This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/MSRVEgtVF36hLTRoVhlT4zWJzuw.roa
File:                     MSRVEgtVF36hLTRoVhlT4zWJzuw.roa (raw, json)
Hash identifier:          qRuvX1aY6QEfG+9q3uLQWZib4GCEJv3j+Wk3Azr+3ko=
Subject key identifier:   31:24:55:12:0B:55:17:7E:A1:2D:34:68:56:19:53:E3:35:89:CE:EC
Certificate issuer:       /CN=0b69087cef600358ef98c1c97da07234dfd0e037
Certificate serial:       019B797ED4F52E8C9AD132AA0690B69BA508
Authority key identifier: 0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/MSRVEgtVF36hLTRoVhlT4zWJzuw.roa
Signing time:             Thu 01 Jan 2026 12:18:33 +0000
ROA not before:           Thu 01 Jan 2026 12:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56926
IP address blocks:        91.229.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:d4:f5:2e:8c:9a:d1:32:aa:06:90:b6:9b:a5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b69087cef600358ef98c1c97da07234dfd0e037
        Validity
            Not Before: Jan  1 12:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=312455120b55177ea12d3468561953e33589ceec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7a:ed:23:91:fc:98:3e:8b:44:a4:d3:0e:cd:
                    d6:b8:0b:fe:8d:49:ac:f5:3a:78:05:0f:e5:85:ea:
                    7e:ad:ad:1a:13:21:6f:f5:52:ee:09:71:a3:73:9f:
                    5e:44:32:24:81:26:a5:b5:f9:ff:43:7f:87:17:af:
                    2d:62:dc:db:fc:0a:b8:41:b6:59:6c:8b:00:d5:62:
                    47:2e:f4:b7:bd:c1:33:f1:d3:94:16:c1:08:5e:36:
                    1e:2b:5c:5d:9a:3d:88:b2:b4:36:b2:a3:b9:14:f5:
                    bf:4c:69:8d:f1:81:d2:b7:53:7f:e8:06:fb:1c:e9:
                    ee:94:69:58:69:6a:3c:c6:00:22:d7:50:bf:75:f0:
                    b2:d0:68:e7:f6:31:ce:d2:07:56:c5:2c:9a:4d:68:
                    05:05:50:fc:be:07:af:11:7d:49:b1:1c:2e:d5:71:
                    18:2d:02:c7:5d:dd:b5:69:c0:db:9a:af:9a:5f:9b:
                    bc:ba:b6:9a:fa:2e:ad:06:c3:08:02:49:47:bf:d7:
                    03:fd:c2:b6:f9:2b:97:e3:1a:f9:55:84:55:d9:5f:
                    0b:5a:a9:a1:34:69:15:e5:ce:7d:e6:84:d4:18:9b:
                    f6:36:50:27:c0:bf:34:5b:91:0d:2e:44:d4:86:ef:
                    72:f4:fd:13:90:b7:f8:d7:c9:03:0c:39:2e:7a:c8:
                    f6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:24:55:12:0B:55:17:7E:A1:2D:34:68:56:19:53:E3:35:89:CE:EC
            X509v3 Authority Key Identifier:
                keyid:0B:69:08:7C:EF:60:03:58:EF:98:C1:C9:7D:A0:72:34:DF:D0:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/MSRVEgtVF36hLTRoVhlT4zWJzuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/585e61-9a49-45a9-91f7-df8adad897bf/1/C2kIfO9gA1jvmMHJfaByNN_Q4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:da:af:c5:da:cc:d7:39:97:8e:df:da:f7:31:4b:0e:6e:75:
         4d:14:3d:f9:3e:2b:56:86:b6:a3:15:17:14:c0:94:ce:e0:a8:
         63:78:af:83:71:2e:ec:18:de:8d:60:86:dc:e5:94:1d:9d:0c:
         cb:42:a6:78:6b:03:9b:f4:78:01:34:6a:52:2f:77:d0:0a:f2:
         a1:68:29:7a:8e:88:71:ad:98:c5:a9:d6:ba:33:00:eb:c9:91:
         e8:26:c6:83:69:0c:db:76:c5:b6:84:b3:73:a4:e7:d0:28:e8:
         45:44:7e:94:97:d6:c3:7f:c9:39:ac:08:87:b4:9e:ee:2e:99:
         93:84:c3:c2:cc:83:5c:35:43:c9:18:a4:df:b8:e6:48:7b:df:
         c1:e6:0e:cd:2f:2e:7e:96:29:5f:60:ce:78:2f:7d:30:3d:35:
         1a:51:2d:02:d5:01:02:a9:2b:01:38:c8:94:42:6a:aa:89:1c:
         30:98:b9:05:92:bb:7a:43:7c:72:7b:2b:44:70:1e:bc:33:b0:
         8b:9c:3e:e3:b4:e0:b1:14:96:61:b8:43:9d:ad:af:01:50:79:
         6d:e4:67:e8:ee:f0:50:8e:02:11:cf:96:b2:67:a4:db:39:f4:
         e6:2e:d0:64:ed:6c:e2:c1:6a:92:53:f7:9c:96:3c:e6:02:3e:
         b9:1b:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:27 2026 by rpki-client