This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/i1ntvJBaezDHPAZpp8Y-JI_0JNA.roa
File:                     i1ntvJBaezDHPAZpp8Y-JI_0JNA.roa (raw, json)
Hash identifier:          bf8Yh8/U34LlJItn2Vcebf7126J5F9Ajxt2zbhlA70Q=
Subject key identifier:   8B:59:ED:BC:90:5A:7B:30:C7:3C:06:69:A7:C6:3E:24:8F:F4:24:D0
Certificate issuer:       /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Certificate serial:       019B7B36F17DAEB8DBC619BF7DCA75202ECC
Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/i1ntvJBaezDHPAZpp8Y-JI_0JNA.roa
Signing time:             Thu 01 Jan 2026 20:19:16 +0000
ROA not before:           Thu 01 Jan 2026 20:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47903
IP address blocks:        91.208.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:f1:7d:ae:b8:db:c6:19:bf:7d:ca:75:20:2e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
        Validity
            Not Before: Jan  1 20:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b59edbc905a7b30c73c0669a7c63e248ff424d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:c5:18:0d:d9:ed:80:17:00:a0:14:b7:56:
                    3e:ca:6e:f1:53:3b:fd:ac:f3:a9:98:70:d5:5c:c8:
                    3e:aa:a3:08:12:eb:0d:de:53:31:d2:0e:b7:e2:0c:
                    21:13:eb:96:3f:f6:99:a5:de:3f:8a:27:14:9a:b4:
                    c0:d4:c5:0d:1b:6b:d5:e2:02:cc:0f:66:af:50:ff:
                    dd:9b:9a:98:df:47:5c:42:5e:22:6c:42:61:e3:8c:
                    e4:7c:cf:1c:5d:63:aa:cc:1f:6d:3f:5c:a0:1d:1a:
                    b4:fb:5b:3a:f7:2a:a6:4c:ee:3d:06:c1:ea:f8:f2:
                    e7:e3:ad:4a:6e:eb:36:28:96:60:e3:b8:f0:47:5a:
                    5b:70:ab:45:52:17:1e:eb:1e:cd:eb:dd:d3:75:44:
                    53:ba:72:32:0f:ca:09:1c:ba:d2:77:de:04:f2:aa:
                    4c:15:5c:1e:5b:c3:33:be:a0:90:f6:11:be:7c:bc:
                    dc:6c:68:34:00:13:c4:19:1b:9e:dc:88:8d:80:82:
                    9f:8f:96:b4:3f:74:a7:eb:d6:b2:fa:bb:bb:59:43:
                    a6:8b:6c:cd:08:01:65:60:ad:57:34:fc:91:68:6d:
                    13:53:aa:91:4e:9d:03:ac:56:56:77:a9:99:62:33:
                    42:8b:f8:03:e6:0a:61:38:cd:a6:1f:5a:67:01:4a:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:59:ED:BC:90:5A:7B:30:C7:3C:06:69:A7:C6:3E:24:8F:F4:24:D0
            X509v3 Authority Key Identifier:
                keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/i1ntvJBaezDHPAZpp8Y-JI_0JNA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:02:d9:db:ce:0e:dd:de:e1:50:84:32:34:e1:44:45:46:
         c6:e0:f9:50:14:84:88:59:33:8b:23:82:2d:68:c4:80:68:a8:
         8f:74:69:87:8b:99:6b:c4:5d:3c:82:68:04:0a:25:cf:10:a5:
         6b:2c:06:2f:3b:53:29:5d:f9:40:48:c5:6b:a6:71:aa:e1:f4:
         63:ce:ad:3a:49:25:06:e6:59:41:79:0e:ef:3c:3b:76:37:94:
         1f:03:c8:5b:0b:f2:eb:da:dd:a2:31:93:13:af:8c:5b:58:88:
         c8:41:48:cd:25:b2:eb:9c:8f:a3:28:20:b0:f0:ce:fc:d7:da:
         18:a3:d3:a2:e2:0b:df:18:b3:11:ee:82:e8:9d:da:bd:42:9c:
         74:1b:8a:c6:2d:89:70:d5:1a:fd:1e:84:6d:aa:3e:fe:ee:ee:
         6b:e5:42:48:69:1d:11:c7:3a:20:fe:c1:ac:59:da:45:bf:0e:
         7f:e1:0d:8e:1f:87:ff:d2:f5:f1:b7:37:b6:04:0d:e6:be:55:
         f5:e1:d7:7c:49:e1:9f:4f:41:30:e6:bb:cc:05:cf:4c:28:56:
         e8:8d:f6:cb:e0:9b:f6:49:b7:ce:39:fc:b7:09:dd:04:68:1f:
         aa:d0:98:8f:e1:60:7d:bb:02:ac:77:6a:e3:14:f0:75:d4:17:
         5f:84:59:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:23 2026 by rpki-client