This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/TIMsGWxsPv5h2_iID_QQlKqmZYM.roa
File:                     TIMsGWxsPv5h2_iID_QQlKqmZYM.roa (raw, json)
Hash identifier:          OsADRBUZFn2mcORT2OqggIjDRoO4AdiVe59zJET+ub8=
Subject key identifier:   4C:83:2C:19:6C:6C:3E:FE:61:DB:F8:88:0F:F4:10:94:AA:A6:65:83
Certificate issuer:       /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial:       019B7F157C93656CE2C2C833BCEADAF3A0F0
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/TIMsGWxsPv5h2_iID_QQlKqmZYM.roa
Signing time:             Fri 02 Jan 2026 14:21:12 +0000
ROA not before:           Fri 02 Jan 2026 14:21:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209913
IP address blocks:        91.199.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:7c:93:65:6c:e2:c2:c8:33:bc:ea:da:f3:a0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
        Validity
            Not Before: Jan  2 14:21:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c832c196c6c3efe61dbf8880ff41094aaa66583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:17:f2:06:e3:15:ec:5a:d9:bd:e3:ea:53:14:
                    94:b0:02:fc:e1:65:cb:00:10:2f:3a:8b:97:8a:ed:
                    0c:46:77:74:78:c8:f7:e6:74:fc:36:a7:ec:f9:c8:
                    c4:b3:0c:fc:fd:0e:17:7c:f0:94:fc:2c:af:65:47:
                    40:72:f0:e7:db:bd:7a:44:9b:04:63:88:99:61:51:
                    66:58:7d:98:89:b7:12:a3:5b:c1:71:8b:d0:bb:2d:
                    3b:8e:17:a8:5b:76:bc:14:e8:dd:aa:9d:ed:51:e8:
                    8b:08:06:84:79:ad:38:bd:6b:68:2a:42:d5:05:35:
                    a9:37:59:73:fd:e1:e2:22:19:80:89:8b:fd:fa:59:
                    e1:2f:b0:7a:10:7f:a6:16:42:68:f1:04:24:84:5d:
                    02:b0:99:77:5d:a4:39:6f:0f:b7:ad:e6:3a:03:f9:
                    c8:64:5b:4a:dc:9a:8e:ef:59:0f:3b:d6:4f:57:1d:
                    ee:00:61:b5:fe:48:01:84:5d:7e:58:b3:cf:4e:3c:
                    d4:78:66:d5:86:31:09:c3:3c:fc:8c:dd:65:5f:85:
                    78:a9:1f:c2:de:f9:58:ef:6d:66:77:05:14:49:9c:
                    9f:b7:8a:95:3d:35:6b:6d:fc:70:3c:60:c8:2f:0f:
                    46:f5:5b:97:7c:f4:49:b6:2e:5c:77:fa:3f:e5:d3:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:83:2C:19:6C:6C:3E:FE:61:DB:F8:88:0F:F4:10:94:AA:A6:65:83
            X509v3 Authority Key Identifier:
                keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/TIMsGWxsPv5h2_iID_QQlKqmZYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:60:21:64:5d:1e:c4:0c:91:31:b2:65:1d:9e:ba:35:dc:
         a8:6d:df:e8:f3:8a:0f:7b:f4:d2:24:94:4e:fe:b8:5b:48:99:
         64:1b:b7:b2:b4:4d:97:b4:f5:e9:bb:45:e7:20:b7:35:27:03:
         ab:0b:0c:cc:b1:27:93:25:0c:95:27:48:46:b8:ff:c7:5a:69:
         73:1e:fc:34:69:71:03:d4:54:81:04:9b:53:64:95:94:80:d5:
         46:72:c4:c3:f9:54:dd:f8:d6:e3:13:c4:47:e3:00:30:15:e3:
         ae:d8:64:47:e7:e4:9e:14:4f:84:ef:1d:40:ab:9e:0e:82:9f:
         1a:14:30:e8:70:5d:c4:89:90:b2:c3:ea:7c:92:bd:f5:f5:84:
         c1:94:10:94:ec:40:e1:cb:94:32:81:78:26:d7:12:5b:60:04:
         8b:f4:b3:21:4e:bf:00:df:e2:f3:97:3f:de:ed:19:dd:67:e7:
         35:2b:c3:83:b4:d7:6c:9f:50:29:c4:24:75:6d:02:d4:88:16:
         b2:28:b2:67:14:79:25:30:c2:65:1d:ec:37:aa:75:db:e4:f5:
         e8:95:c7:b3:39:77:7f:e1:41:b3:96:0a:03:ef:77:5b:8b:e6:
         7b:b5:3f:46:2d:f7:ff:9d:46:1c:bf:0d:62:72:bf:6b:47:54:
         4a:b2:99:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:32 2026 by rpki-client