This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa
File:                     1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa (raw, json)
Hash identifier:          2kZ069SCXyvjYNeKIO+pvEFPTW/9AX8f/8u5tWS3u3U=
Subject key identifier:   F8:DA:3C:26:70:97:A1:99:8D:BF:01:8E:B8:FC:0A:AE:66:18:27:A7
Certificate issuer:       /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial:       019B77C6BE351B39AFEF58AAE3E1C515D768
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa
Signing time:             Thu 01 Jan 2026 04:17:51 +0000
ROA not before:           Thu 01 Jan 2026 04:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51815
IP address blocks:        91.226.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:be:35:1b:39:af:ef:58:aa:e3:e1:c5:15:d7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
        Validity
            Not Before: Jan  1 04:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f8da3c267097a1998dbf018eb8fc0aae661827a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:0f:6e:4c:15:c2:01:2e:3f:ca:5f:7d:3d:
                    8e:8f:c9:6d:12:89:46:03:f1:d2:4a:47:74:84:c3:
                    b8:c2:da:b3:f7:0f:4f:e0:62:6f:00:f3:a9:83:a8:
                    24:43:2b:8e:7e:ba:dd:e1:50:09:52:cc:a3:98:ba:
                    0f:33:75:e0:bf:98:21:09:01:67:a2:65:2b:4e:5d:
                    ef:25:60:58:15:c0:7a:77:75:4a:02:1a:0f:e5:15:
                    7c:32:de:6e:ef:8e:44:c9:ea:f2:d5:f0:f3:3b:bf:
                    84:bc:77:3b:9b:ca:0a:0e:d8:e4:c4:6f:c1:96:90:
                    f0:ff:b0:f7:43:47:ca:46:54:1d:a3:42:72:62:7e:
                    51:fa:51:37:6d:fe:60:ed:61:8c:34:30:65:e0:32:
                    a9:e6:3b:65:6a:47:81:82:bc:6c:00:bc:0e:0c:0e:
                    60:2e:51:7b:b9:bc:f3:ec:f7:9c:9b:92:78:39:12:
                    7e:29:4d:53:33:f2:a8:67:3b:d0:ae:62:4e:ab:11:
                    a4:91:8e:46:67:94:84:78:59:fd:5e:0b:d8:46:62:
                    e7:1e:36:73:8c:0c:85:ac:40:dc:1a:7a:84:04:dc:
                    4d:b5:0d:c3:15:f6:a6:35:6d:2f:06:a6:b2:f7:0b:
                    ca:a8:ea:6a:6e:80:ce:11:8b:f6:fe:82:c3:62:60:
                    dc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DA:3C:26:70:97:A1:99:8D:BF:01:8E:B8:FC:0A:AE:66:18:27:A7
            X509v3 Authority Key Identifier:
                keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:7b:2c:c2:23:05:59:d4:6d:69:0f:54:f9:b9:98:3b:18:
         d9:2c:bb:ad:06:56:5c:4e:a4:a4:0a:4d:ad:db:72:83:73:32:
         8a:a3:df:b5:e2:20:ba:a0:a0:32:87:b5:51:81:47:dc:10:f4:
         d0:c3:02:29:e4:36:f8:44:64:9f:47:ae:ce:ca:f2:60:82:6d:
         6b:e5:01:e2:bb:93:b6:d9:5a:ee:f5:9a:04:14:86:22:7e:41:
         b2:d4:e3:19:64:0d:dd:09:e5:53:55:a9:76:78:b0:3e:aa:67:
         ee:3a:31:5b:49:c2:f6:46:d7:76:b3:48:9d:00:0c:cc:97:b4:
         e2:f2:61:e9:24:d4:19:5e:14:00:43:e6:b4:3f:32:f5:81:8b:
         ca:7f:51:d7:a6:e0:50:f8:88:d0:c2:61:0e:ae:cc:61:52:e6:
         20:50:4b:45:29:c3:9d:46:33:2e:b2:7c:39:2b:9a:9e:de:b1:
         28:67:df:c2:a7:8f:3e:5b:5e:4b:f1:f7:09:fc:36:e3:9d:a7:
         12:14:ad:f4:d4:e9:7d:36:1f:b3:bd:a0:c7:2e:e0:73:87:b8:
         16:7e:04:fc:46:f0:a6:3a:b1:d0:13:3a:c1:73:56:76:58:2e:
         d6:07:3f:41:02:46:0c:6b:ac:7d:08:61:5a:0c:ea:38:10:81:
         bc:79:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:25:59 2026 by rpki-client