This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/kPCV9Z9GO0MBuXeU-WIy78ikMug.roa
File:                     kPCV9Z9GO0MBuXeU-WIy78ikMug.roa (raw, json)
Hash identifier:          0NQx9iiXvgvHENMrWY26SmRkGT/goJQ6m2yue/PuWAA=
Subject key identifier:   90:F0:95:F5:9F:46:3B:43:01:B9:77:94:F9:62:32:EF:C8:A4:32:E8
Certificate issuer:       /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial:       019B7CEE40A5BF291604B0CC4F6E948F28A4
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/kPCV9Z9GO0MBuXeU-WIy78ikMug.roa
Signing time:             Fri 02 Jan 2026 04:19:07 +0000
ROA not before:           Fri 02 Jan 2026 04:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47703
IP address blocks:        91.236.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:40:a5:bf:29:16:04:b0:cc:4f:6e:94:8f:28:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d977120937500eb46696428962e510e02c348e6c
        Validity
            Not Before: Jan  2 04:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=90f095f59f463b4301b97794f96232efc8a432e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:b3:23:bf:1f:5b:75:90:50:1b:be:7b:9f:
                    5e:52:a9:a2:ea:30:bc:cc:5d:6c:0f:6d:48:71:e0:
                    33:a8:55:fa:93:3a:e5:76:27:76:b1:d4:77:89:f5:
                    4d:6e:75:a8:aa:50:b6:58:42:9a:8d:09:0b:0c:2a:
                    91:59:1e:85:08:24:b7:a7:c3:d1:1b:ce:c3:74:11:
                    5b:7f:28:d3:0e:57:c3:74:85:a7:5b:af:93:a7:b1:
                    20:fb:40:a7:9a:dc:6f:4a:7b:43:ff:b9:33:e9:5e:
                    95:ab:95:1a:f8:0f:1e:14:81:a3:79:d6:30:1e:dd:
                    b1:61:f5:a3:45:15:f5:b1:4a:3d:bc:71:4a:16:a8:
                    91:05:d8:e0:0c:9f:82:99:84:8b:84:ee:60:41:b9:
                    0a:b2:06:82:d8:78:03:7a:68:88:4b:e8:1d:ed:a8:
                    e7:b8:39:f7:67:d4:d8:69:57:d5:97:67:5b:d5:93:
                    98:25:4e:a4:00:14:29:c9:5e:a1:3d:dd:12:3a:1e:
                    e2:b5:5b:34:81:2e:02:8d:ba:e7:d0:98:e6:b9:5b:
                    1d:b1:62:13:e8:de:0d:b6:7c:a7:39:47:fe:08:93:
                    8e:2f:ee:9a:ef:68:20:0d:2a:bd:14:33:a7:62:8f:
                    0e:ee:7d:83:ea:07:14:33:02:cb:5f:08:8c:3d:3b:
                    0e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F0:95:F5:9F:46:3B:43:01:B9:77:94:F9:62:32:EF:C8:A4:32:E8
            X509v3 Authority Key Identifier:
                keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/kPCV9Z9GO0MBuXeU-WIy78ikMug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:44:7e:92:98:99:8a:c6:1c:b8:b1:c7:44:d4:f3:18:78:f9:
         5f:98:c4:69:86:fa:0f:d2:70:22:09:11:c1:62:83:d1:25:47:
         d5:ea:47:b0:f3:4e:56:af:d1:52:20:0d:af:b4:71:9b:d4:bd:
         1a:60:5d:eb:17:cf:2b:19:b0:3e:66:9f:4c:a9:6f:0a:14:78:
         29:a5:67:ef:d2:4d:65:5f:1c:eb:36:34:06:c2:fd:fc:47:af:
         28:40:2c:7d:7f:ae:ec:24:f3:58:d5:99:bf:9c:e8:9c:d7:ce:
         00:be:f6:eb:20:60:e4:96:1e:e7:1c:21:49:61:a9:e1:95:b3:
         1c:66:35:9a:b6:98:9a:09:0a:1d:db:c4:3c:4a:4d:f3:f3:dd:
         cc:e3:22:2a:2f:e7:e9:80:2a:7a:28:28:9d:84:ef:8c:cc:4c:
         d0:c9:e8:fe:54:b6:53:03:0b:b6:46:dd:b6:5d:a7:d2:cc:b8:
         e9:3b:93:d3:c6:2c:49:84:ff:d8:c8:cc:fc:f1:8d:05:64:19:
         66:32:10:59:39:d6:9c:31:e0:ef:1c:70:c3:b6:e4:47:3d:da:
         af:48:87:1b:f9:13:5e:4c:28:fe:67:9b:68:32:bd:e6:70:56:
         c3:b8:c3:c0:c7:1e:1d:e3:66:f8:f6:93:f6:8c:b3:e7:f4:25:
         15:81:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:43 2026 by rpki-client