This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/ao51ShN_hsLIYI5m8nig7Cs4o3s.roa
File:                     ao51ShN_hsLIYI5m8nig7Cs4o3s.roa (raw, json)
Hash identifier:          JBy8r6a0LgooRemhjrW8orAn22Q6qTJMcSOAq/Cj8Bs=
Subject key identifier:   6A:8E:75:4A:13:7F:86:C2:C8:60:8E:66:F2:78:A0:EC:2B:38:A3:7B
Certificate issuer:       /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial:       019B7BA33FFC220851DEB617C7FF8A6598EC
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/ao51ShN_hsLIYI5m8nig7Cs4o3s.roa
Signing time:             Thu 01 Jan 2026 22:17:34 +0000
ROA not before:           Thu 01 Jan 2026 22:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50912
IP address blocks:        91.216.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:3f:fc:22:08:51:de:b6:17:c7:ff:8a:65:98:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
        Validity
            Not Before: Jan  1 22:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a8e754a137f86c2c8608e66f278a0ec2b38a37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:00:3c:58:75:92:b6:e3:26:d8:b1:3c:37:
                    49:2a:eb:4c:6c:ee:a7:e9:50:af:88:0c:fc:fe:c8:
                    fd:14:ae:b4:60:34:2e:f4:ea:de:c0:c1:42:ca:1c:
                    6d:87:c0:2b:61:8b:6b:1e:b4:1b:2e:ad:ae:20:fa:
                    f4:cc:dc:a8:55:45:5c:c9:0f:8a:98:f5:fd:2e:ed:
                    07:20:1a:cb:50:25:9e:85:40:fd:bb:6a:17:17:61:
                    25:f3:c3:6f:ed:9c:29:0b:7b:cf:02:73:df:74:58:
                    14:bb:23:50:66:02:a3:99:27:58:1d:2a:ba:fd:fb:
                    a5:7b:44:49:43:9b:b2:90:60:65:7e:5d:d7:a1:40:
                    a4:71:97:a8:89:d4:a6:c4:05:f0:d5:68:84:fb:5f:
                    b0:cc:f9:b7:9f:ef:85:97:99:8d:fb:6c:4a:e5:2e:
                    4a:e7:d9:e9:98:bc:90:ee:41:6d:7f:de:f7:c9:46:
                    2f:68:08:b4:d8:17:f8:28:a6:9f:d2:c6:74:76:01:
                    ef:81:21:4f:7c:6d:c3:f8:9f:b5:c3:11:f0:f5:c0:
                    c4:0a:53:52:b0:da:87:54:0c:8c:b0:ec:f1:f4:a0:
                    f7:ab:cd:c7:71:5d:29:68:a9:17:94:03:cb:e9:0b:
                    5f:11:62:4f:48:3c:99:6d:38:2a:e7:3d:13:11:6c:
                    b2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:75:4A:13:7F:86:C2:C8:60:8E:66:F2:78:A0:EC:2B:38:A3:7B
            X509v3 Authority Key Identifier:
                keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/ao51ShN_hsLIYI5m8nig7Cs4o3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:61:bd:38:c7:63:be:5a:b4:4a:b8:d8:a1:b5:4a:30:73:7c:
         91:ec:92:00:d2:57:2e:bb:c3:dc:18:be:2f:30:a2:4a:60:89:
         43:d1:07:1a:26:3f:c3:e4:01:9d:5a:00:21:44:69:96:c7:fb:
         cd:03:5d:88:c7:25:c5:6c:a0:08:85:5f:b9:09:7c:98:0c:f1:
         c2:40:f3:25:da:85:bf:bb:82:80:e1:2e:96:53:02:b2:c4:c6:
         78:97:7d:cc:02:e7:18:2d:d2:31:58:7a:65:36:18:07:c9:a9:
         db:fc:77:fa:a3:c9:6a:15:77:7d:74:29:f6:5f:89:88:76:6f:
         37:5f:b5:7d:e5:2f:65:de:43:22:3a:aa:18:8f:6c:d7:25:da:
         33:cc:d2:3c:f0:0c:16:b6:fd:2b:52:ff:60:48:0f:9c:a7:06:
         16:44:27:b8:fe:d0:25:64:4e:10:04:6d:50:44:17:c7:a6:b2:
         39:d9:15:f0:5a:b9:74:f1:23:3c:6b:9d:35:35:2a:d6:e6:b2:
         19:2f:55:eb:2f:10:eb:90:92:8d:6e:1a:e8:48:f1:62:39:2b:
         9e:62:53:57:23:39:8f:3a:85:4f:87:09:22:a9:f4:26:e7:94:
         b9:34:34:e2:e6:b9:de:05:ff:94:d9:f2:63:3d:dc:ec:b0:10:
         31:49:19:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7oz/8IghR3rYXx/+KZZjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjM4NjI2MjBkNDY3YzhhNzlmOGY0NGVmMzViYjYwYWY4
MjNmOWQwHhcNMjYwMTAxMjIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YThlNzU0YTEzN2Y4NmMyYzg2MDhlNjZmMjc4YTBlYzJiMzhhMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT0APFh1krbjJtixPDdJKutMbO6n
6VCviAz8/sj9FK60YDQu9OrewMFCyhxth8ArYYtrHrQbLq2uIPr0zNyoVUVcyQ+K
mPX9Lu0HIBrLUCWehUD9u2oXF2El88Nv7ZwpC3vPAnPfdFgUuyNQZgKjmSdYHSq6
/fule0RJQ5uykGBlfl3XoUCkcZeoidSmxAXw1WiE+1+wzPm3n++Fl5mN+2xK5S5K
59npmLyQ7kFtf973yUYvaAi02Bf4KKaf0sZ0dgHvgSFPfG3D+J+1wxHw9cDEClNS
sNqHVAyMsOzx9KD3q83HcV0paKkXlAPL6QtfEWJPSDyZbTgq5z0TEWyyxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGqOdUoTf4bCyGCOZvJ4oOwrOKN7MB8GA1UdIwQY
MBaAFIRjhiYg1GfIp5+PRO81u2Cvgj+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgt
ZmU3YWQ3ZmM0Nzg5LzEvYW81MVNoTl9oc0xJWUk1bThuaWc3Q3M0bzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iMzQxMWItNDg2Mi00ODcxLWI5YTgtZmU3YWQ3ZmM0Nzg5
LzEvaEdPR0ppRFVaOGlubjQ5RTd6VzdZSy1DUDUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gbMA0G
CSqGSIb3DQEBCwUAA4IBAQBwYb04x2O+WrRKuNihtUowc3yR7JIA0lcuu8PcGL4v
MKJKYIlD0QcaJj/D5AGdWgAhRGmWx/vNA12IxyXFbKAIhV+5CXyYDPHCQPMl2oW/
u4KA4S6WUwKyxMZ4l33MAucYLdIxWHplNhgHyanb/Hf6o8lqFXd9dCn2X4mIdm83
X7V95S9l3kMiOqoYj2zXJdozzNI88AwWtv0rUv9gSA+cpwYWRCe4/tAlZE4QBG1Q
RBfHprI52RXwWrl08SM8a501NSrW5rIZL1XrLxDrkJKNbhroSPFiOSueYlNXIzmP
OoVPhwkiqfQm55S5NDTi5rneBf+U2fJjPdzssBAxSRlM
-----END CERTIFICATE-----
Generated at Tue Feb 10 08:38:22 2026 by rpki-client