This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa
File:                     pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa (raw, json)
Hash identifier:          4nqaIka8KRsnuFWOYZD3ShbhJq0aiv3A2wx6tpUOgnk=
Subject key identifier:   A6:42:A0:69:76:6C:EF:E6:9E:2C:5E:D2:33:C2:50:65:3D:1E:2A:0E
Certificate issuer:       /CN=220f2767315875ec0efc2e255856f586a4ddf99c
Certificate serial:       019BFE4B0E1252623E49CF16616ADCFCF795
Authority key identifier: 22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa
Signing time:             Tue 27 Jan 2026 07:11:30 +0000
ROA not before:           Tue 27 Jan 2026 07:11:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197275
IP address blocks:        91.219.56.0/22 maxlen: 24
                          91.219.56.0/23 maxlen: 24
                          91.219.58.0/23 maxlen: 24
                          176.115.144.0/21 maxlen: 24
                          176.115.144.0/22 maxlen: 24
                          176.115.144.0/23 maxlen: 24
                          176.115.146.0/23 maxlen: 24
                          176.115.148.0/22 maxlen: 24
                          176.115.148.0/23 maxlen: 24
                          176.115.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:4b:0e:12:52:62:3e:49:cf:16:61:6a:dc:fc:f7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220f2767315875ec0efc2e255856f586a4ddf99c
        Validity
            Not Before: Jan 27 07:11:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a642a069766cefe69e2c5ed233c250653d1e2a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:47:de:ce:29:26:6b:fa:c4:84:1b:8f:9a:
                    5d:8b:31:e3:7f:5d:e3:85:75:68:84:0e:c2:60:0c:
                    03:27:2f:8b:ba:9e:d7:2e:15:1c:a1:35:45:0f:fa:
                    1c:3c:46:60:c7:0d:6f:9f:45:b8:3d:68:8b:08:be:
                    c7:02:93:92:db:a0:2c:19:69:ed:30:26:b5:b8:84:
                    9f:2f:43:d4:f5:cf:81:fa:4f:48:d0:c9:d1:e4:39:
                    dc:79:d3:90:0a:2d:b5:cc:6d:36:c8:dd:56:78:71:
                    83:d2:47:68:d8:f2:3a:6d:12:0b:d0:a0:43:56:39:
                    8c:03:bb:6e:cc:75:13:8e:a0:53:30:66:92:93:14:
                    60:02:57:c7:be:31:11:1c:04:f1:00:ef:be:e9:87:
                    a1:6d:9d:43:d6:6d:5c:78:be:ed:01:ff:84:94:19:
                    65:25:e6:4a:0e:27:35:57:b8:6c:63:9f:6d:c3:b8:
                    01:57:15:c8:ec:16:fd:28:8f:da:32:42:14:31:df:
                    c8:85:e1:68:bf:58:35:bf:d4:2e:33:62:4f:45:74:
                    24:5d:85:3c:f1:10:a8:3c:b3:42:be:1a:f6:49:00:
                    a5:c0:5f:7b:a8:8f:09:36:14:d5:dc:d5:2e:b6:2e:
                    69:f6:71:0f:7d:ef:c4:19:0b:69:36:7f:b6:a8:48:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:42:A0:69:76:6C:EF:E6:9E:2C:5E:D2:33:C2:50:65:3D:1E:2A:0E
            X509v3 Authority Key Identifier:
