This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/5KdGE2jdbERGSAaTxotqmYnDHPE.roa
File:                     5KdGE2jdbERGSAaTxotqmYnDHPE.roa (raw, json)
Hash identifier:          kwZAjYwYGkcbs7JNQRRWwRi2Ovfq/Y4hHTxA0ovQfso=
Subject key identifier:   E4:A7:46:13:68:DD:6C:44:46:48:06:93:C6:8B:6A:99:89:C3:1C:F1
Certificate issuer:       /CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
Certificate serial:       019B7834BC7A4D9F7691BEDE3C2779171698
Authority key identifier: ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/5KdGE2jdbERGSAaTxotqmYnDHPE.roa
Signing time:             Thu 01 Jan 2026 06:18:00 +0000
ROA not before:           Thu 01 Jan 2026 06:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47884
IP address blocks:        91.206.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:bc:7a:4d:9f:76:91:be:de:3c:27:79:17:16:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed764edfdb1b821d5d25ac8b7a080a6a906fa6b0
        Validity
            Not Before: Jan  1 06:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e4a7461368dd6c4446480693c68b6a9989c31cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:38:71:97:fe:f9:c3:6c:f4:f7:40:dd:9c:41:
                    8e:c8:86:2f:99:4d:d1:4f:b6:0d:77:64:37:67:92:
                    19:ad:e8:8b:f2:ef:06:78:1e:bf:11:9d:b1:c5:6b:
                    77:b8:ca:5a:4b:19:e5:90:cc:45:22:b7:5c:50:1b:
                    be:b0:67:b9:81:a9:8d:a2:49:16:e6:09:6b:3b:93:
                    f4:98:f2:a7:d1:e1:85:eb:53:6a:e7:0b:e6:4c:dc:
                    81:50:15:fb:ab:a5:b3:f2:72:16:be:33:f6:ed:e3:
                    f8:68:e2:c2:33:1f:5c:c7:ca:e8:e7:68:0e:e9:d9:
                    87:28:9f:b4:98:b6:7b:d0:56:e8:1d:b1:30:a1:09:
                    81:73:1b:20:d5:2a:1b:3d:ab:81:24:87:e2:10:56:
                    11:dd:d4:60:9f:4c:8b:5f:ce:3e:95:d4:b0:73:e7:
                    3c:0c:57:be:ce:09:fe:67:58:e0:99:0f:46:3b:7b:
                    cf:5a:d5:26:16:86:e4:db:eb:0c:18:c1:ad:00:69:
                    3a:49:9d:de:f4:74:5b:e7:52:ec:46:fd:ac:ca:fb:
                    84:64:5a:aa:aa:8d:7f:54:91:7e:55:e3:ea:ea:b9:
                    5c:4c:fd:21:33:e5:02:d9:5d:d6:12:35:88:7e:d3:
                    ed:b9:21:cc:c0:08:e8:30:9a:46:32:32:95:fd:59:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:46:13:68:DD:6C:44:46:48:06:93:C6:8B:6A:99:89:C3:1C:F1
            X509v3 Authority Key Identifier:
                keyid:ED:76:4E:DF:DB:1B:82:1D:5D:25:AC:8B:7A:08:0A:6A:90:6F:A6:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XZO39sbgh1dJayLeggKapBvprA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/5KdGE2jdbERGSAaTxotqmYnDHPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/eedb39-0385-4a98-8963-d348edea837b/1/7XZO39sbgh1dJayLeggKapBvprA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f6:57:ed:13:0c:cd:81:0e:aa:0f:87:b8:1f:0d:02:e5:a1:24:
         0d:f7:44:ae:26:97:37:e6:74:51:70:eb:3a:d8:12:7a:93:15:
         cd:f0:bc:9b:1f:ec:1a:27:79:3c:c3:5b:eb:b0:ce:5b:c4:80:
         4e:6a:c4:77:ef:6e:92:c1:5f:9e:30:ef:bf:cd:45:85:83:14:
         e9:0e:cc:fe:d6:8f:e4:05:89:b7:0e:80:80:eb:26:6b:f9:6b:
         7a:ef:f1:1b:28:65:f5:57:24:ab:86:3f:26:7c:84:16:19:6b:
         7b:7e:9e:ba:51:58:af:ba:da:12:45:56:73:4e:89:0c:c0:e3:
         93:73:49:28:c9:36:7b:d3:b4:fb:f8:57:d5:3c:87:ed:eb:08:
         a6:f7:2e:39:60:29:67:2e:95:37:16:13:cd:c3:24:60:0c:0c:
         97:92:42:3d:15:e5:f9:9a:34:84:ef:8c:fa:d7:cf:b3:a0:16:
         a2:db:23:cf:bb:0d:69:40:ff:f8:92:34:3c:1f:b3:5e:df:dd:
         54:02:99:3c:0c:7a:28:2f:d1:7f:95:15:fd:ad:ce:b7:5d:26:
         c6:01:2d:88:45:1b:8f:c6:8d:b4:ee:1a:5e:a3:59:75:a7:e1:
         de:72:8b:e8:28:f0:df:c4:cd:48:b6:e0:d8:83:16:87:c0:cb:
         dc:e9:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:39 2026 by rpki-client