This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/7AUQmk1i8qtjdruOjZMPpBTiL6c.roa
File:                     7AUQmk1i8qtjdruOjZMPpBTiL6c.roa (raw, json)
Hash identifier:          q33FWL8mHM8VvfHdKdh+6eQHgq4qLKkzK579GRNQTE8=
Subject key identifier:   EC:05:10:9A:4D:62:F2:AB:63:76:BB:8E:8D:93:0F:A4:14:E2:2F:A7
Certificate issuer:       /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial:       019B7BA3E91B20802CF7B15B51596BCC036C
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/7AUQmk1i8qtjdruOjZMPpBTiL6c.roa
Signing time:             Thu 01 Jan 2026 22:18:17 +0000
ROA not before:           Thu 01 Jan 2026 22:18:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47772
IP address blocks:        91.208.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:e9:1b:20:80:2c:f7:b1:5b:51:59:6b:cc:03:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
        Validity
            Not Before: Jan  1 22:18:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec05109a4d62f2ab6376bb8e8d930fa414e22fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6d:9a:c5:7f:0f:ad:64:61:c2:59:d0:28:7e:
                    3c:dd:f9:9f:36:2b:d2:f5:61:96:2d:45:d2:34:ec:
                    50:5a:65:ae:f9:13:90:b8:f2:17:22:a8:bc:ce:0a:
                    22:b3:2b:8b:54:1a:de:97:64:c8:32:0e:ef:8c:86:
                    cf:31:56:b8:ec:e2:14:10:e8:4c:27:19:00:2d:7f:
                    ad:d5:31:dd:e5:67:d8:e8:15:b6:a5:8c:c4:e6:e2:
                    08:49:f6:8d:3e:38:4f:62:77:6b:f5:e0:c8:db:13:
                    27:11:5a:43:ee:8f:ab:87:96:67:a7:c0:fa:d1:42:
                    3f:cd:af:b4:50:10:b8:65:37:d0:8d:79:e4:8f:a9:
                    bc:a6:01:d5:9a:6b:5c:15:5c:43:42:17:2c:ee:98:
                    f6:9e:6f:49:34:da:2a:f3:c0:b3:e1:86:25:fd:5a:
                    84:5a:29:e9:00:24:f0:2a:97:3b:f1:7b:35:84:67:
                    28:ba:ed:6b:32:18:2d:7b:bf:c1:b2:85:dc:1b:7d:
                    33:8a:f7:c9:50:6b:ab:61:7f:a7:67:0f:3e:e8:37:
                    f0:d1:d3:c2:b9:0b:81:4b:83:3e:7e:11:cc:e7:eb:
                    10:d8:b8:1b:02:39:d5:3b:24:9e:ee:b2:ed:30:c1:
                    7c:88:89:94:73:f2:3e:81:82:0a:52:b8:c1:15:c1:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:05:10:9A:4D:62:F2:AB:63:76:BB:8E:8D:93:0F:A4:14:E2:2F:A7
            X509v3 Authority Key Identifier:
                keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/7AUQmk1i8qtjdruOjZMPpBTiL6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ce:0d:9f:5e:c8:5b:ba:ab:7d:05:6e:33:5f:d4:e8:75:66:
         cd:89:c4:62:f8:b0:6a:5d:4e:11:61:77:ab:fc:24:1c:a3:90:
         67:7a:ac:34:17:59:15:11:ba:ca:9f:7c:fe:9f:31:15:56:df:
         00:3b:4b:04:8a:84:06:67:87:b4:c8:c6:ac:86:c0:22:0f:34:
         73:dc:b8:a1:67:d3:75:df:f8:a3:e6:61:07:78:72:7a:5e:26:
         62:5a:5b:ac:2b:8c:80:27:c5:7d:b7:67:48:7c:39:03:9f:e5:
         11:6e:20:3b:77:07:2a:23:50:e4:80:5a:4e:65:ca:9f:6c:b8:
         aa:e6:5b:32:b0:71:88:b2:a7:cc:bb:cb:f8:fe:84:62:f6:69:
         e7:83:77:61:c3:c3:75:e3:46:28:72:b6:e4:d0:6d:5e:27:15:
         ee:7c:2d:b0:99:1b:8b:3d:df:a9:ac:73:f2:69:56:46:8f:ad:
         cb:58:7a:fb:32:ff:90:80:43:11:83:05:2e:df:41:06:f1:45:
         df:3b:32:d3:01:dd:c8:3d:23:e6:1f:ac:7d:47:32:2f:8d:73:
         95:42:81:0e:df:23:d5:5e:bc:7f:a6:dc:49:d7:cf:27:28:3d:
         cb:24:48:a5:83:51:c1:94:0d:87:dd:4f:a4:b8:41:1f:7b:ea:
         af:81:93:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:31:25 2026 by rpki-client