                keyid:22:0F:27:67:31:58:75:EC:0E:FC:2E:25:58:56:F5:86:A4:DD:F9:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/pkKgaXZs7-aeLF7SM8JQZT0eKg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e940a8-fd79-4e48-b12d-efbbb498fcb2/1/Ig8nZzFYdewO_C4lWFb1hqTd-Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.219.56.0/22
                  176.115.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:c8:17:99:30:64:b9:a9:b8:03:66:2d:03:0c:a3:c5:b0:
         85:1e:d5:04:0a:ca:de:3e:87:06:3f:a1:93:28:63:b5:48:52:
         cc:ae:14:f1:60:58:42:68:62:a2:58:34:f1:14:1b:07:2a:dd:
         1f:44:cd:dd:6f:61:2b:d3:64:b0:5a:cf:a9:0f:3a:d4:bd:a4:
         10:74:e3:9c:5a:82:23:6e:da:8b:29:e7:94:5d:a8:23:97:79:
         6d:ee:8c:57:61:47:54:01:e4:17:59:ea:a5:ff:0f:a0:8a:06:
         7d:fd:f1:dd:ad:e8:50:bd:0b:80:24:6a:6e:11:11:30:7a:04:
         86:69:37:2f:ad:7b:0a:a4:7c:7a:c8:76:17:de:a4:98:00:c1:
         d0:87:42:cf:2f:41:ce:b8:74:63:e2:71:5a:0e:a4:d7:86:2d:
         59:1a:33:46:fd:ab:66:40:68:88:d5:0c:ac:6a:f6:af:ce:59:
         76:e8:f5:18:fe:13:37:3b:16:ab:c0:5c:e1:4b:25:9e:09:e7:
         99:d2:9c:c8:27:38:88:e3:62:16:a9:c4:ae:bd:9e:c7:13:bc:
         72:0f:99:da:ac:3b:c5:c6:29:67:a7:38:8e:0d:92:0a:65:d0:
         1a:b2:f4:8e:b5:1a:c3:0e:1c:64:e4:32:9a:60:81:2b:93:f3:
         a7:20:0a:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZv+Sw4SUmI+Sc8WYWrc/PeVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMGYyNzY3MzE1ODc1ZWMwZWZjMmUyNTU4NTZmNTg2YTRk
ZGY5OWMwHhcNMjYwMTI3MDcxMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjQyYTA2OTc2NmNlZmU2OWUyYzVlZDIzM2MyNTA2NTNkMWUyYTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwtH3s4pJmv6xIQbj5pdizHjf13j
hXVohA7CYAwDJy+Lup7XLhUcoTVFD/ocPEZgxw1vn0W4PWiLCL7HApOS26AsGWnt
MCa1uISfL0PU9c+B+k9I0MnR5DncedOQCi21zG02yN1WeHGD0kdo2PI6bRIL0KBD
VjmMA7tuzHUTjqBTMGaSkxRgAlfHvjERHATxAO++6YehbZ1D1m1ceL7tAf+ElBll
JeZKDic1V7hsY59tw7gBVxXI7Bb9KI/aMkIUMd/IheFov1g1v9QuM2JPRXQkXYU8
8RCoPLNCvhr2SQClwF97qI8JNhTV3NUuti5p9nEPfe/EGQtpNn+2qEgoAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKZCoGl2bO/mnixe0jPCUGU9HioOMB8GA1UdIwQY
MBaAFCIPJ2cxWHXsDvwuJVhW9Yak3fmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWc4blp6RllkZXdPX0M0bFdGYjFocVRkLVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lOTQwYTgtZmQ3OS00ZTQ4LWIxMmQt
ZWZiYmI0OThmY2IyLzEvcGtLZ2FYWnM3LWFlTEY3U004SlFaVDBlS2c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lOTQwYTgtZmQ3OS00ZTQ4LWIxMmQtZWZiYmI0OThmY2Iy
LzEvSWc4blp6RllkZXdPX0M0bFdGYjFocVRkLVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9s4AwQD
sHOQMA0GCSqGSIb3DQEBCwUAA4IBAQCSpcgXmTBkuam4A2YtAwyjxbCFHtUECsre
PocGP6GTKGO1SFLMrhTxYFhCaGKiWDTxFBsHKt0fRM3db2Er02SwWs+pDzrUvaQQ
dOOcWoIjbtqLKeeUXagjl3lt7oxXYUdUAeQXWeql/w+gigZ9/fHdrehQvQuAJGpu
EREwegSGaTcvrXsKpHx6yHYX3qSYAMHQh0LPL0HOuHRj4nFaDqTXhi1ZGjNG/atm
QGiI1Qysavavzll26PUY/hM3OxarwFzhSyWeCeeZ0pzIJziI42IWqcSuvZ7HE7xy
D5narDvFxilnpziODZIKZdAasvSOtRrDDhxk5DKaYIErk/OnIAoX
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:14:57 2026 by rpki-client