This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/CL722J7xYfTmivJofsZgMUzQplk.roa
File:                     CL722J7xYfTmivJofsZgMUzQplk.roa (raw, json)
Hash identifier:          eh0TjPw5LHfgBXGM+9VKOgi5le0UkralDFaHp/wepjY=
Subject key identifier:   08:BE:F6:D8:9E:F1:61:F4:E6:8A:F2:68:7E:C6:60:31:4C:D0:A6:59
Certificate issuer:       /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
Certificate serial:       019B797E7D8F155AB4A08EC23124E300EE70
Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/CL722J7xYfTmivJofsZgMUzQplk.roa
Signing time:             Thu 01 Jan 2026 12:18:11 +0000
ROA not before:           Thu 01 Jan 2026 12:18:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198463
IP address blocks:        91.217.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:7d:8f:15:5a:b4:a0:8e:c2:31:24:e3:00:ee:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9
        Validity
            Not Before: Jan  1 12:18:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=08bef6d89ef161f4e68af2687ec660314cd0a659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:0c:32:be:d6:70:f5:78:38:aa:88:ea:be:
                    23:0c:41:3d:05:06:c3:1f:3c:c3:a2:05:e0:66:89:
                    a5:b8:78:67:2d:9f:03:91:51:28:df:59:82:81:73:
                    e5:e9:ee:b0:89:8f:b2:5b:d5:8c:88:6d:5c:f6:a2:
                    87:ea:d7:05:f0:4a:66:02:2a:20:f1:d2:95:5e:a2:
                    42:8c:22:a2:c0:c6:a5:cf:cb:0d:08:12:de:34:45:
                    b3:a0:0e:6a:af:a2:ee:80:c5:7c:2e:37:3f:18:c2:
                    ff:e9:6e:3f:0f:32:69:4c:fa:77:f5:be:df:3a:98:
                    7a:60:7d:c7:e1:aa:7d:9a:cb:0e:de:af:6e:81:f4:
                    a1:13:97:8d:08:25:77:00:cf:f7:30:01:a0:24:9c:
                    43:58:9e:96:25:20:2c:58:24:ce:28:8f:2a:9c:cd:
                    3d:13:a8:a5:1f:b5:89:e0:3e:be:ec:d2:96:c7:dc:
                    bf:07:f0:11:03:25:d6:5b:bb:44:0e:83:c8:85:6d:
                    9a:39:f3:62:73:62:7d:49:90:40:2b:50:db:04:08:
                    f1:f2:1d:fc:e7:56:2a:1c:42:27:15:db:c9:a5:1a:
                    2e:3b:42:96:67:7c:5e:d6:c0:0b:39:c0:07:29:09:
                    36:86:98:7c:78:1c:bd:06:b3:ef:d6:6a:5d:69:84:
                    92:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BE:F6:D8:9E:F1:61:F4:E6:8A:F2:68:7E:C6:60:31:4C:D0:A6:59
            X509v3 Authority Key Identifier:
                keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/CL722J7xYfTmivJofsZgMUzQplk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.217.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:38:f9:68:0f:35:77:17:71:eb:16:c4:aa:f4:42:14:18:47:
         21:9f:fa:f9:92:18:c0:52:25:49:5c:d5:dd:41:a3:e8:35:03:
         b6:41:de:29:77:8b:b7:5f:38:b0:49:de:21:60:88:97:36:de:
         d3:42:1b:00:bd:d1:2b:81:ed:a4:f0:6a:80:5d:5e:d0:83:cc:
         88:37:bd:30:69:fc:4c:b7:93:75:8b:ed:77:b8:01:2f:b1:22:
         24:93:51:ab:08:01:7a:d7:6e:ee:3a:0b:3a:6f:83:0d:f2:22:
         02:88:a0:de:96:9c:30:64:81:78:6d:2a:db:7f:a1:7e:30:47:
         09:d2:2e:61:24:20:83:78:2b:d7:e1:4c:96:02:dd:8e:c2:ce:
         0f:a5:43:cb:31:1e:b9:d2:c6:22:29:0f:19:85:ed:a9:8f:e9:
         5a:f2:05:76:9f:de:6a:77:ff:9d:48:46:a8:07:81:d0:23:c0:
         dc:58:bb:f4:0e:8f:88:1c:74:9c:c5:d1:e5:30:7c:b9:d6:f4:
         e7:1b:33:b4:88:3f:8f:2c:c9:e7:aa:67:58:0d:48:58:7f:95:
         b6:9c:b1:5b:50:9d:c6:f2:5f:26:53:60:00:b1:44:b0:9f:87:
         4c:e6:e9:2c:e0:d9:3a:ae:d5:d9:90:40:77:e0:56:77:1f:cf:
         60:0d:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:10 2026 by rpki-client