This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/vP550p7smweDyzsFJJdi4XYXyu4.roa
File:                     vP550p7smweDyzsFJJdi4XYXyu4.roa (raw, json)
Hash identifier:          yk6RvM+MwSA+1cZ2k4NblzZafqg5JzamkxWGdJ15e3A=
Subject key identifier:   BC:FE:79:D2:9E:EC:9B:07:83:CB:3B:05:24:97:62:E1:76:17:CA:EE
Certificate issuer:       /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial:       019B78A2E7FEA3617FBDC756AF49B52F8998
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/vP550p7smweDyzsFJJdi4XYXyu4.roa
Signing time:             Thu 01 Jan 2026 08:18:20 +0000
ROA not before:           Thu 01 Jan 2026 08:18:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56717
IP address blocks:        91.227.7.0/24 maxlen: 24
                          2001:67c:2c04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:e7:fe:a3:61:7f:bd:c7:56:af:49:b5:2f:89:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
        Validity
            Not Before: Jan  1 08:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bcfe79d29eec9b0783cb3b05249762e17617caee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:be:ab:ed:28:5d:32:e1:d5:d6:cc:45:08:
                    fe:e7:68:c5:59:c9:0e:6e:42:28:5a:21:f2:23:29:
                    57:5a:75:6d:0d:45:73:85:a5:96:de:bc:22:a1:1e:
                    59:63:2b:bb:a1:02:09:3c:62:ba:d4:8e:e7:f9:93:
                    23:45:24:e5:75:f3:27:0e:5c:1e:f9:e5:5f:94:86:
                    e0:0c:1e:c0:24:87:8c:64:83:df:a3:08:25:8c:bc:
                    9b:43:9e:82:21:99:95:6d:cc:b6:50:2f:c8:0b:54:
                    59:ca:84:de:dd:b0:c4:81:1a:8d:ce:d2:ec:2a:f3:
                    23:96:c3:b4:9d:e1:f6:d2:ea:32:8b:38:ba:7b:fd:
                    6c:98:8b:a1:21:63:07:39:e1:06:ca:61:17:e0:df:
                    d7:d2:6c:b3:5c:79:3f:4d:98:ea:c3:31:39:b3:28:
                    e9:b9:8a:fa:f0:f0:d7:67:4a:f9:28:7b:43:2e:1d:
                    b2:10:5d:db:50:f6:4b:26:16:d6:3a:2a:fc:9f:e2:
                    fa:86:72:87:dc:0b:68:93:42:3b:fe:6f:81:41:7c:
                    49:ce:86:13:41:9b:e4:0b:4c:59:dc:b9:17:f2:8b:
                    d3:50:ff:56:98:e1:82:dd:e0:d5:30:c3:bb:19:67:
                    64:de:98:71:14:38:b3:be:7c:2f:34:f0:c9:22:86:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FE:79:D2:9E:EC:9B:07:83:CB:3B:05:24:97:62:E1:76:17:CA:EE
            X509v3 Authority Key Identifier:
                keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/vP550p7smweDyzsFJJdi4XYXyu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.227.7.0/24
                IPv6:
                  2001:67c:2c04::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:62:56:70:c5:8f:f7:67:ec:39:54:96:66:87:b0:a3:ad:dd:
         ed:49:84:d6:0c:dd:05:8e:2d:72:99:06:4d:24:62:0e:b2:e5:
         22:30:41:0a:d6:3a:55:8e:1d:49:e5:89:9a:cb:c8:3e:83:5c:
         9e:aa:a3:ab:a1:5d:e9:b5:40:ed:b3:ba:f3:c6:6e:95:35:b1:
         e1:f8:79:4f:ff:6a:2b:64:fa:21:cc:19:5a:bb:2f:ca:4c:bc:
         d0:db:4c:72:2f:eb:7d:a7:b9:3c:91:d6:fe:0b:37:13:9b:89:
         c4:6a:1f:6a:b4:89:37:ec:ce:96:df:46:a7:e4:07:2a:47:ad:
         5a:58:fa:1d:93:14:84:2a:da:d3:01:05:45:41:52:e2:2f:db:
         78:21:a7:68:bf:5a:d0:41:c6:21:8b:e9:97:7e:4f:98:f5:64:
         21:1f:da:37:20:b1:e7:04:38:31:0a:f4:bd:44:1a:38:70:81:
         82:b4:2b:74:83:fb:08:6f:ac:88:c9:df:4b:fe:34:e5:58:6d:
         a7:73:bc:d4:f7:9d:c2:56:0a:28:29:70:7d:d6:7a:02:5a:77:
         81:76:b7:48:28:68:be:04:d8:a2:ed:e6:dd:1a:92:31:4f:51:
         e0:f7:f4:5d:62:40:52:91:f5:5d:5e:90:ef:ea:79:b2:a7:5f:
         69:0e:14:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:02:22 2026 by rpki-client