This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/i6eobu2nksnVkRXA1WMk37oIEMs.roa
File:                     i6eobu2nksnVkRXA1WMk37oIEMs.roa (raw, json)
Hash identifier:          Nfst+PxlVOWWHqGfuoWwJBmINKgZQG3bjfsn4wtrRmM=
Subject key identifier:   8B:A7:A8:6E:ED:A7:92:C9:D5:91:15:C0:D5:63:24:DF:BA:08:10:CB
Certificate issuer:       /CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
Certificate serial:       019B7B35E994F3EBE4B09D64C80916286394
Authority key identifier: 55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/i6eobu2nksnVkRXA1WMk37oIEMs.roa
Signing time:             Thu 01 Jan 2026 20:18:09 +0000
ROA not before:           Thu 01 Jan 2026 20:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49270
IP address blocks:        91.212.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:e9:94:f3:eb:e4:b0:9d:64:c8:09:16:28:63:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
        Validity
            Not Before: Jan  1 20:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ba7a86eeda792c9d59115c0d56324dfba0810cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b0:b5:34:ef:20:f0:00:8e:59:b4:f5:9b:df:
                    9f:20:fd:d3:da:56:7e:ec:4b:24:2e:c9:8c:ea:a5:
                    14:3f:34:8b:a6:92:3a:a4:26:c3:6c:ae:75:0f:3a:
                    3f:d9:e1:87:a4:79:4c:84:07:99:29:1f:0a:b2:de:
                    8b:d0:f4:f8:75:dd:6d:78:cd:c5:ea:35:41:24:ce:
                    97:93:5f:f7:a1:f2:56:1c:dc:70:15:93:85:cc:d5:
                    b9:a8:c7:e4:e6:0a:6d:93:ca:d4:67:22:fe:47:03:
                    83:52:4f:b1:ed:89:c0:06:36:52:8d:26:b7:82:4d:
                    6b:a5:9e:cf:45:b8:92:0c:4d:33:8b:19:d2:27:7e:
                    ca:14:73:55:01:88:a0:fd:b9:18:3e:a9:20:8a:ae:
                    87:ce:3b:27:04:cb:dc:80:e0:b0:71:46:dd:92:f7:
                    b5:93:5b:f4:ef:f4:ef:d2:e3:97:42:c7:38:07:c8:
                    f9:71:e3:3f:99:a8:ef:10:56:80:c1:56:3c:ca:17:
                    3f:e2:0a:5a:bd:d3:49:12:68:22:de:35:07:d4:5e:
                    16:d9:69:15:52:77:66:cf:e6:43:88:78:61:66:21:
                    73:30:58:d3:66:6a:e5:d4:d8:8b:dc:00:bd:52:0f:
                    75:01:82:30:b7:dc:8e:18:f6:be:0c:05:25:cd:18:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A7:A8:6E:ED:A7:92:C9:D5:91:15:C0:D5:63:24:DF:BA:08:10:CB
            X509v3 Authority Key Identifier:
                keyid:55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/i6eobu2nksnVkRXA1WMk37oIEMs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:39:a0:20:4b:42:50:b7:98:9f:d1:aa:d2:82:86:8c:bc:19:
         4b:8b:0c:10:27:a7:c5:53:be:d6:0f:be:96:7c:e7:cf:23:0b:
         a8:4b:45:ca:46:40:42:e9:71:7f:05:91:d9:5b:e2:6c:82:e6:
         10:b8:b0:9b:b3:25:14:8b:b3:7a:7b:5a:c2:83:ba:eb:d6:81:
         71:8a:86:0a:c9:82:44:f3:8e:13:f3:81:82:80:8a:d5:9e:b0:
         52:bc:4a:8b:c4:14:e8:87:e6:22:d7:49:1e:bb:4c:18:0f:f0:
         9e:af:b3:0d:40:be:51:39:b3:ab:e9:fc:c8:0f:6c:43:c4:71:
         1a:0a:32:35:94:f3:9b:7b:6e:3f:29:85:8f:b3:a9:9a:9a:15:
         0d:f4:21:53:b5:af:37:c5:70:eb:6c:5f:3c:5a:08:12:06:be:
         18:4a:1d:b6:5d:a9:d3:05:c2:6c:00:b4:66:7f:23:1d:b2:e5:
         42:6a:5c:43:a2:81:35:80:b8:23:ed:9c:87:86:3b:29:e0:a5:
         47:bf:8e:d6:1c:a9:c4:38:6e:ce:9c:fb:10:02:d4:e5:9d:b2:
         62:42:7c:15:dd:90:dc:f5:d4:15:49:e1:ad:c0:75:87:3a:ad:
         d3:c7:2b:18:0d:26:ef:50:41:4d:25:b0:e2:fb:3f:63:24:d1:
         16:c9:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:20 2026 by rpki-client