This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa
File:                     Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa (raw, json)
Hash identifier:          wOkfUq9QEg8uZcY5m7qfEesrjfuWcfYpWI1YJK2QRhs=
Subject key identifier:   17:0E:93:AE:B2:A9:AD:48:47:43:B2:E6:46:0E:F6:82:42:B3:61:FA
Certificate issuer:       /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
Certificate serial:       019B77C75E2549FABDEC72665DF59D715BEE
Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa
Signing time:             Thu 01 Jan 2026 04:18:33 +0000
ROA not before:           Thu 01 Jan 2026 04:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204949
IP address blocks:        91.241.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:5e:25:49:fa:bd:ec:72:66:5d:f5:9d:71:5b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
        Validity
            Not Before: Jan  1 04:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=170e93aeb2a9ad484743b2e6460ef68242b361fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:fb:4a:3d:6c:72:42:f3:27:46:0f:78:bf:
                    5a:0f:86:38:87:dd:1c:a3:91:cf:79:64:0d:da:47:
                    21:ea:24:48:98:b5:f7:07:af:a2:e0:cd:62:10:4f:
                    38:7e:b8:d9:2d:40:5d:c2:84:ce:6a:5e:66:e3:37:
                    82:b3:3b:77:06:1e:0d:8c:11:0b:c3:69:9e:04:3d:
                    9d:9c:f4:63:1f:cb:49:92:04:f5:d9:47:14:ee:9f:
                    71:eb:22:29:5d:ea:b0:e3:be:7c:42:ee:96:f5:20:
                    28:0c:32:13:03:25:c2:bc:9a:e0:d5:90:3d:6d:8b:
                    fc:31:b0:a8:9d:ff:c1:82:85:7b:dd:23:e8:9b:46:
                    cf:7c:2f:d3:87:a6:87:b9:63:9c:24:1c:03:b0:44:
                    91:13:ee:b2:76:a3:1a:62:72:48:28:4b:3d:ff:92:
                    54:18:7b:e1:aa:0a:6e:41:f2:29:08:da:19:1e:20:
                    11:cc:4d:c4:60:85:30:a8:aa:ce:df:13:7f:78:08:
                    b4:6d:af:db:b1:3a:32:78:3d:7c:f1:1c:cd:aa:41:
                    46:31:46:0f:7a:58:29:84:15:84:c5:d0:a6:90:5a:
                    d5:48:25:9c:7c:85:8a:7f:76:e1:5a:c5:e4:44:f3:
                    26:ea:5e:79:a0:a4:f8:0e:03:2b:ca:ef:0e:07:4c:
                    fb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0E:93:AE:B2:A9:AD:48:47:43:B2:E6:46:0E:F6:82:42:B3:61:FA
            X509v3 Authority Key Identifier:
                keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.241.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:73:b9:26:24:6d:1a:59:22:d9:a5:7a:0a:3c:ce:c7:30:46:
         9b:4a:35:4c:30:ae:16:11:4e:6c:3b:0f:14:ad:78:ba:d4:8c:
         7f:ca:de:d6:da:3d:c0:37:c3:20:23:28:25:72:17:52:54:fb:
         9e:d6:ff:ee:46:a8:d7:15:e7:12:42:18:fe:0f:09:e6:12:af:
         a5:2a:e0:e3:e3:03:f1:47:a9:27:16:c4:cf:81:4d:29:90:48:
         20:0e:2f:ab:8d:af:2b:2e:22:b8:ca:07:30:8b:b7:64:86:b1:
         25:22:0f:47:32:34:2e:2e:dd:8a:c3:08:d7:74:51:b0:6a:fe:
         66:78:67:96:32:39:65:87:ce:4b:a9:29:da:b0:e0:3e:ec:a4:
         87:0a:e2:82:39:93:59:b5:f4:25:10:32:18:eb:b9:22:3f:e6:
         59:94:a7:68:ff:d5:30:d8:0f:4e:24:56:27:4f:d1:14:b9:8f:
         68:97:a1:d6:44:b0:23:71:f8:d5:7d:46:7b:4f:4b:de:d4:74:
         53:c5:d0:2a:00:c2:97:be:84:1d:ef:75:4f:75:2c:6c:a4:59:
         d1:c6:a2:fa:92:97:89:e8:36:68:88:f5:b6:4a:44:03:ba:2f:
         be:4a:12:46:dd:43:6c:06:53:6a:90:cc:d0:a1:d3:ed:63:08:
         8d:9c:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:26:02 2026 by rpki-client