This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/b4ywKBqNPFFV1vTj5hKhs2FJNNo.roa
File:                     b4ywKBqNPFFV1vTj5hKhs2FJNNo.roa (raw, json)
Hash identifier:          Xl3Oky1CBj0F9xsklIOKHfMBafTIaLBWaY5PspMnufw=
Subject key identifier:   6F:8C:B0:28:1A:8D:3C:51:55:D6:F4:E3:E6:12:A1:B3:61:49:34:DA
Certificate issuer:       /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial:       019B7DCB6375BB3B73A67FF0E593108424D9
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/b4ywKBqNPFFV1vTj5hKhs2FJNNo.roa
Signing time:             Fri 02 Jan 2026 08:20:39 +0000
ROA not before:           Fri 02 Jan 2026 08:20:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43061
IP address blocks:        91.223.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:63:75:bb:3b:73:a6:7f:f0:e5:93:10:84:24:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
        Validity
            Not Before: Jan  2 08:20:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f8cb0281a8d3c5155d6f4e3e612a1b3614934da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:4e:3b:47:52:91:ec:eb:e4:3e:fe:8c:81:
                    0a:73:0d:c2:1b:9a:6b:c7:1d:09:86:21:03:12:d3:
                    8e:68:0c:a5:ae:0f:2d:86:bc:4c:9c:0e:c2:b7:9d:
                    ac:87:5c:93:d4:53:fe:f9:34:e7:a3:39:58:88:42:
                    41:1e:46:ec:f0:de:9c:f7:c7:2b:9f:03:a5:8f:2b:
                    86:ab:72:46:e0:9d:47:0f:ca:f3:8e:b8:58:a3:8b:
                    a2:5c:15:ed:a9:6e:f7:36:26:ca:c9:ba:98:c0:ac:
                    d5:53:34:e6:60:5b:d3:22:59:8f:ff:32:7d:34:fc:
                    cf:b6:e8:74:08:7e:6d:f9:df:ff:81:99:a6:72:42:
                    4a:f7:bf:56:87:4b:d4:1c:3d:69:5c:93:af:55:04:
                    a3:62:7a:9b:c7:10:2e:4c:ba:f9:a8:f0:9d:46:f7:
                    f9:b8:49:b9:e1:e8:5e:bc:cb:2f:bb:e7:16:39:46:
                    fc:6d:4b:e8:68:68:3a:d4:20:ad:4a:84:9a:ba:60:
                    7f:6c:8d:95:c4:d9:bd:57:3b:61:3b:1a:17:7a:3a:
                    2a:9b:34:50:44:9d:18:f6:2b:65:61:66:6e:79:88:
                    2b:4c:29:14:61:2d:68:fd:0d:0d:6d:c0:78:73:cc:
                    9b:55:c1:42:61:b4:98:39:b5:6d:c8:b9:f7:0d:1c:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8C:B0:28:1A:8D:3C:51:55:D6:F4:E3:E6:12:A1:B3:61:49:34:DA
            X509v3 Authority Key Identifier:
                keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/b4ywKBqNPFFV1vTj5hKhs2FJNNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.223.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:e4:8a:29:0e:d9:c1:ba:d2:79:46:c9:44:33:9d:17:68:
         d3:a5:ed:e5:64:bd:a4:42:ed:2b:02:ed:96:25:b8:cd:bb:0c:
         4d:c4:e1:22:7c:20:ee:51:3a:5e:75:3c:bc:a9:44:4a:ad:aa:
         c6:65:45:69:d3:42:98:3a:85:d1:f2:d1:2e:f9:74:f1:24:67:
         46:04:e1:17:f4:1b:4b:a4:4b:25:32:3c:4f:3d:92:95:a5:af:
         13:16:fb:8d:9d:23:4e:f2:93:c1:15:03:02:3a:e4:0e:10:bb:
         a4:76:bf:ce:be:ec:9d:06:02:e0:5a:ed:97:32:68:e2:6f:00:
         1d:8c:f0:4a:07:35:16:ee:58:0e:d5:4c:1e:38:26:ac:45:39:
         70:5c:ca:7d:0e:52:68:c2:41:7a:33:d9:b9:15:bf:6a:ed:49:
         87:42:72:bc:fc:f9:bb:ed:a8:c5:65:79:43:b1:27:ae:a8:df:
         e3:52:b9:0b:30:89:29:a2:7f:39:8f:b0:4c:9d:77:95:c2:fb:
         d5:8f:d3:86:67:87:34:25:0b:b3:e2:d6:0d:41:ff:81:d0:a4:
         c3:c2:6a:66:60:68:ad:0f:79:d8:b2:88:7e:f9:db:1f:4f:0f:
         10:cf:8a:00:1f:76:ae:3b:db:5a:89:f2:e2:15:e5:da:3c:4e:
         94:93:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:21 2026 by rpki-client