This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/uW6MqNVytVrssfUBxC2o5Ci36m0.roa
File:                     uW6MqNVytVrssfUBxC2o5Ci36m0.roa (raw, json)
Hash identifier:          0xEUcG7sHwDRILOo98qDKEy+k04HnajY0Lu0XSxmDN4=
Subject key identifier:   B9:6E:8C:A8:D5:72:B5:5A:EC:B1:F5:01:C4:2D:A8:E4:28:B7:EA:6D
Certificate issuer:       /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial:       019B797E3AFCD850526A645A771D2154B973
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/uW6MqNVytVrssfUBxC2o5Ci36m0.roa
Signing time:             Thu 01 Jan 2026 12:17:54 +0000
ROA not before:           Thu 01 Jan 2026 12:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39380
IP address blocks:        91.209.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:3a:fc:d8:50:52:6a:64:5a:77:1d:21:54:b9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
        Validity
            Not Before: Jan  1 12:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b96e8ca8d572b55aecb1f501c42da8e428b7ea6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:4d:8b:a6:d3:e8:cc:05:15:66:23:ee:39:
                    49:93:c5:8f:0b:15:0d:b4:43:7d:12:ba:b0:1b:2e:
                    cf:89:24:18:73:1d:bb:20:b3:ca:94:a6:66:45:17:
                    d0:e8:69:70:61:27:d4:7d:0f:2d:ce:11:1c:6f:7c:
                    5f:6c:9c:50:42:42:c6:e3:26:31:8b:c8:33:57:d1:
                    89:98:db:d8:6e:36:e4:3d:05:61:bf:63:f7:95:91:
                    d8:b7:ef:15:f9:61:5a:76:5e:a2:dc:32:c6:bf:f2:
                    17:8a:3c:b9:a5:21:dd:93:91:eb:11:f4:41:a2:00:
                    ea:09:43:b1:9a:df:d9:66:9f:18:5a:71:9c:c1:fb:
                    8b:42:95:5a:99:5b:bc:bf:50:1a:98:4e:5e:dd:d0:
                    8e:05:d2:26:30:df:b9:f8:86:49:54:c5:a2:ae:bb:
                    4f:9c:95:04:92:0b:82:a7:f5:3b:2e:b8:65:ca:dd:
                    e1:24:31:dc:a8:9b:c0:4c:12:99:6b:f7:0e:1c:b3:
                    e5:2c:c8:98:5c:9d:04:08:14:d0:95:ac:e9:7d:03:
                    0a:c1:f6:33:f3:72:8e:31:69:c1:30:fa:c1:fb:aa:
                    83:4e:3e:67:3e:a4:07:98:4f:04:12:3b:4d:1f:1b:
                    23:a7:c7:3d:2b:45:04:f0:09:f1:77:83:24:4b:38:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6E:8C:A8:D5:72:B5:5A:EC:B1:F5:01:C4:2D:A8:E4:28:B7:EA:6D
            X509v3 Authority Key Identifier:
                keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/uW6MqNVytVrssfUBxC2o5Ci36m0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:84:79:53:cd:88:26:2a:cf:c8:0a:9b:68:ed:2b:8c:db:32:
         54:e7:06:f0:77:e2:20:70:af:a1:3a:2f:c2:28:b1:b3:8d:c9:
         18:80:c1:91:f2:b2:14:bd:ec:3c:9a:2e:a6:22:7b:0b:7e:2b:
         a3:8d:a8:e9:0c:90:7b:32:ce:24:89:ad:f6:37:60:c2:6c:37:
         b3:b8:62:7b:29:be:1f:a1:ec:2a:bd:f3:dc:0b:06:1b:a0:3e:
         f5:d7:fa:7a:d3:6f:8f:4b:1d:fc:9c:8d:83:1d:07:75:9d:43:
         c7:5e:24:8b:b8:88:12:2d:a2:05:c3:66:69:b5:36:f8:56:c7:
         ce:aa:4e:69:14:03:b0:15:cf:45:e6:dc:82:bd:60:61:62:59:
         ca:81:56:84:8b:41:8d:4b:8d:a6:96:32:89:10:fd:f4:3d:83:
         69:a6:13:f0:7b:b1:29:30:b7:ac:07:5e:09:98:0c:8b:8b:58:
         39:d9:62:9f:ca:da:06:23:a7:1f:36:68:01:55:f9:84:0c:1d:
         6e:06:c1:59:78:48:5b:36:38:50:d0:6b:5e:ad:f9:c0:00:58:
         05:39:f2:19:fa:76:7b:cc:61:b9:b9:b3:56:34:82:39:40:06:
         bf:14:98:39:10:f7:87:39:7e:fb:4c:65:0d:ef:37:c1:07:91:
         36:b1:e9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:16 2026 by rpki-client