This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/ElYKGJbVCeO4nsMvf9tBERFCNgM.roa
File:                     ElYKGJbVCeO4nsMvf9tBERFCNgM.roa (raw, json)
Hash identifier:          cWN/smFbi1ZXWCehyRRWo6Eskyvhd6DZroKP2osgc5k=
Subject key identifier:   12:56:0A:18:96:D5:09:E3:B8:9E:C3:2F:7F:DB:41:11:11:42:36:03
Certificate issuer:       /CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
Certificate serial:       019B7FF05B83B637D769A59257F7C5C0838A
Authority key identifier: 0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/ElYKGJbVCeO4nsMvf9tBERFCNgM.roa
Signing time:             Fri 02 Jan 2026 18:20:17 +0000
ROA not before:           Fri 02 Jan 2026 18:20:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197916
IP address blocks:        91.228.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f0:5b:83:b6:37:d7:69:a5:92:57:f7:c5:c0:83:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e280e5bf0970c733cc34bc1be7926759ac31ded
        Validity
            Not Before: Jan  2 18:20:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=12560a1896d509e3b89ec32f7fdb411111423603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:26:bb:34:a5:c6:e1:32:c0:a3:c1:7b:4c:f5:
                    a4:4e:2c:d0:b9:00:6a:83:9e:87:bf:d7:ad:66:43:
                    90:f3:46:d4:c4:68:70:a7:1f:37:b5:58:8a:43:95:
                    0b:c8:9a:37:a9:75:0b:4b:98:c5:5a:50:cf:4d:ff:
                    4a:0e:57:5a:c0:fe:1d:4b:6b:07:10:30:39:b8:61:
                    ed:4f:12:6e:be:32:23:5a:41:8e:e1:c9:70:cd:cc:
                    f8:4b:2c:c1:bb:78:40:bd:92:af:dc:5c:8d:a6:9c:
                    22:83:da:ea:f3:1e:d6:ee:f1:42:ed:d5:05:05:d0:
                    21:51:4b:02:40:e2:a7:a8:58:13:3f:32:a5:30:c9:
                    f2:a9:b7:8b:08:c4:0b:0a:35:b7:0f:c5:0d:fc:5b:
                    12:51:dd:53:d0:2f:28:12:af:7a:0a:de:cc:dd:9d:
                    2f:b1:20:f9:28:23:7a:68:0d:03:c0:6f:fe:05:cb:
                    53:65:a3:55:b4:29:53:52:1c:88:92:2d:54:e8:5e:
                    f4:c4:4c:2f:b2:af:90:7c:4f:1e:a5:60:0d:26:cb:
                    ad:9d:40:8e:c0:54:9f:42:28:fa:f3:f8:bc:fb:41:
                    a6:20:86:d8:96:71:0d:52:5f:2c:9c:7d:9d:e0:f8:
                    a2:3e:e0:47:18:fe:dd:4a:5d:c3:70:0a:5d:7f:fd:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:56:0A:18:96:D5:09:E3:B8:9E:C3:2F:7F:DB:41:11:11:42:36:03
            X509v3 Authority Key Identifier:
                keyid:0E:28:0E:5B:F0:97:0C:73:3C:C3:4B:C1:BE:79:26:75:9A:C3:1D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigOW_CXDHM8w0vBvnkmdZrDHe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/ElYKGJbVCeO4nsMvf9tBERFCNgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/71f0c3-27df-46b8-895a-36583c165dc9/1/DigOW_CXDHM8w0vBvnkmdZrDHe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:6b:4a:84:79:eb:d8:bd:f7:7b:43:0f:6e:90:dc:db:ab:
         8b:ec:f4:83:54:ee:6d:3c:2a:bc:e7:de:07:58:46:39:08:84:
         21:25:a1:1a:20:f1:90:57:a8:b2:8c:b8:07:e0:5e:41:e4:b8:
         46:fb:c2:b1:be:fe:83:1f:1a:05:22:da:ff:db:89:a9:ba:b1:
         75:65:c6:28:3b:81:de:d6:a3:05:53:11:c5:86:97:25:39:fa:
         36:8a:da:37:f6:e7:1a:36:bb:00:02:4a:7d:7e:c3:b4:58:7b:
         f5:73:dd:b3:7b:1e:66:9e:c9:73:52:7e:d6:a0:b5:eb:23:4a:
         8a:63:e5:7c:e2:07:1d:3b:99:6b:38:d3:b3:61:57:e9:9b:90:
         d2:4f:a6:fc:a9:78:6d:f9:ce:4c:0f:37:d8:6d:34:36:f4:5d:
         3e:93:39:2d:f2:b2:04:5d:a0:ae:37:f1:7b:a9:da:df:f0:3f:
         45:c0:6d:41:58:6d:b2:f6:e2:8c:fd:30:ee:fd:73:c6:82:53:
         8a:05:1b:b8:86:3a:1c:e7:47:e7:04:d1:90:46:60:a4:17:08:
         f0:d6:72:5e:6b:3d:0d:08:d5:ec:62:fa:84:f6:99:f7:4a:8d:
         0c:47:c0:79:db:cc:eb:c3:75:d1:74:45:e9:ae:0b:22:5e:bc:
         99:03:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:51 2026 by rpki-client