This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/F0sSuH9iYHPrHq28J6vj4APvT6M.roa
File:                     F0sSuH9iYHPrHq28J6vj4APvT6M.roa (raw, json)
Hash identifier:          2FFuLU5ejEPJNZsPwPlVu1B2UXAql1qbkT9CH1KvKBQ=
Subject key identifier:   17:4B:12:B8:7F:62:60:73:EB:1E:AD:BC:27:AB:E3:E0:03:EF:4F:A3
Certificate issuer:       /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial:       019B7AC95B7F2DC2CC62A90191A623E03EDC
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/F0sSuH9iYHPrHq28J6vj4APvT6M.roa
Signing time:             Thu 01 Jan 2026 18:19:34 +0000
ROA not before:           Thu 01 Jan 2026 18:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47705
IP address blocks:        91.208.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:5b:7f:2d:c2:cc:62:a9:01:91:a6:23:e0:3e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
        Validity
            Not Before: Jan  1 18:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=174b12b87f626073eb1eadbc27abe3e003ef4fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:f6:30:80:26:cd:61:db:34:a4:dd:43:71:
                    89:62:cc:94:57:04:ea:36:85:89:48:61:fa:31:52:
                    f9:18:30:14:41:fe:a8:b9:d9:70:49:97:bc:63:b7:
                    d8:4f:80:66:e1:17:52:d4:a0:0e:8e:5f:e9:55:32:
                    3d:65:2a:c1:e7:5d:23:40:ea:fd:ef:f2:4a:f1:35:
                    d2:14:c6:a5:cc:2b:37:04:6c:7d:9e:26:2b:64:03:
                    65:ba:e8:61:4d:05:b9:8d:30:14:b0:fb:ac:3a:51:
                    78:c2:e8:fc:ab:7e:a6:5b:45:d0:d4:a7:69:be:cd:
                    b4:7f:89:3d:1f:d1:41:6b:f1:1f:b6:af:80:cf:9a:
                    32:e3:99:0f:38:07:90:44:a7:92:27:d2:9f:f3:ea:
                    27:d3:f2:40:ba:48:6c:48:fc:48:bf:16:d7:4c:14:
                    b4:91:1b:78:30:58:4a:56:d2:38:1c:62:27:92:c6:
                    4d:18:07:23:72:0c:38:e3:d2:b2:25:ec:00:1b:c3:
                    ab:ab:da:b0:07:78:33:4b:47:9d:63:1a:f5:3a:bb:
                    ee:4f:cc:f5:4f:21:a5:dc:b6:8b:1c:30:95:08:a6:
                    68:75:ca:38:98:ef:68:46:51:95:dd:91:88:dc:3b:
                    eb:3a:fa:e9:31:79:47:96:3a:58:70:8a:d5:32:aa:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4B:12:B8:7F:62:60:73:EB:1E:AD:BC:27:AB:E3:E0:03:EF:4F:A3
            X509v3 Authority Key Identifier:
                keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/F0sSuH9iYHPrHq28J6vj4APvT6M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:3b:a8:c0:18:1d:ac:69:d8:fb:7a:2b:41:71:a3:56:47:28:
         b6:ab:05:60:ff:c9:61:3a:e6:90:86:db:64:68:e5:de:44:41:
         f5:f7:e1:53:2c:87:b5:b0:e6:e1:fc:d9:90:e7:ea:eb:5e:dd:
         a8:10:4a:14:02:3f:3a:2a:a6:d6:ea:5d:df:91:bb:ae:b0:48:
         f3:8a:5d:0e:35:f3:40:61:38:3e:0a:0f:6e:37:45:4b:30:db:
         81:5c:b6:a4:60:11:cd:7c:07:e6:5c:81:51:07:1a:e2:7e:cc:
         7c:2f:bb:bf:1a:88:b1:e2:38:a0:d5:66:f1:3a:82:de:fe:7b:
         b9:68:6a:fb:1f:56:47:32:dc:59:1f:ae:ee:d1:03:08:1d:ee:
         ed:60:17:67:25:07:90:5d:3f:20:a9:50:23:e8:05:94:71:7c:
         54:87:cd:d5:20:d9:67:33:29:fc:56:9a:c6:a9:d1:a9:64:03:
         d6:ed:d7:ae:f6:d2:db:6f:6d:f1:9f:57:bb:40:57:97:48:ff:
         0c:71:3a:be:61:be:4b:f4:8a:01:dd:03:ab:1a:02:96:a9:5e:
         99:da:9d:14:ae:b6:07:1c:fb:7a:3d:1e:3b:f3:22:ac:81:65:
         43:08:aa:d4:ab:ce:91:c8:d5:58:6f:93:e1:92:e0:b9:fd:a7:
         f3:2f:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:18 2026 by rpki-client