This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/C4TjoCiDAIHZJLpHspSmOdt85Xg.roa
File:                     C4TjoCiDAIHZJLpHspSmOdt85Xg.roa (raw, json)
Hash identifier:          A/LLN5HhUXOKlpiuzUmJmRk4WVYFkDvzFOwGpbwT6DU=
Subject key identifier:   0B:84:E3:A0:28:83:00:81:D9:24:BA:47:B2:94:A6:39:DB:7C:E5:78
Certificate issuer:       /CN=039916dc890f08fe55c75bb4439d6016704b7a61
Certificate serial:       019B7A5B3BABCBB8A7AC18DA839B694A1731
Authority key identifier: 03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/C4TjoCiDAIHZJLpHspSmOdt85Xg.roa
Signing time:             Thu 01 Jan 2026 16:19:17 +0000
ROA not before:           Thu 01 Jan 2026 16:19:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51232
IP address blocks:        91.216.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:3b:ab:cb:b8:a7:ac:18:da:83:9b:69:4a:17:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039916dc890f08fe55c75bb4439d6016704b7a61
        Validity
            Not Before: Jan  1 16:19:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b84e3a028830081d924ba47b294a639db7ce578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e3:9b:e4:7e:1c:fc:6d:fc:5a:c6:f5:73:d8:
                    4b:0e:a9:52:87:5e:06:cd:41:91:84:57:34:e3:bf:
                    fd:47:c7:b6:f0:a2:f3:d8:ed:2a:a3:76:a8:b1:b6:
                    b3:75:f8:4d:95:8f:15:f3:21:a8:ed:46:56:69:81:
                    74:c8:01:45:75:a8:4a:2c:c0:d8:a1:fb:48:a3:25:
                    66:96:f2:ab:89:c1:3d:bd:d5:e9:07:60:95:42:64:
                    8e:8b:55:cd:d8:91:d3:a4:54:f1:b4:f7:b4:21:c2:
                    6f:03:20:78:63:65:78:08:0a:50:b5:48:81:96:ef:
                    d4:e6:a4:91:13:23:40:04:e1:2a:ab:d0:92:8b:7c:
                    90:65:29:d9:ce:da:43:ae:8c:50:0f:cd:c6:81:5e:
                    bc:51:61:17:b2:90:bd:be:9e:4c:bc:f4:c9:68:d1:
                    f2:da:5d:d9:6a:8f:a7:1b:dc:ca:c3:f2:8a:8f:74:
                    42:fc:00:2a:6b:19:83:42:4b:22:75:a5:9c:61:47:
                    d0:3c:93:6c:c0:65:19:52:d1:21:f0:87:21:7d:31:
                    b0:23:62:6c:1e:d3:cd:0a:3e:64:06:45:6c:b9:2f:
                    63:8a:6b:1c:52:74:94:93:3a:a5:25:70:24:58:cb:
                    06:80:2a:86:e0:4b:9b:ac:f8:56:59:a1:4c:b8:7a:
                    ce:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:84:E3:A0:28:83:00:81:D9:24:BA:47:B2:94:A6:39:DB:7C:E5:78
            X509v3 Authority Key Identifier:
                keyid:03:99:16:DC:89:0F:08:FE:55:C7:5B:B4:43:9D:60:16:70:4B:7A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5kW3IkPCP5Vx1u0Q51gFnBLemE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/C4TjoCiDAIHZJLpHspSmOdt85Xg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6bb444-c0ac-4060-80d5-e3d427211a83/1/A5kW3IkPCP5Vx1u0Q51gFnBLemE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:2e:25:6e:b3:6f:ad:a1:19:85:29:fa:da:4a:fb:ee:23:6b:
         a7:8b:cf:ff:a1:12:20:b3:07:dc:56:e9:78:06:9e:ac:8c:a4:
         ff:95:a9:31:9d:05:d5:dc:53:bc:c8:a6:97:ea:fc:5e:ba:62:
         19:5d:e7:2f:03:82:be:22:89:c3:51:80:70:6d:3f:13:c4:58:
         84:2f:e6:02:95:99:a9:88:04:d4:80:bd:bb:7b:dd:12:0e:a6:
         8b:ee:92:02:b6:cf:e1:c8:e1:a4:fd:53:d4:e0:46:b7:7f:b8:
         e9:4a:72:9a:fc:08:53:85:7f:d9:72:50:02:03:f8:a4:15:22:
         e6:00:8e:19:86:88:41:56:c6:2c:5d:1b:47:65:e9:e7:a2:d8:
         7b:a1:8a:43:e9:ef:b9:fd:de:5a:c2:2a:4d:d3:b5:07:43:3b:
         d5:30:b7:43:24:9f:78:cf:ad:c4:2f:25:7f:32:a1:d3:42:86:
         98:55:5a:d4:48:07:f7:eb:b2:5f:71:a3:71:6d:56:e9:76:73:
         2b:98:cf:4b:8d:04:66:ef:a5:04:25:22:be:cd:a7:da:87:8c:
         9d:8c:b7:c4:ff:5f:3b:03:00:5a:f3:3d:07:75:5f:1f:58:a8:
         18:dc:b9:f1:83:dc:2a:24:f8:0e:0f:6c:de:98:b6:77:f2:36:
         e0:9c:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:23 2026 by rpki-client