:e5:94:1e:3a:b7:03:9a:93:0c:ff:44:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04d175653fbbde8d989d27e3827bc011e020a01
        Validity
            Not Before: Jan  2 02:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0bae3e273f5c335634db08fe7983d1f2488d0c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:86:03:4e:42:e0:5b:29:74:a4:5a:15:b5:45:
                    8a:b4:f4:a6:54:66:68:03:3a:5d:81:8a:e6:94:62:
                    d4:12:17:4e:27:09:5d:f2:e3:c0:f6:cb:0f:04:89:
                    24:7f:0b:f1:c2:42:6e:27:ba:f0:34:c0:a3:3e:a3:
                    ba:7d:0b:db:4a:fa:ef:0a:52:c6:a7:10:3d:95:49:
                    c1:3a:a3:2f:8a:b8:88:c0:1e:48:68:ea:56:47:ee:
                    c2:ab:c1:fd:0c:61:b8:e8:06:ff:e1:ac:21:7e:79:
                    ce:5b:bc:7f:1f:aa:9a:bc:ec:c1:c4:d1:e3:6e:62:
                    de:6d:0e:0b:a3:c4:05:8b:f6:3c:b1:ae:c2:82:0d:
                    36:2e:eb:60:6d:93:36:99:7d:f7:bb:9f:98:54:61:
                    05:ff:9c:de:61:31:bb:7d:e7:74:14:2d:8f:0b:0b:
                    d9:6b:d7:f2:93:40:b8:a4:ce:3d:81:75:ba:16:47:
                    2b:38:71:67:6e:ef:fb:e5:c8:ac:08:ca:78:53:f1:
                    44:b8:f2:60:df:11:28:42:39:6d:25:f7:88:11:94:
                    6f:93:bf:ab:57:4c:2f:e7:80:5a:d9:ed:b9:a8:cd:
                    6e:70:8d:a8:8c:89:4e:dd:ff:cc:34:17:5e:94:7c:
                    e5:55:72:2b:07:6b:8c:b8:f2:e8:ee:d3:c7:2b:39:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:3E:27:3F:5C:33:56:34:DB:08:FE:79:83:D1:F2:48:8D:0C:53
            X509v3 Authority Key Identifier:
                keyid:B0:4D:17:56:53:FB:BD:E8:D9:89:D2:7E:38:27:BC:01:1E:02:0A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sE0XVlP7vejZidJ-OCe8AR4CCgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/C64-Jz9cM1Y02wj-eYPR8kiNDFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0db42a-c787-4f21-b4f6-a17c50f0985d/1/sE0XVlP7vejZidJ-OCe8AR4CCgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:45:62:43:e7:d2:51:06:cc:65:29:d5:0f:da:f2:44:91:a6:
         2e:8b:20:90:e9:49:f0:ed:9a:91:80:35:5f:95:e7:3d:6d:13:
         33:4e:b6:0f:58:36:00:67:4c:90:4e:1d:06:57:46:90:dc:47:
         04:4b:1f:e2:f7:bb:ca:54:0c:79:8d:9c:3a:cf:de:39:4e:09:
         ae:24:c4:d0:08:5e:49:3e:65:53:31:85:13:2c:f0:8c:55:45:
         c1:5a:38:2f:6a:f4:06:05:12:6f:1e:15:52:45:89:dc:a5:0c:
         8f:d3:d1:f6:0d:6f:11:52:3e:e2:1e:ca:74:b0:07:0b:25:0b:
         59:43:b9:08:3f:80:8e:89:0b:65:5b:d7:42:5e:a9:10:54:10:
         33:de:98:33:ea:72:ed:da:c2:56:a3:17:04:f8:f2:30:dc:e1:
         00:ac:e0:08:20:51:4c:a0:a4:0f:a7:9b:3c:7a:02:35:e0:a9:
         4c:b7:47:4b:a7:ca:a9:6c:03:87:f4:7b:c7:10:f2:3b:aa:87:
         fe:01:85:72:08:02:ec:2c:a0:80:3a:34:9e:df:d4:c7:d4:49:
         b6:ba:31:87:5d:e1:ad:c3:24:f2:16:53:9d:da:79:09:a4:c4:
         46:35:6c:26:b3:47:73:f7:c6:69:52:d8:4d:be:83:e5:20:b9:
         37:cc:3f:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gNBy5ZQeOrcDmpMM/0SiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNGQxNzU2NTNmYmJkZThkOTg5ZDI3ZTM4MjdiYzAxMWUw
MjBhMDEwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmFlM2UyNzNmNWMzMzU2MzRkYjA4ZmU3OTgzZDFmMjQ4OGQwYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oYDTkLgWyl0pFoVtUWKtPSmVGZo
AzpdgYrmlGLUEhdOJwld8uPA9ssPBIkkfwvxwkJuJ7rwNMCjPqO6fQvbSvrvClLG
pxA9lUnBOqMviriIwB5IaOpWR+7Cq8H9DGG46Ab/4awhfnnOW7x/H6qavOzBxNHj
bmLebQ4Lo8QFi/Y8sa7Cgg02LutgbZM2mX33u5+YVGEF/5zeYTG7fed0FC2PCwvZ
a9fyk0C4pM49gXW6FkcrOHFnbu/75cisCMp4U/FEuPJg3xEoQjltJfeIEZRvk7+r
V0wv54Ba2e25qM1ucI2ojIlO3f/MNBdelHzlVXIrB2uMuPLo7tPHKzmMlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAuuPic/XDNWNNsI/nmD0fJIjQxTMB8GA1UdIwQY
MBaAFLBNF1ZT+73o2YnSfjgnvAEeAgoBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYt
YTE3YzUwZjA5ODVkLzEvQzY0LUp6OWNNMVkwMndqLWVZUFI4a2lOREZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wZGI0MmEtYzc4Ny00ZjIxLWI0ZjYtYTE3YzUwZjA5ODVk
LzEvc0UwWFZsUDd2ZWpaaWRKLU9DZThBUjRDQ2dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DAMA0G
CSqGSIb3DQEBCwUAA4IBAQCARWJD59JRBsxlKdUP2vJEkaYuiyCQ6Unw7ZqRgDVf
lec9bRMzTrYPWDYAZ0yQTh0GV0aQ3EcESx/i97vKVAx5jZw6z945TgmuJMTQCF5J
PmVTMYUTLPCMVUXBWjgvavQGBRJvHhVSRYncpQyP09H2DW8RUj7iHsp0sAcLJQtZ
Q7kIP4COiQtlW9dCXqkQVBAz3pgz6nLt2sJWoxcE+PIw3OEArOAIIFFMoKQPp5s8
egI14KlMt0dLp8qpbAOH9HvHEPI7qof+AYVyCALsLKCAOjSe39TH1Em2ujGHXeGt
wyTyFlOd2nkJpMRGNWwms0dz98ZpUthNvoPlILk3zD84
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:13:59 2026 by rpki-client