This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa
File:                     8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa (raw, json)
Hash identifier:          /UT/Fa23tq8Vnw8GXuEzSsDokpGGbDVoxclf2hd11P4=
Subject key identifier:   F0:93:C3:4D:12:5C:5A:32:42:D6:9E:81:BA:9F:15:45:ED:46:6A:07
Certificate issuer:       /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial:       019B7C7F25026DAB4746981AA0AF71B6774B
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa
Signing time:             Fri 02 Jan 2026 02:17:45 +0000
ROA not before:           Fri 02 Jan 2026 02:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212777
IP address blocks:        91.194.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:25:02:6d:ab:47:46:98:1a:a0:af:71:b6:77:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
        Validity
            Not Before: Jan  2 02:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f093c34d125c5a3242d69e81ba9f1545ed466a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:ff:27:3c:6b:20:66:ac:a0:5d:e8:80:12:
                    97:b9:62:8c:27:3d:b8:cc:7e:dd:25:b6:d7:f4:11:
                    cf:f2:52:83:13:0b:99:fc:82:8c:43:e0:b9:b1:fa:
                    d7:06:61:a9:52:50:63:11:fd:74:ba:fb:51:83:ff:
                    a4:32:60:36:02:d8:a7:d7:3b:5f:a2:6f:42:b7:6d:
                    49:6d:4f:7d:9d:6d:6c:71:04:73:37:53:b1:a0:bd:
                    5a:fa:eb:24:ca:de:02:47:0c:f2:32:6e:30:cd:26:
                    8f:fa:f2:a2:aa:72:47:aa:f0:bf:b0:08:c2:e7:f1:
                    da:de:31:e7:5f:d8:8e:e8:dc:51:c0:6b:6f:62:c7:
                    73:22:76:60:20:f2:ab:45:0a:37:a8:23:ef:b3:92:
                    04:38:73:a7:15:de:da:b6:be:93:d6:7a:86:0b:97:
                    5e:cf:73:0d:dc:25:b6:8a:a8:73:9e:b8:40:c3:51:
                    bf:f9:bc:be:ef:f5:85:5c:99:c3:62:29:0e:e1:be:
                    f6:ef:91:bb:75:1f:02:e5:77:f3:0c:2c:e5:2e:ff:
                    50:bb:21:5c:89:20:bd:f5:39:86:87:ca:cf:43:54:
                    96:64:6a:6f:43:ea:9c:40:73:32:19:c3:aa:61:19:
                    ac:69:f1:2e:6a:f2:54:c1:b3:b3:b7:69:fd:53:d7:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:93:C3:4D:12:5C:5A:32:42:D6:9E:81:BA:9F:15:45:ED:46:6A:07
            X509v3 Authority Key Identifier:
                keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:02:00:74:dd:e1:b8:8e:36:05:e7:61:11:13:c5:8a:f4:cb:
         bc:a5:4c:09:43:92:80:45:62:6f:f1:f5:df:ff:80:da:54:e5:
         54:3c:45:67:b2:2a:55:64:48:57:d7:71:b0:aa:d5:f7:6a:3b:
         1c:c6:d1:0a:48:4c:cd:6b:0a:04:4e:25:bd:c2:c1:90:28:50:
         9f:d3:c8:b7:28:4d:eb:97:e7:5c:0b:40:3d:6c:a7:92:00:57:
         ac:65:1f:d6:0b:55:3d:48:e2:66:39:dc:fd:f3:a2:ac:e5:8b:
         0a:91:72:89:d8:b6:59:6f:8e:d4:b5:e8:36:27:c8:f5:6b:6f:
         ff:43:0a:25:67:26:45:72:40:e8:39:bb:63:4a:bf:5a:74:97:
         ff:18:bc:8f:83:d9:8f:02:cc:40:73:13:a2:2b:4c:c0:a5:fc:
         cd:08:3d:d7:89:f0:c1:4d:38:87:7f:ab:b8:20:d6:22:cd:cb:
         8b:0c:47:06:d1:07:09:28:59:b8:4a:20:95:97:a6:f3:6a:95:
         af:03:71:51:c2:aa:8c:19:49:00:d9:01:f3:f8:00:c7:7e:01:
         45:70:a1:8e:d5:59:0a:79:05:fe:ba:b7:57:e4:19:66:0f:39:
         e0:e5:a8:00:68:c3:98:7f:b4:88:3e:6f:89:af:7a:eb:0c:94:
         ad:2a:b0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:49 2026 by rpki-client