This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/HadOHOP9GZgkMpWJH9CTmgirjks.roa
File:                     HadOHOP9GZgkMpWJH9CTmgirjks.roa (raw, json)
Hash identifier:          iMPB2p7JTsdMOVem1W2GUgD445+oUnE8KP8HJy7laSM=
Subject key identifier:   1D:A7:4E:1C:E3:FD:19:98:24:32:95:89:1F:D0:93:9A:08:AB:8E:4B
Certificate issuer:       /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial:       019B7D5B976FE220198A73E86E6E2C6145DF
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/HadOHOP9GZgkMpWJH9CTmgirjks.roa
Signing time:             Fri 02 Jan 2026 06:18:33 +0000
ROA not before:           Fri 02 Jan 2026 06:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43067
IP address blocks:        91.196.80.0/22 maxlen: 32
                          91.196.80.0/24 maxlen: 32
                          91.196.81.0/24 maxlen: 32
                          91.196.82.0/24 maxlen: 32
                          91.196.83.0/24 maxlen: 32
                          91.234.72.0/22 maxlen: 32
                          91.234.72.0/24 maxlen: 32
                          91.234.73.0/24 maxlen: 32
                          91.234.74.0/24 maxlen: 32
                          91.234.75.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:97:6f:e2:20:19:8a:73:e8:6e:6e:2c:61:45:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
        Validity
            Not Before: Jan  2 06:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1da74e1ce3fd1998243295891fd0939a08ab8e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:1a:6f:bb:33:e6:5b:0f:01:0e:3d:cd:43:
                    ec:65:e6:e3:52:a7:a0:58:fc:2a:2f:8c:70:d2:7c:
                    1b:01:c4:97:a7:ab:f5:6e:98:7e:56:bb:e2:7b:38:
                    14:55:55:1f:fd:e6:5a:98:9e:00:22:85:b2:12:d3:
                    ec:0b:cf:46:ca:37:3d:8f:26:c1:97:59:5f:2a:3b:
                    6a:07:de:ad:13:d1:3d:8f:b1:aa:6f:14:3e:b0:7e:
                    9f:1f:c6:6a:19:66:77:8f:9b:9e:9c:82:19:17:08:
                    62:9d:f4:f4:6a:a1:4b:eb:a2:44:00:c3:75:ab:c5:
                    d3:20:c9:2e:0b:cf:5c:4f:95:a8:5a:94:58:50:b1:
                    22:d3:75:71:ef:32:0e:92:b3:e8:48:bb:2b:93:03:
                    bf:7e:6f:d3:f8:32:58:75:c0:6d:3f:dd:7e:b1:22:
                    46:76:2f:97:3b:bd:a9:7f:4d:4b:16:8c:b3:67:e9:
                    8a:98:50:aa:56:5d:5b:d3:ee:6b:bc:d5:f2:e0:b1:
                    cd:f1:da:31:4e:0c:35:81:18:68:4a:b7:e3:11:08:
                    a6:91:47:39:32:ba:f2:fb:7f:22:73:f1:39:13:06:
                    d6:bf:5d:05:18:25:a6:98:25:2b:8f:fb:f3:86:ef:
                    e2:57:65:aa:a5:33:cf:ed:6d:1e:c0:96:2d:f9:d6:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A7:4E:1C:E3:FD:19:98:24:32:95:89:1F:D0:93:9A:08:AB:8E:4B
            X509v3 Authority Key Identifier:
                keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/HadOHOP9GZgkMpWJH9CTmgirjks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.80.0/22
                  91.234.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:d5:37:1a:bc:d2:62:84:be:55:7d:42:83:f9:0b:fd:98:
         5b:59:fd:fa:95:fa:9a:bd:cd:f0:51:04:b8:ed:19:cd:c6:f5:
         f3:74:33:c1:27:d1:f8:ca:ed:d6:b6:d9:2a:a9:85:c9:bb:83:
         e3:04:fa:bf:0d:85:00:31:0e:5f:9e:eb:ab:0f:3d:bf:ff:48:
         45:3d:c0:20:4f:33:d8:a8:78:1b:71:98:c8:db:fd:c1:f7:c1:
         70:fd:d2:02:a4:cd:37:36:3b:04:88:0b:b6:da:6b:bf:9f:eb:
         7b:c1:bb:fb:8b:3a:81:b5:74:d9:e9:33:a7:ec:08:69:85:2d:
         cc:6b:2a:2d:d2:d3:a5:ae:6f:4d:28:94:75:99:24:dd:48:10:
         56:f9:82:db:07:8b:a5:6c:f4:61:3d:88:97:45:bd:57:79:84:
         1c:d1:08:23:33:51:48:f5:3b:e4:19:a9:02:79:f1:0b:66:d2:
         a2:af:25:5e:3c:76:79:6f:0a:24:06:9c:d4:b0:6d:6c:6a:6e:
         77:cc:b4:05:87:d2:9f:b4:16:02:61:51:f1:34:df:0e:cd:84:
         1b:02:94:c0:61:16:f8:c5:d5:4a:2b:8f:a0:25:ab:11:9e:e2:
         dd:71:da:c5:71:50:46:f1:cb:72:57:86:2e:f5:bc:c7:a0:d3:
         67:09:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:39:55 2026 by rpki-client