This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/1b-Tw3SlZmNJTB8UfFQw8RxUKqE.roa
File:                     1b-Tw3SlZmNJTB8UfFQw8RxUKqE.roa (raw, json)
Hash identifier:          MXUx87RXlsW1DyFqtlpRvICKS30coFNg5ggskndvUkI=
Subject key identifier:   D5:BF:93:C3:74:A5:66:63:49:4C:1F:14:7C:54:30:F1:1C:54:2A:A1
Certificate issuer:       /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial:       019B76EB37AA6A8DD911B09CF194035E6B98
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/1b-Tw3SlZmNJTB8UfFQw8RxUKqE.roa
Signing time:             Thu 01 Jan 2026 00:18:05 +0000
ROA not before:           Thu 01 Jan 2026 00:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199017
IP address blocks:        93.114.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:37:aa:6a:8d:d9:11:b0:9c:f1:94:03:5e:6b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
        Validity
            Not Before: Jan  1 00:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d5bf93c374a56663494c1f147c5430f11c542aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:be:63:01:85:aa:11:66:21:d8:16:db:0b:
                    bd:77:66:e4:64:81:f3:22:49:97:f9:b3:23:8c:81:
                    21:b0:9b:07:85:29:c6:6a:48:22:96:a5:6d:19:ba:
                    70:e3:ac:c7:7f:0a:a2:4f:ae:80:87:11:5a:c9:bd:
                    0b:ec:04:80:ad:5b:c6:ba:10:05:d2:e6:68:e8:fa:
                    fc:8b:36:0e:c5:24:1a:46:9c:ee:6c:7b:f4:1a:36:
                    1d:5f:b8:a1:a9:6a:99:a0:da:93:a3:8f:92:d8:e6:
                    b0:e9:10:88:2d:ae:ba:56:44:45:52:4e:46:9c:f5:
                    42:2f:34:05:c9:11:52:dd:ab:b5:cb:f8:b1:59:10:
                    44:1e:0e:71:a7:af:ca:5e:6d:ee:d0:09:69:1d:d1:
                    ac:30:18:15:47:f6:01:c3:13:9c:d2:ad:58:6e:b5:
                    50:1e:9c:7c:4e:4b:af:37:15:d5:46:93:df:bd:78:
                    b6:84:95:d4:a9:91:ef:f0:f1:94:ee:e5:86:1c:0d:
                    09:bb:43:ca:d8:f9:a9:7c:06:1f:cf:5a:46:fe:53:
                    ca:8b:f1:90:4e:0b:d8:ed:0f:3c:b6:b1:d3:ed:7a:
                    ff:b1:ab:14:29:be:22:c2:11:78:9e:96:14:4d:a1:
                    33:d2:32:77:75:be:e1:55:49:4d:1a:5f:19:54:00:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BF:93:C3:74:A5:66:63:49:4C:1F:14:7C:54:30:F1:1C:54:2A:A1
            X509v3 Authority Key Identifier:
                keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/1b-Tw3SlZmNJTB8UfFQw8RxUKqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:50:2d:93:af:ce:42:d5:9f:34:05:f9:cd:8a:7b:16:53:12:
         9e:f3:31:af:96:43:ca:2f:5f:d0:f7:77:1c:25:cb:5d:b1:f3:
         2c:dd:7e:ef:bc:cf:90:d2:88:5b:25:4e:90:99:ff:9b:64:d1:
         c7:d0:86:c8:f6:b7:be:ed:e3:4f:93:11:c6:be:ad:bc:86:ac:
         73:5d:5a:58:81:ad:cc:e3:15:ad:39:ca:9e:fe:ae:4c:0c:4c:
         b2:ff:51:d0:31:bc:6e:80:0b:02:f8:41:f6:ad:1e:8b:1c:d0:
         d3:69:0a:d6:8c:36:d2:3b:21:04:96:22:09:34:3c:9c:1f:02:
         8a:fe:a6:64:94:7a:f9:78:a7:fc:11:6e:64:65:29:14:f1:6a:
         f3:df:86:e8:4d:7c:8e:9d:be:fe:e3:4f:c1:0a:b8:70:4a:c2:
         9d:33:3d:73:b2:d5:ca:ba:4f:6d:26:43:ea:38:00:b9:f4:5e:
         c1:d9:eb:32:05:6d:89:73:a2:4d:1f:19:4a:3d:92:50:02:25:
         e5:b7:ac:fb:06:07:ae:49:4a:01:8c:a9:86:75:88:42:54:35:
         9c:28:de:7c:42:cd:03:7e:15:0c:10:73:fc:2c:8f:c6:d5:3b:
         fb:32:80:0b:ee:09:b3:30:08:3d:48:7b:2d:1e:25:4d:46:5d:
         96:30:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:26:46 2026 by rpki-client