This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/266U8v32AIwFxpg_FZxsUC2Aiq0.roa
File:                     266U8v32AIwFxpg_FZxsUC2Aiq0.roa (raw, json)
Hash identifier:          pX+SOE6s9KPyp5jmWUGDvGzaItPjX+1uMV/qoRqubBk=
Subject key identifier:   DB:AE:94:F2:FD:F6:00:8C:05:C6:98:3F:15:9C:6C:50:2D:80:8A:AD
Certificate issuer:       /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial:       019B79ED507E0D6FC9EF9C7CAA2E2A2A9F2C
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/266U8v32AIwFxpg_FZxsUC2Aiq0.roa
Signing time:             Thu 01 Jan 2026 14:19:14 +0000
ROA not before:           Thu 01 Jan 2026 14:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50954
IP address blocks:        91.216.58.0/24 maxlen: 24
                          185.236.56.0/22 maxlen: 22
                          2a0d:9d00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:50:7e:0d:6f:c9:ef:9c:7c:aa:2e:2a:2a:9f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
        Validity
            Not Before: Jan  1 14:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dbae94f2fdf6008c05c6983f159c6c502d808aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:95:54:f7:d4:29:19:0d:65:d9:2f:2e:35:
                    10:46:19:a5:c4:c0:ed:48:4b:4f:5f:0e:eb:86:a9:
                    e9:12:43:e8:6b:4e:85:81:35:c0:c6:89:95:d7:d1:
                    5f:9f:9b:82:01:e2:72:6e:84:c5:7a:65:51:e1:49:
                    e1:36:d4:eb:8a:93:84:6a:b4:d2:1c:c5:8d:24:28:
                    7c:1c:6e:dd:50:6c:e3:6f:8f:44:94:05:97:a9:97:
                    0d:03:31:00:51:f5:b9:06:09:51:7a:cb:8c:71:47:
                    f9:7c:c9:4a:4a:28:24:a6:64:61:f1:06:9f:f4:1c:
                    a1:e8:c8:cc:44:44:f9:16:a0:cd:67:f6:1f:6a:cf:
                    fc:41:8e:0f:52:45:81:09:56:11:69:db:c2:7e:93:
                    6e:76:b6:a4:ef:4d:4f:9e:df:1c:a5:63:1d:16:15:
                    a6:9d:00:a9:54:00:20:87:a8:57:09:84:cf:06:a8:
                    4e:1b:49:5b:b3:a3:27:d3:9b:98:ca:90:e9:34:06:
                    fd:e4:fd:c9:6f:ba:7c:69:98:b5:9e:4a:87:b8:fb:
                    6d:3f:67:1a:70:e9:84:1f:0c:67:a3:0e:02:f3:3f:
                    32:a9:fd:21:3a:ec:63:25:88:e1:6a:57:b4:fe:06:
                    a1:5c:d8:c2:0a:50:03:b9:b8:ab:6e:7c:e4:f6:6f:
                    c3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AE:94:F2:FD:F6:00:8C:05:C6:98:3F:15:9C:6C:50:2D:80:8A:AD
            X509v3 Authority Key Identifier:
                keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/266U8v32AIwFxpg_FZxsUC2Aiq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.58.0/24
                  185.236.56.0/22
                IPv6:
                  2a0d:9d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:7b:01:e9:05:74:45:e3:b1:5b:ab:08:93:b9:63:58:85:
         73:32:9d:e5:7a:45:bb:6b:a8:98:c6:dd:1b:56:d1:99:15:e6:
         19:0a:e6:14:fe:73:16:2b:96:4f:12:cb:28:94:83:cd:2c:7a:
         0c:6f:2e:35:6e:03:87:e1:64:83:a3:c7:f1:9c:5e:3f:73:81:
         f3:cc:3c:45:d7:2e:45:4f:5d:b8:6b:e3:6a:f6:e3:6b:91:fe:
         88:6a:69:80:6e:be:a6:d1:e3:71:51:0e:b1:31:28:47:f2:17:
         18:05:11:64:b6:bf:cf:a8:a1:99:ae:e5:4c:3d:96:96:2e:e6:
         1b:af:8b:68:2f:02:d6:45:63:4b:6f:80:5c:59:24:86:2f:7f:
         0c:19:a6:2b:0f:2e:1f:6c:5a:dc:34:19:4e:5d:c9:a1:1d:f7:
         6f:fb:1c:f7:d3:19:1f:d5:a5:f5:0a:54:7b:86:8f:78:2e:40:
         50:d5:c3:63:d0:9c:09:aa:f4:49:01:fd:b8:d9:7f:56:09:f0:
         f5:2a:10:36:ac:92:98:11:fa:f5:32:54:99:26:b7:a2:18:c3:
         c6:3c:39:5e:15:02:fd:42:8c:53:bf:0d:34:26:36:dc:f3:03:
         8c:42:d1:e4:a5:aa:5e:aa:5f:d1:99:3f:6c:a3:5e:35:e7:26:
         5a:76:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:20 2026 by rpki-client