This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/aWcPUj1DCDuQO6qmjauPK8xInfo.roa
File:                     aWcPUj1DCDuQO6qmjauPK8xInfo.roa (raw, json)
Hash identifier:          k8tfsJzdjTq2aomYV3WxH/lnSIh4yY+NAufWvoQ6Pds=
Subject key identifier:   69:67:0F:52:3D:43:08:3B:90:3B:AA:A6:8D:AB:8F:2B:CC:48:9D:FA
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       019B78A21AFE52592E71C466FF2353724FE3
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/aWcPUj1DCDuQO6qmjauPK8xInfo.roa
Signing time:             Thu 01 Jan 2026 08:17:28 +0000
ROA not before:           Thu 01 Jan 2026 08:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211415
IP address blocks:        91.212.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:1a:fe:52:59:2e:71:c4:66:ff:23:53:72:4f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Jan  1 08:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69670f523d43083b903baaa68dab8f2bcc489dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fe:28:6f:10:a3:27:42:b9:37:3c:51:42:8d:
                    2e:3c:0e:c9:e2:68:5d:f3:cf:74:dc:42:35:f2:4c:
                    c6:db:83:42:15:a8:16:0e:78:89:ec:b2:df:2d:39:
                    ee:b0:fb:6e:4a:91:47:38:62:7f:43:3c:4b:57:4f:
                    bc:ba:19:a7:06:cd:3a:48:39:41:ad:5d:c4:fb:ae:
                    d7:92:31:73:a5:e8:be:ce:74:3e:f1:c9:8c:32:86:
                    41:f0:83:dc:a7:84:ba:26:66:ec:8b:2d:1f:ed:de:
                    8e:ba:0e:03:8b:9c:ce:6b:9c:a5:98:8f:42:ed:05:
                    0d:fe:25:bc:7a:ee:f7:9a:3d:1c:70:87:62:84:5d:
                    ea:92:0c:1d:23:fc:b8:87:33:78:e6:c1:5c:36:bd:
                    08:21:d4:05:3f:fe:f7:24:1c:0d:2f:34:d8:c3:3f:
                    1b:a4:34:a5:14:7b:9c:d4:c9:e8:3c:3e:b8:e0:ca:
                    2c:5c:8a:d2:94:44:cb:42:f6:63:84:69:86:ae:6f:
                    3f:69:6f:88:6c:30:a0:1a:09:19:af:64:c0:98:64:
                    30:cd:e0:8c:47:89:9c:bf:27:ce:24:d6:dc:8b:8f:
                    5f:9b:58:15:86:25:ce:18:23:24:df:28:3e:c2:94:
                    02:2f:7c:c3:90:dd:85:2c:08:b2:bf:39:98:cf:fb:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:67:0F:52:3D:43:08:3B:90:3B:AA:A6:8D:AB:8F:2B:CC:48:9D:FA
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/aWcPUj1DCDuQO6qmjauPK8xInfo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:59:08:21:58:db:95:35:18:a8:7f:c3:f0:3a:86:84:fe:4e:
         a7:e8:77:6c:50:76:6f:0f:c0:eb:82:af:f2:a2:8a:7f:ac:d0:
         e5:c4:05:fd:00:a4:cc:e2:b9:46:e0:f0:b4:1e:38:f5:18:b7:
         f7:51:95:fd:69:5c:74:7e:90:cc:e0:7b:cb:50:c9:6e:1b:d9:
         b7:49:72:2c:2a:d6:bb:fa:fa:e0:c0:4f:a1:a7:0d:ad:ab:c9:
         4a:38:67:3b:98:6e:d0:45:e5:18:69:43:a5:ec:19:c8:36:1b:
         69:13:1d:a3:9e:9e:84:ce:ca:3e:68:6b:58:d5:fc:2b:02:e0:
         26:4d:14:2a:d8:7f:55:79:94:fb:bb:f5:d5:4e:ee:87:06:f7:
         45:e9:e9:24:ee:fd:64:79:5f:af:b4:b0:22:ec:3c:14:87:6a:
         a8:b3:cc:f5:bf:fd:71:33:9e:14:1f:80:69:46:b4:e1:7f:94:
         99:7a:1e:40:fd:c8:28:8e:cc:47:b4:fc:1a:61:a0:74:38:52:
         b9:e7:e5:61:7a:e2:ba:e8:21:52:87:49:7d:4d:e4:d4:40:eb:
         7b:35:4f:64:f1:86:a9:03:45:84:27:67:32:12:0b:64:b8:b5:
         a2:cc:8b:0b:3c:a9:26:ec:77:d4:06:a1:1f:85:57:3f:ca:83:
         ba:59:ab:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:22:01 2026 by rpki-client