This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/B9dQBunPgCxrLiUL8opifDj2bOM.roa
File:                     B9dQBunPgCxrLiUL8opifDj2bOM.roa (raw, json)
Hash identifier:          fWD90xCndzZ4WlkSeFBibUlZH38mskA/RfgbZjV3SFU=
Subject key identifier:   07:D7:50:06:E9:CF:80:2C:6B:2E:25:0B:F2:8A:62:7C:38:F6:6C:E3
Certificate issuer:       /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial:       019B77C66AFB74A8ECB036E1807AA69A75AC
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/B9dQBunPgCxrLiUL8opifDj2bOM.roa
Signing time:             Thu 01 Jan 2026 04:17:30 +0000
ROA not before:           Thu 01 Jan 2026 04:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39914
IP address blocks:        194.50.61.0/24 maxlen: 24
                          195.206.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:6a:fb:74:a8:ec:b0:36:e1:80:7a:a6:9a:75:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
        Validity
            Not Before: Jan  1 04:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07d75006e9cf802c6b2e250bf28a627c38f66ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:9f:c1:e6:4c:0b:2b:90:fb:7c:80:b0:23:
                    ef:73:9e:b7:be:de:ee:96:2b:6b:67:49:cb:63:b1:
                    13:f7:02:1a:32:24:13:e1:87:24:24:6b:52:cd:3f:
                    97:d0:d8:c4:0d:21:ea:94:c8:2e:1a:71:4c:41:f1:
                    e9:95:d6:6d:10:3b:af:23:2d:23:b0:f6:ee:d9:41:
                    35:58:cc:d4:42:94:65:e2:ce:0a:2d:1e:27:3d:56:
                    00:ab:28:b2:7a:9d:5b:09:dc:09:df:32:1c:ba:9f:
                    db:ae:66:d1:d8:68:07:e1:8a:38:21:f9:ba:6d:e4:
                    c7:5e:76:e5:27:7d:e0:50:93:3e:1e:f0:7e:76:0a:
                    0a:b5:f5:68:3d:c8:a6:07:d5:5c:fa:ac:fe:02:bc:
                    69:45:af:2c:03:e0:6b:a8:14:a2:64:77:b7:7a:d2:
                    ba:95:2e:9f:9e:eb:3b:ed:cd:1d:c7:57:ff:a2:5d:
                    5e:88:fb:1d:2d:5a:d4:49:dd:10:e0:22:fd:6e:cf:
                    6d:3c:af:28:31:88:d1:fd:d5:cb:68:90:35:e9:a8:
                    84:33:3c:6c:de:f1:10:33:64:43:67:d8:6b:69:b4:
                    5c:04:98:80:a6:98:9d:c3:d6:6e:e5:35:6f:06:f4:
                    87:12:4a:aa:74:7a:16:ac:0d:82:88:2a:1f:b2:2c:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D7:50:06:E9:CF:80:2C:6B:2E:25:0B:F2:8A:62:7C:38:F6:6C:E3
            X509v3 Authority Key Identifier:
                keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/B9dQBunPgCxrLiUL8opifDj2bOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.61.0/24
                  195.206.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:2c:4e:3c:9f:97:5c:d9:af:d7:0d:3d:df:4c:81:85:7d:4d:
         ea:7c:1b:92:dc:1c:c0:c8:87:29:9e:5e:ae:a3:45:75:8f:0e:
         03:13:1b:79:0c:65:1c:90:8d:9f:89:b1:4a:cb:d8:f3:f2:8e:
         71:f7:72:84:7f:a2:b8:3e:f5:91:b0:af:29:81:2c:82:be:86:
         c5:94:0e:c2:2a:0a:72:12:0c:c5:18:43:a7:6b:45:81:e3:61:
         9f:9c:5a:60:5e:62:a9:6c:71:80:a7:39:e4:d4:fd:0b:a1:e3:
         79:67:67:ae:10:2b:fc:bc:e4:2e:1b:c5:da:b7:3b:1c:43:ae:
         a6:39:8e:89:d2:51:0b:b6:c7:fd:7c:69:28:5f:79:e0:dc:c1:
         4d:e4:b6:e0:80:dc:13:60:e9:8e:f6:bb:4a:e4:e0:cf:ef:b2:
         ba:f8:6c:e1:15:cc:c2:b6:8d:22:50:09:ce:0f:73:46:4c:bb:
         f2:f5:3a:d0:80:27:0c:6a:f8:17:7c:42:bf:c3:e2:5a:2a:bf:
         f5:08:4f:58:ac:7e:f8:db:3f:4a:c2:fe:4c:52:d8:62:e4:b6:
         63:9d:d4:c4:ba:bd:73:99:3e:4a:d2:f0:e0:1c:1b:1d:c5:c2:
         be:ae:d9:3b:76:88:82:a2:0e:f9:75:24:b5:af:54:ec:85:5a:
         ab:ca:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:40 2026 by rpki-client