This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/9zqsNEeSAsd4KPkjQphjUUcz4Fk.roa
File:                     9zqsNEeSAsd4KPkjQphjUUcz4Fk.roa (raw, json)
Hash identifier:          bkExPcU8J676GVwwzpIBRh1+JT4P+zvjVqg3r38ok4Q=
Subject key identifier:   F7:3A:AC:34:47:92:02:C7:78:28:F9:23:42:98:63:51:47:33:E0:59
Certificate issuer:       /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial:       019B7DCA6F26C3620E9577129EEB3CC109D0
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/9zqsNEeSAsd4KPkjQphjUUcz4Fk.roa
Signing time:             Fri 02 Jan 2026 08:19:37 +0000
ROA not before:           Fri 02 Jan 2026 08:19:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210593
IP address blocks:        91.247.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:6f:26:c3:62:0e:95:77:12:9e:eb:3c:c1:09:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
        Validity
            Not Before: Jan  2 08:19:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f73aac34479202c77828f923429863514733e059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:be:11:9a:d9:c6:50:d3:7c:e1:9b:64:29:
                    b8:e3:18:ba:2b:bd:98:1f:8f:6a:9e:43:cc:c6:35:
                    31:9f:7a:bb:a7:51:fd:e3:2f:00:a6:2d:54:e9:5b:
                    97:b6:d3:57:63:8b:b2:f6:e3:92:29:60:1e:45:f6:
                    ec:2f:6e:3c:f1:2d:5f:ba:87:03:fc:b7:e4:70:41:
                    58:13:e5:4f:73:01:80:a2:68:49:90:2e:bf:6b:c3:
                    0b:46:5e:30:81:80:e7:e1:07:7a:3c:44:d7:33:96:
                    3e:01:79:c5:79:6a:63:e8:80:fa:d6:46:74:3d:d4:
                    3d:2f:ec:3c:c1:0d:ac:c2:46:b0:98:e9:ea:6a:7f:
                    06:e1:9a:92:e9:7e:79:31:aa:6c:0e:e4:90:53:e4:
                    03:c1:e7:57:f8:a3:7d:2f:88:83:0e:a8:22:75:44:
                    e3:07:bb:d8:5d:97:35:83:e7:6c:e9:d6:8e:f3:bc:
                    5d:6f:3d:07:f4:57:d2:d0:9c:54:26:83:1d:1a:93:
                    d5:de:64:17:47:cf:9d:28:77:fb:24:5a:43:d9:47:
                    45:f6:8c:be:04:e5:03:1c:a1:96:7e:38:c1:be:10:
                    84:71:06:57:69:d9:04:0d:cb:7e:00:aa:3c:b6:d9:
                    36:21:d8:06:e1:25:48:c7:3e:be:d1:cd:30:19:8f:
                    03:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:AC:34:47:92:02:C7:78:28:F9:23:42:98:63:51:47:33:E0:59
            X509v3 Authority Key Identifier:
                keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/9zqsNEeSAsd4KPkjQphjUUcz4Fk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.247.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:f6:0a:ed:dd:0a:a0:b2:66:53:7e:e6:78:e7:a5:56:b8:
         2e:95:f1:f6:12:d7:f0:09:6a:b8:66:88:5c:ce:d5:71:5f:d9:
         5e:3f:f8:65:33:8c:50:b6:95:34:dc:46:62:2a:21:67:06:34:
         18:ba:2f:60:27:a8:80:ce:6e:a1:5d:34:55:61:14:f0:5f:71:
         f5:85:19:c9:7a:b3:61:66:b8:d6:10:b1:fd:0d:9c:55:73:c8:
         3f:e3:19:04:69:1a:71:e5:a8:80:e8:99:24:b3:a0:d3:a6:11:
         ea:94:30:84:6f:64:de:67:c5:5c:19:a5:9b:b9:c7:22:57:ff:
         c2:62:7c:70:e6:0b:c9:88:af:ae:d3:ce:dc:79:6b:ff:32:d8:
         da:52:84:38:89:4d:cf:b6:8f:a3:3d:b8:36:e4:36:72:a5:61:
         bb:29:e2:a3:dc:1e:26:76:12:4e:8d:87:9c:48:66:5c:dd:8c:
         8e:cd:f7:41:87:93:7e:dc:c2:71:26:84:67:d3:94:d7:d4:50:
         8a:41:cc:90:9a:f3:13:32:90:8d:a3:f1:5d:4a:9f:b1:1e:b6:
         10:10:5d:f5:b2:31:6a:f4:9d:73:12:71:56:33:43:9a:68:86:
         3e:80:37:e6:af:ca:59:d9:c7:55:f9:1c:c3:f7:90:95:36:ec:
         1a:cd:db:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:19 2026 by rpki-client