This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa
File:                     7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa (raw, json)
Hash identifier:          AUUlni3UcNfoUVifNt5f8cw2030rnuTziXI1bU77ERs=
Subject key identifier:   EE:E9:26:9F:05:DE:A1:A3:1F:6F:78:48:23:F0:A6:D5:B3:3D:26:EC
Certificate issuer:       /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial:       019B7C12858CDD69F50C89BE4AD8D056063B
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa
Signing time:             Fri 02 Jan 2026 00:19:07 +0000
ROA not before:           Fri 02 Jan 2026 00:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48736
IP address blocks:        91.209.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:85:8c:dd:69:f5:0c:89:be:4a:d8:d0:56:06:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
        Validity
            Not Before: Jan  2 00:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eee9269f05dea1a31f6f784823f0a6d5b33d26ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:03:b9:f2:ad:2c:30:88:25:49:24:ef:71:
                    d8:8e:bc:34:a7:ca:99:cf:da:73:0c:b9:05:f0:13:
                    8f:9f:80:5b:fa:68:27:bc:b7:70:fb:9c:71:0a:5e:
                    11:75:ed:82:eb:85:32:8c:26:99:e9:52:e2:ea:e2:
                    f1:0d:dc:22:97:d7:8b:2b:5c:47:45:0a:a0:b2:dc:
                    c6:dd:7d:65:6c:0f:21:ee:f4:6e:a5:30:d1:4f:06:
                    d2:45:62:79:68:a8:80:31:1a:40:5f:ae:1a:17:ad:
                    bd:3d:00:a1:1b:cb:dc:c3:5f:9e:98:9f:26:34:6b:
                    e6:41:0c:26:23:55:28:2e:c7:ec:09:0d:12:69:1b:
                    87:73:d5:7f:b9:0c:fe:79:d8:c1:40:d7:6e:3c:f4:
                    c9:63:5b:00:1a:6c:fd:68:c1:f2:0c:4c:36:8d:a8:
                    ae:12:06:b7:f9:c2:4b:05:13:6f:e3:c3:20:f5:9b:
                    cb:7c:81:a8:dd:9a:20:84:c0:b8:c1:b6:86:12:17:
                    3d:c2:63:d0:5b:d6:c1:f3:60:4b:23:bb:55:cb:20:
                    0e:3a:e8:b4:c9:49:8a:71:23:1c:c7:9a:3e:e9:31:
                    c3:c6:e5:c0:1a:08:0c:d2:d7:4a:31:5e:0d:f5:8a:
                    aa:dd:5b:ce:53:5a:0f:06:40:9f:b9:0d:95:2c:94:
                    e5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E9:26:9F:05:DE:A1:A3:1F:6F:78:48:23:F0:A6:D5:B3:3D:26:EC
            X509v3 Authority Key Identifier:
                keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/7ukmnwXeoaMfb3hII_Cm1bM9Juw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:aa:f1:78:3d:75:10:dd:94:41:da:26:6f:d6:36:94:27:7d:
         a5:14:56:eb:98:f7:4a:1d:e9:92:0e:a1:ed:7d:62:92:4e:03:
         84:37:95:88:11:31:15:b0:5c:b1:bb:6c:b7:29:f7:9c:18:50:
         d3:b9:ad:63:e5:00:a1:5e:75:27:61:b3:49:34:a8:61:68:4d:
         1b:db:0d:30:0e:f9:ae:ee:78:41:2d:3d:52:0b:80:56:74:c1:
         92:d6:5f:21:25:8f:53:56:3a:b8:25:0c:ab:ba:52:c0:e5:ef:
         03:2e:c2:3a:d0:71:a9:1f:bc:35:cf:59:36:de:58:49:18:02:
         7e:b1:00:ff:07:fb:4c:c1:9b:6c:cf:fc:e6:4e:ef:b7:c6:d0:
         81:dc:54:f5:39:7a:a3:00:c3:7a:8e:17:bb:3b:0f:99:9a:00:
         43:47:d4:ba:d0:77:6f:33:36:42:4d:5d:88:45:60:13:9b:49:
         0e:d1:56:f1:97:c7:42:14:0b:95:b6:29:8c:f1:93:c0:05:85:
         6e:d0:74:57:2a:b1:bb:9b:8e:51:d8:6f:a2:ff:2b:bc:fb:44:
         ae:40:f9:cb:e9:ba:e2:00:c2:39:14:86:3c:f0:c6:30:fc:d7:
         71:41:fe:07:82:f3:dc:5c:31:b9:c4:2f:7a:50:16:31:32:cf:
         e6:35:99:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EoWM3Wn1DIm+StjQVgY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTQ3NGE1ZWE2MDFjODA5MjkxZWU3OWJhZTM5MTg5NjRk
MDg3MWUwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWU5MjY5ZjA1ZGVhMWEzMWY2Zjc4NDgyM2YwYTZkNWIzM2QyNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMcDufKtLDCIJUkk73HYjrw0p8qZ
z9pzDLkF8BOPn4Bb+mgnvLdw+5xxCl4Rde2C64UyjCaZ6VLi6uLxDdwil9eLK1xH
RQqgstzG3X1lbA8h7vRupTDRTwbSRWJ5aKiAMRpAX64aF629PQChG8vcw1+emJ8m
NGvmQQwmI1UoLsfsCQ0SaRuHc9V/uQz+edjBQNduPPTJY1sAGmz9aMHyDEw2jaiu
Ega3+cJLBRNv48Mg9ZvLfIGo3ZoghMC4wbaGEhc9wmPQW9bB82BLI7tVyyAOOui0
yUmKcSMcx5o+6THDxuXAGggM0tdKMV4N9Yqq3VvOU1oPBkCfuQ2VLJTlJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7pJp8F3qGjH294SCPwptWzPSbsMB8GA1UdIwQY
MBaAFK+kdKXqYByAkpHuebrjkYlk0IceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDIt
MTkzY2M2MWJjZTYxLzEvN3VrbW53WGVvYU1mYjNoSUlfQ20xYk05SnV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jYzRkNzYtM2FlOS00OTFlLTliZDItMTkzY2M2MWJjZTYx
LzEvcjZSMHBlcGdISUNTa2U1NXV1T1JpV1RRaHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9HxMA0G
CSqGSIb3DQEBCwUAA4IBAQAMqvF4PXUQ3ZRB2iZv1jaUJ32lFFbrmPdKHemSDqHt
fWKSTgOEN5WIETEVsFyxu2y3KfecGFDTua1j5QChXnUnYbNJNKhhaE0b2w0wDvmu
7nhBLT1SC4BWdMGS1l8hJY9TVjq4JQyrulLA5e8DLsI60HGpH7w1z1k23lhJGAJ+
sQD/B/tMwZtsz/zmTu+3xtCB3FT1OXqjAMN6jhe7Ow+ZmgBDR9S60HdvMzZCTV2I
RWATm0kO0Vbxl8dCFAuVtimM8ZPABYVu0HRXKrG7m45R2G+i/yu8+0SuQPnL6bri
AMI5FIY88MYw/NdxQf4HgvPcXDG5xC96UBYxMs/mNZlb
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:48 2026 by rpki-client