This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/rbQLRQQ57T1QHNETgtQKDJDxvVs.roa
File:                     rbQLRQQ57T1QHNETgtQKDJDxvVs.roa (raw, json)
Hash identifier:          LJ4g0UoBULTP2DaQsUUzIZ3AibWkiJwfnok2tkxhGgI=
Subject key identifier:   AD:B4:0B:45:04:39:ED:3D:50:1C:D1:13:82:D4:0A:0C:90:F1:BD:5B
Certificate issuer:       /CN=7186e64b5823c4c61287858d9770c70df706b0cc
Certificate serial:       019B7C12439A34352F216445C9FF1754DFEB
Authority key identifier: 71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/rbQLRQQ57T1QHNETgtQKDJDxvVs.roa
Signing time:             Fri 02 Jan 2026 00:18:50 +0000
ROA not before:           Fri 02 Jan 2026 00:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30839
IP address blocks:        91.213.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:43:9a:34:35:2f:21:64:45:c9:ff:17:54:df:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7186e64b5823c4c61287858d9770c70df706b0cc
        Validity
            Not Before: Jan  2 00:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=adb40b450439ed3d501cd11382d40a0c90f1bd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:3e:0d:78:37:9a:a3:29:07:17:61:bb:35:
                    15:73:44:e1:22:6a:3d:68:d0:b5:d0:c4:69:03:33:
                    22:77:ac:2d:ad:51:71:5c:90:5f:df:f9:0f:a1:89:
                    98:dd:4e:15:4c:75:55:e8:2a:aa:a9:37:ea:1e:c7:
                    11:9a:20:8c:b1:2b:ae:2d:2c:f5:08:d9:30:1f:ff:
                    5a:f2:6f:7b:cd:5a:9f:28:90:ac:58:1e:3e:dc:52:
                    57:57:e7:b6:b2:bb:a7:14:12:4a:3f:64:44:4a:2f:
                    1d:9c:35:27:a9:4f:4c:3c:26:fc:a2:db:66:3d:db:
                    13:01:1e:ef:3b:34:2f:8b:91:7b:fd:58:31:a8:5b:
                    db:51:9f:66:ac:cb:5a:a2:54:15:80:7c:83:10:29:
                    16:eb:1e:cd:da:e7:be:5a:28:ad:ef:67:dd:ea:bd:
                    83:a4:2c:5e:17:ee:96:95:e3:6d:0c:d0:13:fe:f1:
                    83:5a:d8:33:9f:6a:47:00:96:71:8c:f9:da:fb:86:
                    6d:34:14:a3:98:51:63:a8:3d:13:a4:e1:4f:37:44:
                    d9:6c:e5:f0:13:34:b9:23:33:46:14:ed:e3:c0:c7:
                    b9:95:4c:67:06:8a:21:00:9d:e2:31:3a:26:4b:be:
                    48:1a:8a:a9:01:ca:d6:f2:42:04:19:08:bb:b9:89:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B4:0B:45:04:39:ED:3D:50:1C:D1:13:82:D4:0A:0C:90:F1:BD:5B
            X509v3 Authority Key Identifier:
                keyid:71:86:E6:4B:58:23:C4:C6:12:87:85:8D:97:70:C7:0D:F7:06:B0:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYbmS1gjxMYSh4WNl3DHDfcGsMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/rbQLRQQ57T1QHNETgtQKDJDxvVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a20963-fad7-4e34-bf1e-658b800a5d61/1/cYbmS1gjxMYSh4WNl3DHDfcGsMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.213.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:0f:eb:21:3f:14:ac:c6:ef:9d:89:38:37:c4:a1:9d:35:
         f0:10:96:8d:b7:24:4a:54:ab:69:d9:8f:f3:11:f0:7a:12:33:
         93:27:a6:3a:09:0a:1e:df:50:d5:06:21:0d:ea:5f:94:3b:2f:
         2b:62:16:c8:4f:18:cf:76:69:bc:0b:6c:c5:22:7e:24:1b:2a:
         0f:19:06:43:74:a7:1f:5f:96:fa:f8:36:60:3c:e3:2b:19:1a:
         bc:35:b6:1b:8e:2b:b9:fc:df:6f:b9:92:58:d7:ec:52:af:05:
         c5:38:dc:b2:34:e5:51:10:fa:28:cd:86:9b:16:3e:f1:c5:e1:
         c3:7a:cb:84:46:51:6f:fc:48:74:db:ff:75:1f:52:27:84:20:
         ae:93:1e:3a:f8:08:57:d6:19:a9:47:ff:cb:b2:9d:f8:33:99:
         fe:71:4c:90:19:87:c3:ab:c3:eb:d0:c7:4b:51:cf:4a:eb:f5:
         ae:6a:9c:13:d6:4e:e7:b4:08:b1:1e:48:47:e0:fd:0c:32:f6:
         b4:d1:86:ac:8c:60:68:d8:3f:3d:84:b9:ad:1a:28:a4:f5:18:
         53:2a:eb:01:26:4a:9d:b5:df:e7:a5:44:05:ac:89:fb:c0:a6:
         e8:16:17:0d:5c:d4:43:a3:b7:77:cd:0c:a8:bb:bd:10:6b:98:
         a5:c7:5a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:00:28 2026 by rpki-client