This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/z6n92NIP1tvVgc0euBLMnBtSoZk.roa
File:                     z6n92NIP1tvVgc0euBLMnBtSoZk.roa (raw, json)
Hash identifier:          Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=
Subject key identifier:   CF:A9:FD:D8:D2:0F:D6:DB:D5:81:CD:1E:B8:12:CC:9C:1B:52:A1:99
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       019B79ED1225348DFC5AFB3ACCCD0E08BC6C
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/z6n92NIP1tvVgc0euBLMnBtSoZk.roa
Signing time:             Thu 01 Jan 2026 14:18:58 +0000
ROA not before:           Thu 01 Jan 2026 14:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48398
IP address blocks:        91.209.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:12:25:34:8d:fc:5a:fb:3a:cc:cd:0e:08:bc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: Jan  1 14:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cfa9fdd8d20fd6dbd581cd1eb812cc9c1b52a199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:7c:f0:c7:d2:7a:04:b2:43:0f:c4:8e:96:
                    53:75:7d:6b:ca:25:70:f8:85:b2:a3:3f:23:e9:96:
                    51:90:02:6e:a6:69:49:7e:11:44:be:db:6a:a8:f2:
                    48:78:64:49:f7:cf:bf:2e:88:2e:67:52:8e:bd:6c:
                    38:0f:7d:d8:03:dd:76:88:c4:b5:49:50:9f:61:45:
                    1a:98:99:31:31:8b:dd:3a:f7:d1:c6:b9:ba:69:3b:
                    f2:66:d0:ca:30:45:8f:55:28:aa:e5:00:c1:fb:c2:
                    63:fd:c3:cb:f6:3c:fd:35:a7:60:d1:f7:01:6c:46:
                    5c:cb:5f:c8:60:aa:7c:31:2d:71:dc:a1:68:de:15:
                    b1:bc:ba:1b:45:2e:1e:62:2e:b4:30:cc:2b:79:66:
                    20:a2:8b:0b:cd:9e:e6:b7:8d:07:34:45:d3:62:58:
                    a6:90:f4:96:01:33:31:92:c0:08:b4:59:b3:df:c2:
                    c5:d7:3b:c2:3f:ef:ae:bc:b0:e5:2f:82:df:a6:72:
                    cb:51:e6:f4:be:de:84:26:1c:0b:9a:82:df:18:18:
                    11:a2:4c:83:7d:15:66:1b:f9:4d:a3:55:93:06:13:
                    a3:ad:d1:5b:42:74:52:11:b4:9b:25:28:6b:70:b9:
                    87:be:d2:79:7d:4a:97:ac:34:90:9d:5e:5d:55:05:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A9:FD:D8:D2:0F:D6:DB:D5:81:CD:1E:B8:12:CC:9C:1B:52:A1:99
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/z6n92NIP1tvVgc0euBLMnBtSoZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:80:bd:bf:64:5d:a1:55:f8:b8:a5:9d:da:d1:43:98:4b:f0:
         67:4d:73:7c:f6:f2:9f:83:64:19:f7:14:2c:60:78:0a:74:4f:
         b8:aa:e4:7b:f2:ec:a7:a6:d3:80:3e:dc:90:ea:be:f0:61:04:
         be:9a:d3:a5:83:c8:61:08:c5:f2:5c:87:2c:b1:ef:d1:15:6a:
         35:16:e7:7b:42:4f:e3:09:ed:8e:4c:63:2a:c8:9e:86:48:9b:
         3c:91:02:5a:5b:3c:cb:eb:77:95:f7:f7:ea:e7:d5:a7:b3:42:
         47:2f:52:b7:84:96:66:d0:48:11:cd:28:7d:c0:a4:b7:c6:c1:
         a2:8f:c6:03:a9:8c:65:e2:3e:84:0d:68:68:4e:1b:5f:96:ce:
         a9:24:9b:4a:25:cf:01:fb:8a:47:fb:15:9d:65:e6:7c:f1:e2:
         92:bb:0d:e0:d0:88:f3:b0:a5:ad:a9:15:76:6e:50:6d:a6:be:
         f3:8a:db:40:d5:9e:2b:6c:7c:47:19:4c:73:e3:55:f1:8f:b4:
         7e:d3:19:30:ad:bf:99:1e:de:3a:22:b9:e8:6f:fd:73:5e:98:
         f8:11:55:74:3b:18:65:42:97:18:54:11:e9:60:7c:ce:fc:c9:
         62:07:5f:f1:35:cb:81:ea:e9:0f:92:dc:af:b7:cf:54:4a:f7:
         0d:ac:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:12 2026 by rpki-client