This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/gHMMMWkWSCRAZd1J-595ETu4GXM.roa
File:                     gHMMMWkWSCRAZd1J-595ETu4GXM.roa (raw, json)
Hash identifier:          6RcYJsi4dqgKujLAkFe++oNBxFNAvLOZbGFMikg7LtU=
Subject key identifier:   80:73:0C:31:69:16:48:24:40:65:DD:49:FB:9F:79:11:3B:B8:19:73
Certificate issuer:       /CN=a006ca06965bee681c3531b426b599a401e1a5a4
Certificate serial:       019B7A5B898641BAAE5B617F6F77373255EA
Authority key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/gHMMMWkWSCRAZd1J-595ETu4GXM.roa
Signing time:             Thu 01 Jan 2026 16:19:37 +0000
ROA not before:           Thu 01 Jan 2026 16:19:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199040
IP address blocks:        91.216.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:89:86:41:ba:ae:5b:61:7f:6f:77:37:32:55:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a006ca06965bee681c3531b426b599a401e1a5a4
        Validity
            Not Before: Jan  1 16:19:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=80730c31691648244065dd49fb9f79113bb81973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:45:68:d1:97:f7:89:b8:8d:9e:be:91:42:c8:
                    a1:b1:39:66:ad:09:3f:c1:1e:d6:c1:ac:cd:ed:2c:
                    39:5e:34:d1:19:bf:54:91:61:2e:dd:1e:06:fa:b9:
                    10:8f:f1:67:7c:dd:4f:0d:57:6e:f1:0a:1d:94:19:
                    d3:e1:bf:f8:8f:cc:8d:ef:61:ee:e8:52:e7:25:1f:
                    6d:f1:a8:ca:68:9f:47:17:3a:08:c4:fd:da:d5:d7:
                    18:dd:d1:df:78:c7:cb:bd:f7:b6:86:87:ab:bd:c3:
                    a2:1e:39:8d:a6:54:11:5a:7f:11:5f:03:18:62:0b:
                    8c:3c:6d:75:5d:dc:75:6e:10:e2:8b:de:14:55:e8:
                    b6:c3:ee:12:a7:01:f7:33:d0:3a:b7:ab:a9:a4:4f:
                    8e:b6:34:52:44:cf:fd:d1:06:a7:79:ec:a0:3c:7d:
                    28:17:f2:59:45:70:93:ae:8d:85:83:cd:14:ed:13:
                    7d:35:8f:f4:4c:48:d9:a2:c8:9b:3c:34:12:da:b1:
                    c1:e5:e0:42:51:21:e5:e2:ef:9e:ec:49:4a:4d:7c:
                    06:d7:df:f9:a6:b8:83:93:54:49:7d:69:21:cf:89:
                    b9:c8:a3:ce:4b:d7:c5:ee:fb:63:08:b8:c5:a7:c5:
                    80:30:3f:48:89:6c:f0:23:13:45:dc:b7:d5:82:da:
                    f6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:73:0C:31:69:16:48:24:40:65:DD:49:FB:9F:79:11:3B:B8:19:73
            X509v3 Authority Key Identifier:
                keyid:A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/gHMMMWkWSCRAZd1J-595ETu4GXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:46:e2:b9:ff:a2:bb:e4:a3:d2:c1:e2:c5:53:1b:89:da:0b:
         37:dc:3d:3a:1a:13:4d:b2:b5:04:35:ca:c7:1b:f3:04:d5:f0:
         21:29:2b:ce:5e:d4:41:f7:c6:dd:f7:e3:df:18:c2:25:87:ea:
         c8:48:da:98:df:87:bb:11:e3:b3:92:16:70:94:8c:41:54:d4:
         48:62:fa:2d:2c:02:c6:6c:38:2d:96:23:09:75:fa:dc:06:15:
         3a:2a:48:bc:8c:1a:c9:98:e5:d9:1c:f0:d3:c9:80:a6:68:57:
         4f:0d:f4:e3:ab:7a:f1:3f:d4:93:12:db:80:ef:5e:81:db:a7:
         d0:f4:63:d5:d7:a0:b9:06:24:44:58:83:99:56:9b:80:9d:4d:
         b7:e1:ad:c7:ba:9c:0d:0f:58:5b:c3:8d:17:2f:1b:36:33:68:
         cc:6f:e3:e6:92:3c:b5:e1:b2:8d:cd:47:01:af:55:9e:55:21:
         ab:15:eb:59:5c:c7:61:ee:9e:ed:8f:13:3b:63:01:b4:50:cd:
         0f:1e:ff:72:8d:ef:04:14:3b:9c:55:68:2e:20:3e:05:cd:39:
         67:69:56:86:ca:b1:bc:d1:33:b5:8f:1c:0a:cf:7e:db:ee:63:
         b5:d5:b4:a4:1a:d2:65:7e:4b:c1:8c:1a:73:35:be:f4:e5:2d:
         30:12:32:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6W4mGQbquW2F/b3c3MlXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMDZjYTA2OTY1YmVlNjgxYzM1MzFiNDI2YjU5OWE0MDFl
MWE1YTQwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDczMGMzMTY5MTY0ODI0NDA2NWRkNDlmYjlmNzkxMTNiYjgxOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Vo0Zf3ibiNnr6RQsihsTlmrQk/
wR7WwazN7Sw5XjTRGb9UkWEu3R4G+rkQj/FnfN1PDVdu8QodlBnT4b/4j8yN72Hu
6FLnJR9t8ajKaJ9HFzoIxP3a1dcY3dHfeMfLvfe2hoervcOiHjmNplQRWn8RXwMY
YguMPG11Xdx1bhDii94UVei2w+4SpwH3M9A6t6uppE+OtjRSRM/90QaneeygPH0o
F/JZRXCTro2Fg80U7RN9NY/0TEjZosibPDQS2rHB5eBCUSHl4u+e7ElKTXwG19/5
priDk1RJfWkhz4m5yKPOS9fF7vtjCLjFp8WAMD9IiWzwIxNF3LfVgtr21wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBzDDFpFkgkQGXdSfufeRE7uBlzMB8GA1UdIwQY
MBaAFKAGygaWW+5oHDUxtCa1maQB4aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0FiS0JwWmI3bWdjTlRHMEpyV1pwQUhocGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83ZTJiMGEtYThlZC00N2I3LTlkNzQt
YWI5NzVmN2QzNTMzLzEvZ0hNTU1Xa1dTQ1JBWmQxSi01OTVFVHU0R1hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi83ZTJiMGEtYThlZC00N2I3LTlkNzQtYWI5NzVmN2QzNTMz
LzEvb0FiS0JwWmI3bWdjTlRHMEpyV1pwQUhocGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gwMA0G
CSqGSIb3DQEBCwUAA4IBAQC1RuK5/6K75KPSweLFUxuJ2gs33D06GhNNsrUENcrH
G/ME1fAhKSvOXtRB98bd9+PfGMIlh+rISNqY34e7EeOzkhZwlIxBVNRIYvotLALG
bDgtliMJdfrcBhU6Kki8jBrJmOXZHPDTyYCmaFdPDfTjq3rxP9STEtuA716B26fQ
9GPV16C5BiREWIOZVpuAnU234a3HupwND1hbw40XLxs2M2jMb+Pmkjy14bKNzUcB
r1WeVSGrFetZXMdh7p7tjxM7YwG0UM0PHv9yje8EFDucVWguID4FzTlnaVaGyrG8
0TO1jxwKz37b7mO11bSkGtJlfkvBjBpzNb705S0wEjJh
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:22 2026 by rpki-client